Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/323830343a353931633a31303a3a2f34342d3434203d3e203238333730.roa
File:                     323830343a353931633a31303a3a2f34342d3434203d3e203238333730.roa (raw, json)
Hash identifier:          J6Kg7lsC+I0vCJGJZAaO+JStWnbF1johHVjMuzvk2D4=
Subject key identifier:   AB:5F:67:8F:CE:F3:36:51:F0:A9:8D:32:4B:53:A4:97:C4:D6:77:D8
Certificate issuer:       /CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
Certificate serial:       772A4A5085C815762032A92D217D0126D9BAC1DE
Authority key identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/323830343a353931633a31303a3a2f34342d3434203d3e203238333730.roa
Signing time:             Thu 25 Jun 2026 00:03:27 +0000
ROA not before:           Wed 24 Jun 2026 23:58:27 +0000
ROA not after:            Thu 24 Jun 2027 00:03:27 +0000
asID:                     28370
IP address blocks:        2804:591c:10::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl
                          rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 14:59:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:2a:4a:50:85:c8:15:76:20:32:a9:2d:21:7d:01:26:d9:ba:c1:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
        Validity
            Not Before: Jun 24 23:58:27 2026 GMT
            Not After : Jun 24 00:03:27 2027 GMT
        Subject: CN=AB5F678FCEF33651F0A98D324B53A497C4D677D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:be:e6:e9:93:b7:e4:cd:c3:c3:d7:31:10:b5:
                    ad:6f:03:73:bd:ca:f0:da:85:a7:ba:0d:e3:bc:1c:
                    25:f0:2d:1a:d7:a5:ec:9c:34:81:67:64:03:47:2d:
                    f4:cc:ec:58:87:c4:39:e1:cd:39:7e:08:0c:9f:2a:
                    a5:f6:71:28:76:1b:f9:63:9f:1c:08:f5:a9:d9:2f:
                    a6:1c:91:1a:e3:e5:55:20:35:1d:df:5a:73:c6:cc:
                    43:70:9a:1e:f6:c7:4d:56:c4:28:c5:04:cd:94:d7:
                    0c:ba:28:27:48:04:ac:12:e4:ff:d1:80:8e:27:4e:
                    b1:40:9e:69:1c:a8:92:c9:13:62:a6:7f:12:45:6a:
                    ce:23:26:cf:f2:2f:13:c6:4b:45:2f:5d:cd:ec:56:
                    1a:e2:cf:64:13:72:0d:ab:98:57:01:02:8a:82:35:
                    b4:33:f2:bc:2d:e4:82:15:67:73:cc:53:a2:5e:2c:
                    b4:d2:40:18:66:0b:7e:0b:1c:de:bc:f4:c6:bc:a4:
                    28:ee:6c:4a:38:56:b9:0c:97:5b:8c:d3:29:29:a9:
                    39:9f:55:a9:9c:98:b6:fb:55:f9:6a:e5:54:22:d0:
                    e1:3d:eb:bf:2c:23:f7:0b:7a:cc:05:eb:b8:69:0c:
                    32:1e:97:d7:85:7a:e5:8c:ff:43:1e:d4:60:bd:c3:
                    4a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:5F:67:8F:CE:F3:36:51:F0:A9:8D:32:4B:53:A4:97:C4:D6:77:D8
            X509v3 Authority Key Identifier:
                keyid:32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/323830343a353931633a31303a3a2f34342d3434203d3e203238333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:591c:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         84:19:80:6a:6a:02:bc:e9:d8:c6:de:d8:c1:c3:04:54:2b:69:
         78:72:99:76:a8:79:4c:b6:a2:1c:f8:14:0c:be:5a:82:cf:50:
         23:63:df:80:2b:48:f3:24:db:16:d8:f9:31:93:57:45:39:51:
         c7:6c:7c:38:cd:64:c8:f2:4a:fe:5e:6f:a5:9a:92:91:69:c7:
         62:4f:00:67:fd:35:81:a5:bf:dd:1e:00:fb:e3:54:b6:85:50:
         07:56:7d:12:c9:b7:c0:ee:2d:95:a4:ad:ac:ac:e0:6a:24:b8:
         e5:61:e7:c0:ec:92:05:4e:13:d1:cb:7b:98:4d:2b:92:fa:29:
         17:cc:e2:c7:e1:19:3e:7f:82:3d:db:34:fe:bd:26:27:6a:f4:
         ad:85:59:03:46:2b:42:e5:03:08:9d:72:74:46:e6:5f:8e:bd:
         73:e5:e7:02:f9:3e:bb:9e:18:3b:3c:f8:7a:43:d9:d4:b9:5c:
         ac:4f:fb:ed:34:16:f9:ae:5f:23:5b:05:c3:ee:8a:62:b4:1d:
         a7:bc:d1:80:4b:46:4d:c0:cf:e1:c0:62:61:47:82:c8:46:8e:
         68:36:29:b9:89:8e:35:4c:79:6c:02:1c:1f:31:87:6d:bb:16:
         3b:16:ae:d4:1c:c4:84:79:68:45:91:71:1d:db:3b:57:c5:54:
         05:27:ca:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:06:15 2026 by rpki-client