Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/323830343a353931633a32303a3a2f34342d3434203d3e203238333730.roa
File:                     323830343a353931633a32303a3a2f34342d3434203d3e203238333730.roa (raw, json)
Hash identifier:          GrLv3j+Sy58Xb8y7IiOpKXsuoQlSWhsTEQDnZUczfZE=
Subject key identifier:   34:3C:B3:95:F5:03:74:79:59:74:F2:40:69:FF:C1:90:90:1A:00:DC
Certificate issuer:       /CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
Certificate serial:       18A79C88DDF6764B3A184BCE6238D1F71AFEBE3C
Authority key identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/323830343a353931633a32303a3a2f34342d3434203d3e203238333730.roa
Signing time:             Wed 23 Jul 2025 23:03:54 +0000
ROA not before:           Wed 23 Jul 2025 22:58:54 +0000
ROA not after:            Wed 22 Jul 2026 23:03:54 +0000
asID:                     28370
IP address blocks:        2804:591c:20::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl
                          rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 00:12:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:a7:9c:88:dd:f6:76:4b:3a:18:4b:ce:62:38:d1:f7:1a:fe:be:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
        Validity
            Not Before: Jul 23 22:58:54 2025 GMT
            Not After : Jul 22 23:03:54 2026 GMT
        Subject: CN=343CB395F50374795974F24069FFC190901A00DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a5:80:7e:92:39:d6:4a:24:f8:8b:2e:9a:80:
                    cb:35:9c:c0:1f:58:d2:fe:b8:22:13:49:6d:ff:1a:
                    e3:a3:07:42:d1:cd:47:f7:2b:73:82:bd:38:f7:04:
                    a1:7b:a6:de:7f:4e:b0:97:b9:24:0f:72:fb:62:14:
                    05:82:1f:51:b5:b5:29:4b:3e:69:87:02:24:42:88:
                    b8:52:6c:07:9d:e7:6e:71:b1:5e:04:3f:82:02:55:
                    68:10:a6:de:56:05:3f:65:71:69:3d:47:57:a3:b0:
                    2f:69:ce:cd:0a:77:c8:6b:eb:b1:70:63:02:60:c3:
                    0c:2a:2f:0f:93:c7:17:35:35:73:c6:50:c1:5d:41:
                    0c:eb:ea:04:3d:82:23:8c:8a:03:58:07:7b:a4:1e:
                    67:9d:ea:6c:f8:65:f7:71:11:d4:ce:ab:5e:b5:38:
                    97:a9:59:24:8c:2e:2d:6e:37:17:80:3c:f1:2a:fb:
                    c0:1f:1c:e8:69:73:7e:10:11:35:36:b9:35:c0:3c:
                    4a:c6:b8:8b:75:2c:9e:d3:ea:8e:02:58:c4:83:7d:
                    72:f9:e2:65:8a:b9:8a:e3:77:5f:21:81:c4:35:6d:
                    c5:e9:60:fb:ee:ca:19:7d:07:47:f3:a8:33:e4:35:
                    a3:a6:bc:6c:38:21:cc:9f:ba:58:d1:3e:50:0f:ae:
                    20:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:3C:B3:95:F5:03:74:79:59:74:F2:40:69:FF:C1:90:90:1A:00:DC
            X509v3 Authority Key Identifier:
                keyid:32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/323830343a353931633a32303a3a2f34342d3434203d3e203238333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:591c:20::/44

