Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/323830343a353264633a343030303a3a2f33362d3336203d3e20323638353436.roa
File:                     323830343a353264633a343030303a3a2f33362d3336203d3e20323638353436.roa (raw, json)
Hash identifier:          eOyYUj3TIrkVuHGFWIZfIPbzaZV4Klm4wEuM/TmgYMY=
Subject key identifier:   9A:0C:FE:E0:BC:BB:21:48:8D:44:17:9A:30:37:CC:B4:AA:DD:06:01
Certificate issuer:       /CN=32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4
Certificate serial:       16F4965F5146C4787253BB2E37E0794228B00C57
Authority key identifier: 32:C3:A2:0B:EB:E1:AC:7A:6C:3E:09:58:CC:B9:71:DE:A6:4D:E1:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/323830343a353264633a343030303a3a2f33362d3336203d3e20323638353436.roa
Signing time:             Wed 04 Jun 2025 01:05:46 +0000
ROA not before:           Wed 04 Jun 2025 01:00:46 +0000
ROA not after:            Wed 03 Jun 2026 01:05:46 +0000
asID:                     268546
IP address blocks:        2804:52dc:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.crl
                          rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 11:40:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:f4:96:5f:51:46:c4:78:72:53:bb:2e:37:e0:79:42:28:b0:0c:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4
        Validity
            Not Before: Jun  4 01:00:46 2025 GMT
            Not After : Jun  3 01:05:46 2026 GMT
        Subject: CN=9A0CFEE0BCBB21488D44179A3037CCB4AADD0601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:12:f0:3a:df:dc:95:f8:a4:5c:83:8f:d3:02:
                    46:24:dd:a9:07:11:0b:20:f8:0f:e9:02:0c:2d:60:
                    b6:ff:83:56:21:51:ae:31:ed:65:71:76:89:1f:79:
                    82:16:e0:57:83:b3:5f:2b:35:0f:d1:c3:18:74:30:
                    5d:a1:60:28:8b:82:20:7b:44:2f:76:8d:e5:2c:4c:
                    89:9a:7e:45:5d:77:1c:29:48:2c:11:f3:0d:d7:26:
                    f0:f3:80:78:57:5d:8e:f9:5b:a5:fa:47:cc:7d:85:
                    74:28:b9:8b:0e:92:15:61:21:31:85:6f:94:99:cb:
                    c0:d3:37:85:3b:9b:19:97:9a:2e:e3:8b:45:a5:0f:
                    e2:b9:79:de:bf:f6:0c:be:91:f2:39:6f:de:69:5e:
                    66:80:fc:9e:7d:22:b5:ff:60:11:de:4c:48:65:fb:
                    9f:53:bf:8c:83:2c:48:de:fe:51:c8:d2:6c:05:b1:
                    c8:8a:a0:df:67:85:12:52:80:74:c5:98:39:2b:8b:
                    b8:8b:ff:35:a6:29:02:26:a1:63:cd:20:c1:b4:76:
                    eb:d7:ac:c0:47:47:e2:7c:ef:de:c7:86:7a:88:5b:
                    98:95:09:23:12:7a:ff:33:64:47:c5:07:5e:db:65:
                    a8:ff:51:4f:c0:52:39:74:70:90:2f:07:bf:03:69:
                    55:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:0C:FE:E0:BC:BB:21:48:8D:44:17:9A:30:37:CC:B4:AA:DD:06:01
            X509v3 Authority Key Identifier:
                keyid:32:C3:A2:0B:EB:E1:AC:7A:6C:3E:09:58:CC:B9:71:DE:A6:4D:E1:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/323830343a353264633a343030303a3a2f33362d3336203d3e20323638353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:52dc:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5d:67:6e:d0:b8:19:57:2e:91:77:3f:b1:e1:74:90:aa:2d:3c:
         97:94:7e:18:08:fb:36:a5:3f:7b:5d:30:d4:b3:9e:2b:fe:e0:
         5a:5f:21:06:d1:ea:c3:91:66:4b:f7:c1:2f:e6:67:ac:c9:a6:
         36:ab:2f:22:cf:e5:4e:1d:d4:55:a6:bf:8e:de:07:99:e9:90:
         46:0f:18:0b:3d:29:31:af:6e:27:3c:7c:8c:d3:f3:a7:62:c7:
         5f:16:33:69:9f:ea:f3:f0:50:15:b1:f1:6e:c4:2e:f4:62:89:
         19:3e:5e:9b:8f:8b:d2:bf:ac:99:e1:26:f9:90:6e:5c:26:8b:
         7c:68:81:d7:99:e1:44:69:0d:ed:79:69:95:b8:9b:09:1d:90:
         0a:53:2c:1f:de:91:f2:df:88:6b:56:f0:a7:57:0a:a1:85:c2:
         46:0f:06:57:f1:6d:a0:81:b6:ee:34:c7:3b:b7:2b:8d:f0:a5:
         29:0f:e5:9f:10:2c:f8:a7:73:0a:e7:00:eb:c3:19:c6:1e:41:
         3a:75:05:5b:1a:54:3c:73:91:cd:d6:2f:e4:58:30:76:c7:44:
         00:19:7a:83:28:7d:22:63:1c:a9:39:52:40:40:af:1d:21:c7:
         1c:40:1d:a9:ca:ba:d0:7a:21:a4:9e:07:a4:a8:bc:a5:07:cd:
         e2:b8:26:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:05:10 2025 by rpki-client