Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/323830343a353931633a3a2f33322d3438203d3e203238333730.roa
File:                     323830343a353931633a3a2f33322d3438203d3e203238333730.roa (raw, json)
Hash identifier:          mIBAK2g5DXorhpMWio5R2pj8qCeuMVvqhSA3Y7GC6tM=
Subject key identifier:   04:AB:BF:CF:9C:A9:2D:B6:9E:77:01:49:F1:4D:30:2B:3D:04:37:61
Certificate issuer:       /CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
Certificate serial:       7FB6AEBB1182AFA05EA16EFD4295361552046B9C
Authority key identifier: 32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/323830343a353931633a3a2f33322d3438203d3e203238333730.roa
Signing time:             Thu 06 Mar 2025 02:07:05 +0000
ROA not before:           Thu 06 Mar 2025 02:02:05 +0000
ROA not after:            Thu 05 Mar 2026 02:07:05 +0000
asID:                     28370
IP address blocks:        2804:591c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl
                          rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 07:14:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:b6:ae:bb:11:82:af:a0:5e:a1:6e:fd:42:95:36:15:52:04:6b:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32A915BA5A97568A877890D55DC289FFCB6FEE60
        Validity
            Not Before: Mar  6 02:02:05 2025 GMT
            Not After : Mar  5 02:07:05 2026 GMT
        Subject: CN=04ABBFCF9CA92DB69E770149F14D302B3D043761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:68:00:f3:dd:72:f2:ab:21:2c:07:73:5b:f3:
                    c9:0b:2c:f1:c0:17:80:67:f6:92:73:8c:03:6a:8c:
                    c7:71:02:09:51:8a:24:88:da:66:ce:44:c4:6f:c0:
                    c8:22:30:dd:06:56:19:28:c9:bf:f2:49:de:0c:b7:
                    23:ae:d1:f5:8e:29:5a:15:bd:c8:42:ff:e1:8b:5a:
                    0c:71:44:ce:4f:5d:d2:3c:b5:e5:14:05:f5:a8:75:
                    dc:a2:d9:dd:7b:75:94:ff:a3:e6:03:ba:b1:e2:49:
                    f0:9f:fe:de:e6:14:ab:b0:a6:38:a5:fa:ed:a7:6d:
                    0b:0b:a6:a8:d8:ab:d1:68:1f:a7:c5:b8:44:a8:b4:
                    00:2f:2e:de:8c:15:6f:08:be:37:0e:69:72:8b:5b:
                    85:4e:e8:91:e2:79:0f:87:40:f9:00:67:db:50:b4:
                    e3:a2:9c:f3:7d:3c:f0:07:7e:e5:87:41:65:b2:8d:
                    6d:b9:f3:1a:ec:53:d4:98:59:66:07:eb:68:7f:93:
                    b0:44:5a:3e:69:d9:a6:63:89:4d:99:79:1e:0a:f3:
                    cf:93:df:fc:ac:5e:49:8d:4d:fe:ae:b7:7f:73:6a:
                    4d:93:f5:94:d5:26:52:f7:73:d1:29:8a:dd:cf:fa:
                    f0:04:f2:5a:64:46:29:b9:25:3a:60:cf:6e:1a:4c:
                    c5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:AB:BF:CF:9C:A9:2D:B6:9E:77:01:49:F1:4D:30:2B:3D:04:37:61
            X509v3 Authority Key Identifier:
                keyid:32:A9:15:BA:5A:97:56:8A:87:78:90:D5:5D:C2:89:FF:CB:6F:EE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32A915BA5A97568A877890D55DC289FFCB6FEE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/1/323830343a353931633a3a2f33322d3438203d3e203238333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:591c::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:42:a9:95:34:d2:e9:47:69:38:07:7c:ea:41:5a:fe:cd:62:
         3d:c2:69:bd:aa:49:17:79:3e:5b:5c:55:f0:b0:29:4a:d9:80:
         f6:16:45:d6:5d:58:9e:b3:05:be:46:d8:ea:bc:4b:2d:83:b3:
         c3:36:f2:67:69:15:91:b8:44:2e:81:c6:00:22:7d:9c:d0:c5:
         82:21:e0:2b:d3:91:4b:fc:63:cd:9c:de:81:c7:bd:6d:cb:83:
         c7:5d:8f:ea:28:68:bd:47:23:6b:3a:23:eb:b9:dc:fd:b8:27:
         d3:52:35:10:e4:65:a6:d5:34:90:53:93:e5:70:46:65:9c:8b:
         c4:19:7e:b6:50:63:c0:b8:7b:ff:b9:67:50:10:d0:66:b6:79:
         22:4e:b4:4b:fd:73:a1:ff:8d:ce:e5:42:e0:f0:8b:07:3f:c7:
         71:2b:67:ed:ce:ac:5e:53:af:19:35:25:df:09:09:13:0b:fb:
         ac:3b:d3:b7:8e:86:26:2c:1b:8c:e4:52:ef:0a:82:03:ca:6f:
         48:92:e7:1f:ba:1c:a9:8c:af:7e:d3:85:eb:28:cb:4d:e3:0c:
         ab:20:1e:d2:b7:d9:6e:f0:00:d4:cf:58:88:5b:19:26:ea:87:
         41:fa:66:cd:a1:32:29:6b:f5:cc:e5:e3:fd:46:22:14:11:56:
         03:7b:f2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 23:50:30 2025 by rpki-client