Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/323830343a353931633a3a2f33342d3334203d3e203238333730.roa
File:                     323830343a353931633a3a2f33342d3334203d3e203238333730.roa (raw, json)
Hash identifier:          wpEPBh6PBU2J98xVqZ/ePQqdf/KwW8RV8S2n9PzQaTY=
Subject key identifier:   7E:28:29:3B:33:5E:8D:7F:8A:FA:A4:8B:88:32:B1:F3:8D:13:A4:69
Certificate issuer:       /CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
Certificate serial:       6F5F4F5922860E80F40A8DD77141DBBCD2E5440D
Authority key identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/323830343a353931633a3a2f33342d3334203d3e203238333730.roa
Signing time:             Wed 23 Jul 2025 23:00:47 +0000
ROA not before:           Wed 23 Jul 2025 22:55:47 +0000
ROA not after:            Wed 22 Jul 2026 23:00:47 +0000
asID:                     28370
IP address blocks:        2804:591c::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl
                          rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 00:12:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:5f:4f:59:22:86:0e:80:f4:0a:8d:d7:71:41:db:bc:d2:e5:44:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
        Validity
            Not Before: Jul 23 22:55:47 2025 GMT
            Not After : Jul 22 23:00:47 2026 GMT
        Subject: CN=7E28293B335E8D7F8AFAA48B8832B1F38D13A469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:6a:af:27:69:7e:00:2d:ae:c8:fd:3f:8b:49:
                    21:83:04:19:4c:e4:48:0d:d5:c7:31:75:ad:3b:a7:
                    85:73:12:74:94:be:c3:9a:8e:05:ac:84:59:34:9a:
                    1f:7b:04:91:94:e1:47:8d:f8:71:40:ab:09:7a:b8:
                    4e:0f:9e:91:bf:a6:de:85:93:1e:e1:b0:24:64:fa:
                    d7:2a:65:c0:ff:01:2e:6a:2e:ed:61:0d:1e:3c:2b:
                    c4:11:58:09:70:49:9f:95:6d:9e:09:26:53:3a:a7:
                    57:3c:48:28:ad:13:c8:ea:d4:1a:c7:42:e9:32:ed:
                    26:4d:87:7e:a4:ca:64:95:50:23:79:f9:0b:4d:59:
                    b4:7c:cb:55:dc:bc:0f:39:19:6e:22:ff:6b:60:b7:
                    05:de:e5:17:e4:09:db:0c:bb:14:60:9e:d7:e1:f1:
                    86:95:bd:a1:7e:32:06:f9:44:32:c5:bd:cc:a3:e6:
                    a3:51:6a:ac:6e:12:6d:f6:fd:b7:29:58:6c:6e:5b:
                    0d:f2:ef:bb:c1:15:86:ea:d8:ef:c3:c7:ec:02:3c:
                    c6:84:7c:9c:f4:e7:34:94:e9:c1:95:9a:7d:da:1b:
                    9a:e4:d1:44:b3:e1:c2:76:e1:6c:9c:e7:0d:6a:82:
                    2c:aa:7f:0d:ce:70:3d:3a:28:d0:4c:7f:60:05:61:
                    0c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:28:29:3B:33:5E:8D:7F:8A:FA:A4:8B:88:32:B1:F3:8D:13:A4:69
            X509v3 Authority Key Identifier:
                keyid:32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/323830343a353931633a3a2f33342d3334203d3e203238333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:591c::/34

    Signature Algorithm: sha256WithRSAEncryption
         84:31:29:2e:c6:2c:ae:ad:e6:69:19:63:c7:ea:6c:d4:55:74:
         b5:5c:34:26:8d:56:e6:42:48:73:2e:bc:84:bf:61:83:81:60:
         38:ad:d6:c3:63:7f:e5:b7:dd:47:d4:95:65:63:63:f6:20:ad:
         46:b2:0b:04:4f:d6:24:c9:11:84:1d:ab:f4:f4:26:c5:09:ca:
         74:38:50:e2:8a:d6:52:8f:68:54:e4:35:34:b6:5d:91:bb:b4:
         38:7e:87:cb:03:cf:b7:fa:13:03:a8:6b:fc:f7:24:4e:50:47:
         87:96:45:be:6c:38:19:88:57:b5:bf:61:35:d5:b1:5d:f5:ab:
         68:bf:6e:ad:7b:ef:72:d5:69:23:00:6b:26:56:73:69:d4:e8:
         3b:cb:25:44:3f:28:5c:2c:af:c5:66:2c:f3:1c:35:25:d1:e3:
         e1:4c:64:6a:a1:82:30:5d:2f:35:1d:be:de:cf:87:09:2b:c3:
         f6:33:be:12:e0:43:76:28:54:09:6f:c9:7a:e0:83:92:2d:6e:
         2d:e4:aa:21:69:48:6d:09:4b:9c:76:90:69:79:f5:68:cd:5a:
         b7:9c:9d:19:5f:d3:10:b2:66:78:00:bb:c0:61:59:89:03:11:
         eb:2f:2e:5b:5d:aa:0e:06:ca:ec:f5:70:6d:52:98:41:11:3d:
         60:65:a5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:47:31 2025 by rpki-client