Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/323830343a353264633a323030303a3a2f33362d3336203d3e20323638353436.roa
File:                     323830343a353264633a323030303a3a2f33362d3336203d3e20323638353436.roa (raw, json)
Hash identifier:          zAtxjmPiFp9cJsRjlkXJxsPvivJnl8UZM+u8Ioh/WdU=
Subject key identifier:   2C:4C:4C:92:B0:97:68:45:F9:1F:AE:C6:84:D0:74:E9:30:1F:D2:37
Certificate issuer:       /CN=32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4
Certificate serial:       43E97A6375435CD863B01A0591D8BFE31FF95198
Authority key identifier: 32:C3:A2:0B:EB:E1:AC:7A:6C:3E:09:58:CC:B9:71:DE:A6:4D:E1:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/323830343a353264633a323030303a3a2f33362d3336203d3e20323638353436.roa
Signing time:             Wed 04 Jun 2025 01:16:44 +0000
ROA not before:           Wed 04 Jun 2025 01:11:44 +0000
ROA not after:            Wed 03 Jun 2026 01:16:44 +0000
asID:                     268546
IP address blocks:        2804:52dc:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.crl
                          rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 05:18:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:e9:7a:63:75:43:5c:d8:63:b0:1a:05:91:d8:bf:e3:1f:f9:51:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4
        Validity
            Not Before: Jun  4 01:11:44 2025 GMT
            Not After : Jun  3 01:16:44 2026 GMT
        Subject: CN=2C4C4C92B0976845F91FAEC684D074E9301FD237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:88:65:4c:79:80:74:76:6d:18:82:ac:b1:34:
                    58:36:a8:35:33:f7:7a:4c:df:a3:8b:a7:bc:0c:f3:
                    e1:e1:ea:d7:c7:80:d3:1b:66:c0:17:b9:0e:f6:64:
                    ad:9a:4f:9c:54:f4:26:fc:4c:28:50:04:e6:2c:71:
                    0f:b3:7e:1c:e6:a8:2b:3b:f1:57:ce:de:8b:45:c4:
                    b9:f7:21:4b:66:f8:bf:a8:92:63:a7:27:f0:3c:db:
                    40:6f:63:bb:2f:ef:c4:08:32:12:7b:dc:eb:c1:98:
                    8c:17:41:7a:8b:61:fe:e5:00:0a:bd:5e:45:a8:ba:
                    0e:ee:49:f7:56:42:89:47:4a:ba:40:e3:de:de:ec:
                    42:e4:be:e9:cb:af:33:c1:ca:cb:53:13:6b:eb:7e:
                    fb:0b:93:a9:0b:f8:d3:86:2b:57:87:b6:24:9c:21:
                    4d:88:6f:96:37:f5:99:1f:ce:18:76:31:36:f1:13:
                    bf:a9:9e:39:3a:2f:f4:32:34:16:15:01:37:21:17:
                    1a:de:eb:d8:f6:6b:d1:f2:24:3c:28:df:7a:2d:f4:
                    18:56:9d:38:37:c5:4c:cd:0d:28:86:74:c2:12:e5:
                    67:72:9a:7d:54:78:a0:bf:4e:d3:61:8e:ee:af:4c:
                    ba:11:e4:34:b2:9c:a1:88:9e:14:a1:e0:e6:1c:82:
                    9a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:4C:4C:92:B0:97:68:45:F9:1F:AE:C6:84:D0:74:E9:30:1F:D2:37
            X509v3 Authority Key Identifier:
                keyid:32:C3:A2:0B:EB:E1:AC:7A:6C:3E:09:58:CC:B9:71:DE:A6:4D:E1:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/323830343a353264633a323030303a3a2f33362d3336203d3e20323638353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:52dc:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         66:33:7a:2c:98:86:1a:05:e0:16:14:20:99:a4:56:2e:39:ae:
         a6:9a:ff:5e:75:ad:59:1b:75:8d:81:a1:26:6b:fb:7b:cc:20:
         58:ff:b5:28:9c:3c:14:69:cc:cc:6f:02:e5:34:cd:94:76:50:
         e8:68:5c:4a:d2:26:73:d1:99:40:44:10:d1:7f:21:e2:5a:07:
         1f:78:33:72:ee:fc:ad:bd:93:8a:c8:3b:5d:af:d9:f4:2c:17:
         01:89:dc:45:6a:1f:6d:8e:66:7c:f3:00:1b:28:3b:81:33:67:
         26:1e:72:48:f3:27:4a:c3:55:49:92:b5:3f:b7:ca:0c:39:34:
         f9:fb:b0:6a:ee:0c:b9:df:c5:15:16:4d:68:e9:99:0a:f1:6a:
         f4:81:c9:dd:69:01:62:2a:74:87:29:72:e7:c4:19:85:84:4d:
         7d:ef:95:fd:b6:0f:59:64:a2:3e:90:f7:bb:3d:3d:d6:53:95:
         fa:29:06:38:66:f8:36:98:b3:96:d6:62:10:22:59:ec:09:2d:
         6f:eb:de:2b:88:07:7c:ed:65:8c:2b:6d:c8:8e:01:71:a5:5a:
         dd:5a:a0:b5:72:8e:8e:05:c5:e6:b0:24:bd:aa:1c:a5:81:7f:
         1d:43:38:32:5f:c0:c2:d6:2a:ca:6b:23:ff:df:63:5d:60:89:
         a6:71:7a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:54:56 2025 by rpki-client