Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/323830343a353264633a3a2f33362d3336203d3e20323638353436.roa
File:                     323830343a353264633a3a2f33362d3336203d3e20323638353436.roa (raw, json)
Hash identifier:          MDESC16V0DGulJ5W/6NSFcJrK79wToWlBxIxyH7jzTg=
Subject key identifier:   7F:2D:4D:A6:4A:4D:4E:BC:02:BB:2C:47:66:8E:BF:E7:55:D5:33:38
Certificate issuer:       /CN=32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4
Certificate serial:       22B922C8ECEDFD0498B05E5661C680E3EF07CC6B
Authority key identifier: 32:C3:A2:0B:EB:E1:AC:7A:6C:3E:09:58:CC:B9:71:DE:A6:4D:E1:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/323830343a353264633a3a2f33362d3336203d3e20323638353436.roa
Signing time:             Wed 04 Jun 2025 01:05:45 +0000
ROA not before:           Wed 04 Jun 2025 01:00:45 +0000
ROA not after:            Wed 03 Jun 2026 01:05:45 +0000
asID:                     268546
IP address blocks:        2804:52dc::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.crl
                          rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 18:04:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:b9:22:c8:ec:ed:fd:04:98:b0:5e:56:61:c6:80:e3:ef:07:cc:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4
        Validity
            Not Before: Jun  4 01:00:45 2025 GMT
            Not After : Jun  3 01:05:45 2026 GMT
        Subject: CN=7F2D4DA64A4D4EBC02BB2C47668EBFE755D53338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:74:8c:3d:bb:35:91:9b:a8:5c:93:0f:e8:14:
                    db:c6:86:f0:b1:3b:68:65:ad:bb:8a:79:d1:1b:a4:
                    e5:8d:3f:b1:e4:58:d4:a2:71:0b:ab:29:01:55:44:
                    2d:3f:88:7d:f7:fa:ba:a5:02:68:c9:66:cf:ee:2b:
                    21:dd:dc:10:ea:7c:39:c4:17:9b:11:75:7e:c0:d3:
                    8f:b8:07:5c:c6:15:f5:c7:2f:09:8c:48:dc:0a:ab:
                    e5:81:69:8d:f9:9b:9c:a5:1f:c3:8d:95:02:b0:9c:
                    a5:c4:34:9b:42:43:77:0d:95:7d:45:c1:c2:4a:38:
                    f9:a1:12:e2:f7:ae:b1:a0:3d:8b:f1:cb:08:32:f5:
                    b6:af:9e:b8:cf:f1:2f:1f:c6:f4:07:fd:ec:28:7a:
                    0e:71:16:97:1b:95:5c:07:fb:21:b4:a2:92:be:6e:
                    08:63:46:66:cc:d5:8a:cb:3d:4b:b5:63:1d:43:51:
                    93:f4:97:5f:81:4a:e4:3e:3e:b4:22:ad:68:72:f4:
                    f2:90:7d:71:4d:0e:b2:fa:f9:9a:58:c0:20:40:93:
                    79:ae:59:49:ce:15:66:5c:8e:d2:b3:df:5e:27:46:
                    bf:88:9a:6a:91:6d:21:73:bd:3d:0f:b3:81:95:c9:
                    21:2f:4c:dd:69:6d:bd:a8:2a:8f:4c:5d:ed:02:5f:
                    cd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:2D:4D:A6:4A:4D:4E:BC:02:BB:2C:47:66:8E:BF:E7:55:D5:33:38
            X509v3 Authority Key Identifier:
                keyid:32:C3:A2:0B:EB:E1:AC:7A:6C:3E:09:58:CC:B9:71:DE:A6:4D:E1:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/323830343a353264633a3a2f33362d3336203d3e20323638353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:52dc::/36

    Signature Algorithm: sha256WithRSAEncryption
         50:4a:7a:b7:3d:c0:5d:a2:56:14:f2:63:bd:9d:42:16:bb:1e:
         c9:fa:0c:df:15:56:74:9d:cf:fd:84:8f:34:91:3b:98:ba:b8:
         a7:1d:b8:93:96:bf:e0:11:23:3b:78:73:23:74:56:0b:7d:75:
         cc:bb:91:71:46:35:e7:51:b2:dd:44:1f:4c:42:e6:7b:47:00:
         40:c3:6c:0f:60:c8:79:a5:b2:86:0f:9c:06:4e:a3:09:47:56:
         f5:ea:e7:88:97:80:1c:52:dd:46:2b:64:f4:bb:a3:4c:83:f0:
         da:ff:cf:58:5d:d0:cb:63:5b:2c:3a:d3:1f:cd:30:1b:19:5d:
         15:8f:96:8b:b7:98:31:e6:99:5c:0f:48:42:93:8e:69:f4:7a:
         24:51:5f:b1:77:41:69:23:51:1e:33:f2:ee:ee:0c:35:b9:5c:
         71:82:1e:06:e7:ca:0d:34:01:fd:81:f3:04:0d:35:a5:54:af:
         89:8b:90:09:74:39:63:08:00:0d:dc:15:d0:59:c1:ee:32:b9:
         f0:c1:a7:66:d7:36:aa:ad:24:f5:f1:3c:76:22:28:cf:11:cc:
         49:5c:d7:bf:3a:e5:81:6d:e4:1e:f4:7b:65:8d:a4:f5:c5:e2:
         ce:31:a0:d6:d7:7e:34:ce:ea:37:5c:9f:9d:39:36:2a:92:d0:
         43:02:dc:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 08:42:05 2025 by rpki-client