    Signature Algorithm: sha256WithRSAEncryption
         99:82:82:40:dd:c5:fd:79:76:c5:55:f7:52:2e:bc:7b:05:d3:
         69:ea:5f:ae:b0:78:54:0b:b2:4e:6c:44:1d:bf:35:3c:be:37:
         43:1f:fa:b9:57:6c:71:2c:67:3f:c4:5c:1b:8b:6f:47:38:60:
         fa:56:65:a1:f6:ba:51:08:6b:cd:cf:1b:86:3c:97:ed:16:f1:
         37:93:73:0c:4c:97:ad:d7:79:83:a0:ab:7c:ca:d5:58:06:a8:
         10:1e:e1:f8:4d:9a:fe:06:a7:8c:bb:bb:c5:01:eb:99:9a:c9:
         f5:82:88:48:fd:47:b0:d5:1d:be:98:63:59:69:83:a4:fc:d5:
         0a:76:b3:0b:94:45:8b:97:0c:18:0c:42:16:ea:3a:88:f3:fb:
         09:85:9e:fa:7e:0a:06:56:da:c5:de:5b:66:b2:fb:90:81:10:
         2d:41:9a:f2:5a:72:9a:b0:12:46:41:e3:9c:41:af:57:93:16:
         a8:aa:87:19:3f:ae:6b:7e:28:10:f3:b4:7d:03:a6:85:b8:69:
         12:f2:64:49:ac:c0:bf:36:00:af:8a:9b:25:ee:04:05:65:de:
         f2:95:0d:87:fc:e1:cd:73:c2:6e:c6:98:8f:b0:43:eb:f6:6f:
         82:45:b1:91:e0:6f:8d:0b:77:22:14:2e:79:4f:dc:74:2d:41:
         7d:c1:71:a1
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUGKeciN32dks6GEvOYjjR9xr+vjwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzJBOTE1QkE1QTk3NTY4QTg3Nzg5MEQ1NURDMjg5RkZD
QjZGRUU2MDAeFw0yNTA3MjMyMjU4NTRaFw0yNjA3MjIyMzAzNTRaMDMxMTAvBgNV
BAMTKDM0M0NCMzk1RjUwMzc0Nzk1OTc0RjI0MDY5RkZDMTkwOTAxQTAwREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFpYB+kjnWSiT4iy6agMs1nMAf
WNL+uCITSW3/GuOjB0LRzUf3K3OCvTj3BKF7pt5/TrCXuSQPcvtiFAWCH1G1tSlL
PmmHAiRCiLhSbAed525xsV4EP4ICVWgQpt5WBT9lcWk9R1ejsC9pzs0Kd8hr67Fw
YwJgwwwqLw+Txxc1NXPGUMFdQQzr6gQ9giOMigNYB3ukHmed6mz4ZfdxEdTOq161
OJepWSSMLi1uNxeAPPEq+8AfHOhpc34QETU2uTXAPErGuIt1LJ7T6o4CWMSDfXL5
4mWKuYrjd18hgcQ1bcXpYPvuyhl9B0fzqDPkNaOmvGw4IcyfuljRPlAPriBVAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUNDyzlfUDdHlZdPJAaf/BkJAaANwwHwYDVR0j
BBgwFoAUMqkVulqXVoqHeJDVXcKJ/8tv7mAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHJnSkViUnNRelpQUUJCSGRrenhuZ0tLYXBpOTJGN3lDeURaYXo5clZr
RlIvMS8zMkE5MTVCQTVBOTc1NjhBODc3ODkwRDU1REMyODlGRkNCNkZFRTYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMyQTkxNUJBNUE5NzU2OEE4
Nzc4OTBENTVEQzI4OUZGQ0I2RkVFNjAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hyZ0pFYlJzUXpaUFFCQkhka3p4bmdLS2FwaTkyRjd5Q3lEWmF6OXJWa0ZSLzEv
MzIzODMwMzQzYTM1MzkzMTYzM2EzMjMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIw
MzIzODMzMzczMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHBCgEWRwAIDANBgkqhkiG9w0BAQsFAAOCAQEA
mYKCQN3F/Xl2xVX3Ui68ewXTaepfrrB4VAuyTmxEHb81PL43Qx/6uVdscSxnP8Rc
G4tvRzhg+lZlofa6UQhrzc8bhjyX7RbxN5NzDEyXrdd5g6CrfMrVWAaoEB7h+E2a
/ganjLu7xQHrmZrJ9YKISP1HsNUdvphjWWmDpPzVCnazC5RFi5cMGAxCFuo6iPP7
CYWe+n4KBlbaxd5bZrL7kIEQLUGa8lpymrASRkHjnEGvV5MWqKqHGT+ua34oEPO0
fQOmhbhpEvJkSazAvzYAr4qbJe4EBWXe8pUNh/zhzXPCbsaYj7BD6/ZvgkWxkeBv
jQt3IhQueU/cdC1BfcFxoQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:30:34 2025 by rpki-client