Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/323830343a3931303a3a2f33352d3335203d3e203533303735.roa
File:                     323830343a3931303a3a2f33352d3335203d3e203533303735.roa (raw, json)
Hash identifier:          K24v8bLMzaWz88RC68EhtPZ7j7qHjADU1Dg9CCJ5egU=
Subject key identifier:   1A:72:9D:7B:7B:7B:57:09:10:FC:1A:E2:35:E9:54:0C:78:8E:45:A5
Certificate issuer:       /CN=BA068D5846A4AF59663BC88CA78AED0F7F45CCD1
Certificate serial:       305D2E78F887863C05B177BD0AF64C68B56EF76E
Authority key identifier: BA:06:8D:58:46:A4:AF:59:66:3B:C8:8C:A7:8A:ED:0F:7F:45:CC:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA068D5846A4AF59663BC88CA78AED0F7F45CCD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/323830343a3931303a3a2f33352d3335203d3e203533303735.roa
Signing time:             Sat 17 May 2025 14:22:32 +0000
ROA not before:           Sat 17 May 2025 14:17:32 +0000
ROA not after:            Sat 16 May 2026 14:22:32 +0000
asID:                     53075
IP address blocks:        2804:910::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/BA068D5846A4AF59663BC88CA78AED0F7F45CCD1.crl
                          rsync://rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/BA068D5846A4AF59663BC88CA78AED0F7F45CCD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA068D5846A4AF59663BC88CA78AED0F7F45CCD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 01:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:5d:2e:78:f8:87:86:3c:05:b1:77:bd:0a:f6:4c:68:b5:6e:f7:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA068D5846A4AF59663BC88CA78AED0F7F45CCD1
        Validity
            Not Before: May 17 14:17:32 2025 GMT
            Not After : May 16 14:22:32 2026 GMT
        Subject: CN=1A729D7B7B7B570910FC1AE235E9540C788E45A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:3f:42:f6:2b:b1:e9:f6:17:23:2a:eb:8c:d8:
                    d0:a8:68:f7:98:58:97:3b:20:4b:fd:a0:ab:d4:5c:
                    ba:20:12:78:9b:79:48:d2:97:2d:16:af:d7:bf:c1:
                    3e:65:77:c9:64:7e:3c:2b:37:0a:4c:c9:f9:49:f4:
                    71:e7:cf:6d:fa:18:15:21:ad:d6:66:5f:58:9e:c5:
                    63:62:0e:36:24:97:6f:f8:c6:fa:a8:0b:e7:03:fe:
                    b0:d5:cb:ba:83:bc:1d:b3:b3:1e:5f:16:fa:ea:e8:
                    db:04:28:e9:80:c7:08:8d:6f:73:c0:7a:c9:e1:22:
                    6c:38:5b:3a:d9:0e:49:20:27:fd:93:18:7f:58:08:
                    9d:8a:01:72:3b:d1:eb:09:18:0a:78:20:c3:67:1e:
                    4e:cf:b7:82:27:fb:93:5d:79:b8:1e:57:15:16:ab:
                    32:49:4d:5f:73:e1:94:82:88:e8:6a:5a:84:26:6a:
                    fc:41:2c:27:0d:96:54:ec:74:37:f3:56:62:fb:e8:
                    c2:c9:a0:17:c5:28:8d:f1:20:9b:79:dc:d5:55:ea:
                    eb:d7:3f:81:b8:8e:67:46:a0:e8:60:47:9b:bb:4b:
                    f1:40:13:5a:de:f0:2c:f7:95:02:12:f1:de:83:4b:
                    c6:f5:8f:01:20:a9:aa:05:25:07:46:a8:59:f4:b2:
                    5a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:72:9D:7B:7B:7B:57:09:10:FC:1A:E2:35:E9:54:0C:78:8E:45:A5
            X509v3 Authority Key Identifier:
                keyid:BA:06:8D:58:46:A4:AF:59:66:3B:C8:8C:A7:8A:ED:0F:7F:45:CC:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/BA068D5846A4AF59663BC88CA78AED0F7F45CCD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA068D5846A4AF59663BC88CA78AED0F7F45CCD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/323830343a3931303a3a2f33352d3335203d3e203533303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:910::/35

    Signature Algorithm: sha256WithRSAEncryption
         ae:ba:21:b1:49:7f:4f:35:1a:44:03:a4:61:d1:12:88:01:77:
         50:25:f2:30:90:b5:2e:46:b7:35:1a:ec:39:65:0f:56:d7:73:
         cc:af:61:8f:f8:65:0d:df:eb:10:8f:97:b0:84:f5:82:c2:38:
         ae:1d:e4:c1:35:a6:f2:65:ad:da:8d:f1:b6:1c:0f:84:ae:1d:
         bc:7a:32:42:84:2b:b4:bd:b8:8e:b4:46:0a:4b:6b:7e:c6:31:
         c6:b5:e9:2a:4a:3c:39:62:ad:80:19:93:76:e8:90:8f:48:48:
         cb:89:1f:e0:36:8c:b7:f8:4e:7f:67:64:f9:ee:dc:86:21:e5:
         be:78:42:87:4f:ad:9c:dd:c4:6a:0b:bf:6a:fb:5b:c1:b0:d0:
         f5:47:5d:25:53:b7:5f:ce:0c:d2:4c:94:d5:1d:3f:f0:62:bf:
         fb:01:fa:aa:34:99:f0:f4:e6:c9:cb:7b:c9:cc:f4:63:37:4c:
         f6:68:76:af:cf:91:a5:35:85:19:95:d1:ba:6b:2d:ec:7c:da:
         9b:9f:2c:c3:e9:9b:68:12:62:7d:39:c3:fc:5a:57:22:2c:4c:
         fb:7a:d9:f9:6e:06:00:e4:ec:f6:c1:27:82:03:04:5e:a7:5f:
         1c:d5:3d:1f:87:8a:bf:82:aa:25:1b:ad:79:a5:c9:e9:9d:a8:
         9b:69:a1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:20:41 2025 by rpki-client