Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/323830343a353931633a343030303a3a2f33342d3334203d3e203238333730.roa
File:                     323830343a353931633a343030303a3a2f33342d3334203d3e203238333730.roa (raw, json)
Hash identifier:          ZcCgTUlGI0QFAPxuqr/GMMVlD2CJxpmjV08/0Eix9Nk=
Subject key identifier:   08:3C:DF:89:52:52:9E:BC:A2:D3:A3:00:80:D6:55:72:CD:22:35:DE
Certificate issuer:       /CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
Certificate serial:       2FE6D6ED2047F6018CCE79880F18E04179354E11
Authority key identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/323830343a353931633a343030303a3a2f33342d3334203d3e203238333730.roa
Signing time:             Wed 23 Jul 2025 23:01:20 +0000
ROA not before:           Wed 23 Jul 2025 22:56:20 +0000
ROA not after:            Wed 22 Jul 2026 23:01:20 +0000
asID:                     28370
IP address blocks:        2804:591c:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl
                          rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 00:12:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:e6:d6:ed:20:47:f6:01:8c:ce:79:88:0f:18:e0:41:79:35:4e:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
        Validity
            Not Before: Jul 23 22:56:20 2025 GMT
            Not After : Jul 22 23:01:20 2026 GMT
        Subject: CN=083CDF8952529EBCA2D3A30080D65572CD2235DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:da:fe:06:9d:d2:97:bc:45:44:ce:8a:25:f4:
                    6e:44:50:aa:51:60:ad:61:c3:f0:30:6c:15:1b:44:
                    46:43:22:d2:9b:df:5d:54:ea:21:06:2e:7b:7b:5c:
                    4c:e7:33:59:53:42:53:d2:17:af:52:f4:43:76:fd:
                    eb:c6:88:59:4a:29:94:d2:b1:18:b2:48:b8:fe:82:
                    eb:b2:42:02:e3:34:9c:78:4d:9f:60:0f:63:e6:a4:
                    a1:a3:a9:8e:73:ed:12:24:31:e2:62:8d:74:34:8e:
                    11:8e:7b:8b:82:86:4a:69:c5:0a:ff:01:db:c4:d7:
                    2a:f6:6c:85:6e:90:7d:53:23:3a:db:ab:10:56:d5:
                    00:02:b7:36:5a:f5:65:c3:5a:6a:0c:bd:01:5e:0c:
                    49:84:88:f8:d3:bc:56:d6:88:d5:1a:c7:2a:12:7c:
                    86:2d:75:28:4c:7b:7a:1f:9d:be:ee:60:8e:8e:b1:
                    a1:8f:d3:44:a1:2b:85:f6:0a:1a:c8:59:1c:ef:c0:
                    6e:0a:62:ab:69:ea:a3:f1:aa:ad:44:5d:7f:3b:dd:
                    d2:0d:59:95:49:f9:b3:07:34:ff:c3:bd:81:10:e1:
                    36:16:1f:e8:8f:59:15:4d:e6:27:8b:08:fc:3b:97:
                    85:48:50:47:2d:f5:70:83:ca:e7:d6:3c:dc:a7:7a:
                    e0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:3C:DF:89:52:52:9E:BC:A2:D3:A3:00:80:D6:55:72:CD:22:35:DE
            X509v3 Authority Key Identifier:
                keyid:32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/323830343a353931633a343030303a3a2f33342d3334203d3e203238333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:591c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         30:a0:b4:b2:b3:b9:3b:ed:0d:34:f1:f7:2f:de:50:71:15:5b:
         7b:4b:87:ee:7f:ee:c5:84:b6:77:02:66:8a:62:0d:f3:e6:30:
         c1:87:b0:49:6d:98:20:84:fe:89:51:5b:e3:aa:18:d7:e6:7b:
         12:6e:d2:58:9b:21:f8:35:8e:71:ce:dc:68:02:71:eb:bd:14:
         fb:25:13:c2:73:7d:6e:99:80:99:9b:77:b0:06:db:56:ea:70:
         5e:50:04:ff:96:82:5a:b1:df:05:aa:13:14:ab:a4:38:7b:cb:
         f6:60:1e:4f:43:4d:8c:0c:2c:3f:23:ca:28:1a:4e:6a:3d:db:
         07:60:d4:d8:a7:fa:56:fb:c5:ac:12:d5:60:e0:6b:68:45:46:
         eb:37:b7:3e:e1:40:a0:65:9b:2c:75:ac:a4:8c:70:24:51:24:
         13:14:60:4e:a6:2c:a4:7c:e2:8c:af:69:31:c0:85:af:45:e2:
         98:75:a0:6d:35:06:1a:7f:17:95:a3:28:58:d5:e4:81:55:f8:
         86:f5:45:16:dc:74:78:55:1a:e8:5d:09:d5:34:2e:05:a1:5b:
         f1:de:58:2e:05:c2:0c:d7:a1:f0:80:d9:52:f1:2c:b2:76:5a:
         ed:d3:e3:94:44:dd:5d:81:2d:67:91:d8:76:13:07:20:fa:65:
         1f:7d:bd:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:32:18 2025 by rpki-client