Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/1/323830343a343466633a3a2f33322d3438203d3e20323637363635.roa
File:                     323830343a343466633a3a2f33322d3438203d3e20323637363635.roa (raw, json)
Hash identifier:          RsCOhvN4MGfJWmq57LP2VpX6n/NJKUkecTyptjuT3cE=
Subject key identifier:   68:E9:DA:77:76:FA:89:1F:6C:04:87:C8:71:AB:C2:A7:53:60:34:86
Certificate issuer:       /CN=32BB15FBC2CCD329839D40CEF59CEF6DFE3CDAF6
Certificate serial:       4C109104B51B1A78E4AB2F6EFF70EB10B3713802
Authority key identifier: 32:BB:15:FB:C2:CC:D3:29:83:9D:40:CE:F5:9C:EF:6D:FE:3C:DA:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32BB15FBC2CCD329839D40CEF59CEF6DFE3CDAF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/1/323830343a343466633a3a2f33322d3438203d3e20323637363635.roa
Signing time:             Thu 06 Mar 2025 16:45:58 +0000
ROA not before:           Thu 06 Mar 2025 16:40:58 +0000
ROA not after:            Thu 05 Mar 2026 16:45:58 +0000
asID:                     267665
IP address blocks:        2804:44fc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/1/32BB15FBC2CCD329839D40CEF59CEF6DFE3CDAF6.crl
                          rsync://rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/1/32BB15FBC2CCD329839D40CEF59CEF6DFE3CDAF6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32BB15FBC2CCD329839D40CEF59CEF6DFE3CDAF6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 16:53:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:10:91:04:b5:1b:1a:78:e4:ab:2f:6e:ff:70:eb:10:b3:71:38:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32BB15FBC2CCD329839D40CEF59CEF6DFE3CDAF6
        Validity
            Not Before: Mar  6 16:40:58 2025 GMT
            Not After : Mar  5 16:45:58 2026 GMT
        Subject: CN=68E9DA7776FA891F6C0487C871ABC2A753603486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cf:64:e1:4d:ea:21:a7:82:22:6f:d1:38:14:
                    dd:ad:ed:47:4b:aa:17:e7:cc:2b:5f:e4:d8:85:34:
                    27:2d:80:f2:f3:68:4b:fa:74:0c:39:37:18:46:36:
                    4b:7b:12:72:07:49:8e:df:d4:bb:2a:e2:a6:73:b1:
                    90:08:fd:8f:29:e5:db:f2:9e:a2:dd:c2:05:d5:c3:
                    08:9d:e0:12:0a:9e:ff:df:be:5e:2d:f1:0c:51:44:
                    9b:9c:4b:dc:c5:74:e0:7d:5d:da:de:0c:d8:53:ee:
                    0d:8e:d2:25:9b:65:2a:63:9d:e9:80:f8:ac:f8:e0:
                    52:e3:d4:d1:ac:6e:22:13:35:e2:fb:18:5c:c4:ec:
                    29:38:68:6c:fa:cb:21:05:0a:ad:bf:d6:5d:e8:59:
                    8c:be:c4:ce:4b:52:bc:fc:5a:fd:1c:d2:9c:16:a1:
                    d1:69:40:cc:b8:74:fd:cc:6c:8e:c8:4d:2e:af:de:
                    d2:f4:7c:49:75:8c:b0:4b:71:37:32:af:1e:fd:96:
                    00:4f:4f:d3:e7:ba:81:cc:67:db:b1:c4:a8:e1:ff:
                    33:89:20:22:c7:9e:b7:a4:5d:98:e9:b1:cc:e9:21:
                    43:fb:ed:94:5b:65:9e:63:30:68:8d:0a:bd:8f:87:
                    71:41:b6:b5:43:9f:4c:2f:a3:f1:d1:af:41:7a:50:
                    97:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E9:DA:77:76:FA:89:1F:6C:04:87:C8:71:AB:C2:A7:53:60:34:86
            X509v3 Authority Key Identifier:
                keyid:32:BB:15:FB:C2:CC:D3:29:83:9D:40:CE:F5:9C:EF:6D:FE:3C:DA:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/1/32BB15FBC2CCD329839D40CEF59CEF6DFE3CDAF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32BB15FBC2CCD329839D40CEF59CEF6DFE3CDAF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/1/323830343a343466633a3a2f33322d3438203d3e20323637363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:44fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:e1:e8:d1:4a:6e:51:84:e4:d5:67:13:bc:46:6b:e0:e3:70:
         80:55:c2:6c:b7:fb:d8:d5:52:37:54:36:fd:4c:ad:17:42:64:
         90:92:33:75:87:60:0a:c2:41:7d:e0:ca:6b:de:61:f3:ca:6a:
         c9:4c:7b:47:4b:79:c3:b3:b1:57:24:38:df:46:70:af:eb:2b:
         2b:98:dc:e3:32:c8:ec:3a:95:59:10:b2:76:7e:a0:49:27:8c:
         a5:d7:cb:ad:bb:00:26:9f:45:fc:b6:ee:1b:75:f8:1c:8a:69:
         92:aa:a7:76:73:09:6d:c7:97:71:87:26:26:2c:a7:b1:85:06:
         21:05:2f:a7:c4:94:09:a3:ae:b8:a2:c5:b2:78:b0:96:ad:be:
         58:b4:3d:ad:3d:30:68:d8:68:6e:42:f6:9f:48:2a:92:5a:22:
         64:2c:f8:be:b8:bb:d5:70:02:0c:9e:08:a0:b0:18:b3:93:1f:
         39:26:58:15:7a:a8:35:ea:ac:91:99:9e:d1:fe:d3:47:91:1f:
         a9:75:0c:1f:a7:8c:93:52:bb:06:08:48:d8:a8:67:a3:1d:84:
         69:41:8b:b8:ff:5d:60:8f:50:2e:ee:b2:83:a5:22:ff:02:15:
         fa:22:fa:95:07:64:3e:2d:2b:78:16:f4:47:8d:73:bf:35:d6:
         60:19:54:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:34:27 2025 by rpki-client