Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/323830343a383333303a3a2f33342d3334203d3e20323732313832.roa
File:                     323830343a383333303a3a2f33342d3334203d3e20323732313832.roa (raw, json)
Hash identifier:          OKBGqrUMOXnEbxRXfJOKCpZwVNDbPaV3RhaqWhTf/JA=
Subject key identifier:   D3:3D:D7:A3:44:82:98:9A:91:89:F7:98:76:A4:A2:DF:2A:78:8B:8C
Certificate issuer:       /CN=32BB5184133F0AD568627FCE8DA6B0354DCE9BEC
Certificate serial:       0EF444F9C2F39FE5E0DB4CA0D8C5135B36F22AB4
Authority key identifier: 32:BB:51:84:13:3F:0A:D5:68:62:7F:CE:8D:A6:B0:35:4D:CE:9B:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32BB5184133F0AD568627FCE8DA6B0354DCE9BEC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/323830343a383333303a3a2f33342d3334203d3e20323732313832.roa
Signing time:             Fri 31 Jan 2025 12:34:34 +0000
ROA not before:           Fri 31 Jan 2025 12:29:34 +0000
ROA not after:            Fri 30 Jan 2026 12:34:34 +0000
asID:                     272182
IP address blocks:        2804:8330::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/32BB5184133F0AD568627FCE8DA6B0354DCE9BEC.crl
                          rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/32BB5184133F0AD568627FCE8DA6B0354DCE9BEC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32BB5184133F0AD568627FCE8DA6B0354DCE9BEC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 11:21:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:f4:44:f9:c2:f3:9f:e5:e0:db:4c:a0:d8:c5:13:5b:36:f2:2a:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32BB5184133F0AD568627FCE8DA6B0354DCE9BEC
        Validity
            Not Before: Jan 31 12:29:34 2025 GMT
            Not After : Jan 30 12:34:34 2026 GMT
        Subject: CN=D33DD7A34482989A9189F79876A4A2DF2A788B8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:76:ab:e4:fc:b1:e2:d6:6d:8b:c5:e0:39:45:
                    9a:71:2e:30:d9:7e:ff:27:69:3c:28:dd:16:a4:61:
                    9c:7b:9a:86:c6:49:3b:d2:1b:4c:2a:a5:9f:3c:31:
                    56:69:bd:6c:2e:33:52:a3:f4:17:01:52:52:d5:2e:
                    20:54:d8:52:c7:15:0c:7a:95:3c:68:ae:c6:32:55:
                    01:87:f1:70:57:de:73:e7:eb:c8:a7:1f:5f:c5:2c:
                    00:70:54:f2:95:93:d0:88:f2:dc:da:6b:fb:9d:f5:
                    e0:9b:47:ef:17:00:d7:2e:a9:15:ac:89:80:38:a8:
                    28:d7:cb:4e:7b:a1:81:a4:bf:6b:b8:6a:6d:fe:bb:
                    68:82:56:06:79:63:f7:d0:ee:1e:b5:0f:70:2b:87:
                    26:08:81:fc:41:ac:65:85:89:03:32:94:90:69:a6:
                    3b:7b:ab:b1:ef:38:ef:9d:88:9c:29:71:c1:f7:32:
                    36:20:d6:26:19:92:ce:7e:15:21:82:2f:c9:a9:c0:
                    ed:cd:ad:fa:db:91:00:87:aa:5d:db:5e:42:10:f1:
                    8f:2a:8d:15:22:53:80:af:a6:c6:20:55:f4:78:d0:
                    d6:50:5b:64:d6:ca:38:aa:89:68:55:52:80:99:1d:
                    02:72:f8:bd:1b:3a:4f:08:5a:f3:99:98:22:6e:17:
                    b9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:3D:D7:A3:44:82:98:9A:91:89:F7:98:76:A4:A2:DF:2A:78:8B:8C
            X509v3 Authority Key Identifier:
                keyid:32:BB:51:84:13:3F:0A:D5:68:62:7F:CE:8D:A6:B0:35:4D:CE:9B:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/32BB5184133F0AD568627FCE8DA6B0354DCE9BEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32BB5184133F0AD568627FCE8DA6B0354DCE9BEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/323830343a383333303a3a2f33342d3334203d3e20323732313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8330::/34

    Signature Algorithm: sha256WithRSAEncryption
         68:13:69:2e:e6:e0:2a:88:c4:4c:02:ae:ed:fc:af:1b:3e:52:
         a4:99:e9:fa:fd:96:6d:da:6d:31:69:52:53:b0:07:19:fa:7e:
         a1:28:57:84:83:7f:c1:57:2c:82:b0:f7:f0:1b:c7:f7:ba:0f:
         8a:95:9a:3d:ba:04:11:9b:cb:c5:91:c8:9a:77:a5:33:fe:3d:
         14:54:6d:56:74:a6:78:5c:74:5a:3a:e5:26:15:5d:f9:af:9d:
         90:ea:8f:8c:61:f1:28:ab:b7:98:4b:ec:27:94:79:47:0c:75:
         80:98:3a:85:47:97:9a:ee:50:34:16:f1:de:d8:5e:ec:57:f6:
         bb:8a:25:40:4c:59:31:42:04:57:86:6b:61:31:08:31:f0:77:
         17:c6:51:ec:b4:b1:ad:0a:18:c0:59:71:1b:38:46:80:31:b2:
         9f:20:d2:7a:20:88:d8:2e:c9:c2:ba:14:0e:0b:34:7c:ff:70:
         30:b9:d0:1a:0f:0f:06:67:7f:51:16:66:06:d9:3a:ce:2d:ee:
         30:e2:5e:f0:27:89:62:d5:c2:2e:3e:ae:75:20:f8:70:90:8e:
         13:d9:1f:8e:87:6f:79:9e:d1:6c:42:0c:03:04:ca:7f:18:5e:
         a3:84:3c:2c:ab:68:73:93:09:a9:02:a2:67:47:c7:ff:af:56:
         df:e7:dc:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:10 2025 by rpki-client