Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HPktu2Dk7o8VanZ9fZ9p1f2dBa5DCHwa2EhiJBMjPJe2/0/323830343a326433383a3a2f33322d3333203d3e20323635323637.roa
File:                     323830343a326433383a3a2f33322d3333203d3e20323635323637.roa (raw, json)
Hash identifier:          2tTCdEspZQEE+5Y4nCrUPZ+w0SkVOUHbpei7eOjPWEE=
Subject key identifier:   A0:84:F3:FF:41:D3:FA:C7:EC:41:68:F1:D4:E9:40:ED:C9:5E:D1:E5
Certificate issuer:       /CN=1932C04D67CDB667ABEEDDFEBE7D0B09F5D2D602
Certificate serial:       0D85DC783EFFD21AFD55CE4D0CE748457E503048
Authority key identifier: 19:32:C0:4D:67:CD:B6:67:AB:EE:DD:FE:BE:7D:0B:09:F5:D2:D6:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1932C04D67CDB667ABEEDDFEBE7D0B09F5D2D602.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HPktu2Dk7o8VanZ9fZ9p1f2dBa5DCHwa2EhiJBMjPJe2/0/323830343a326433383a3a2f33322d3333203d3e20323635323637.roa
Signing time:             Thu 03 Apr 2025 17:13:35 +0000
ROA not before:           Thu 03 Apr 2025 17:08:35 +0000
ROA not after:            Thu 02 Apr 2026 17:13:35 +0000
asID:                     265267
IP address blocks:        2804:2d38::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HPktu2Dk7o8VanZ9fZ9p1f2dBa5DCHwa2EhiJBMjPJe2/0/1932C04D67CDB667ABEEDDFEBE7D0B09F5D2D602.crl
                          rsync://rpki-repo.registro.br/repo/HPktu2Dk7o8VanZ9fZ9p1f2dBa5DCHwa2EhiJBMjPJe2/0/1932C04D67CDB667ABEEDDFEBE7D0B09F5D2D602.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1932C04D67CDB667ABEEDDFEBE7D0B09F5D2D602.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 14:28:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:85:dc:78:3e:ff:d2:1a:fd:55:ce:4d:0c:e7:48:45:7e:50:30:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1932C04D67CDB667ABEEDDFEBE7D0B09F5D2D602
        Validity
            Not Before: Apr  3 17:08:35 2025 GMT
            Not After : Apr  2 17:13:35 2026 GMT
        Subject: CN=A084F3FF41D3FAC7EC4168F1D4E940EDC95ED1E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1e:a6:cd:57:d1:c4:d0:bf:37:8a:19:e2:f8:
                    66:25:38:7f:30:84:ae:87:8a:05:51:9f:0e:3d:6e:
                    77:1f:e4:9b:ce:ac:80:1e:1a:f6:f4:b3:0c:ce:0f:
                    9b:cb:84:eb:ab:2b:db:6e:54:36:76:2b:9d:9a:83:
                    7e:8d:9c:99:19:dc:10:db:79:77:7e:79:cf:c7:20:
                    a4:f1:ba:3b:87:5b:ae:32:d5:56:f9:b6:9b:01:bc:
                    5e:ce:51:54:33:69:2d:04:21:49:cd:7c:af:b3:1d:
                    f0:66:4d:9e:da:19:dc:16:26:11:b1:34:5a:90:31:
                    00:3b:86:33:43:8b:9d:6e:e9:5b:5f:92:ce:51:ae:
                    02:67:16:41:0e:16:91:87:11:28:49:fb:77:25:6b:
                    1a:13:ae:fc:f6:48:42:2d:fc:47:54:8b:86:52:6c:
                    54:2f:80:72:80:2a:c5:0a:2f:13:df:95:05:e9:9e:
                    2d:53:87:fb:ca:52:41:8a:7a:76:11:d6:a8:bf:d0:
                    3f:d1:c7:35:0c:cb:77:5b:3f:45:1e:db:6b:ca:9b:
                    73:f0:d0:a7:18:25:c4:31:6d:bf:d5:c2:54:a4:82:
                    8a:22:db:0a:f2:24:b9:ba:0b:01:38:f0:dd:88:be:
                    44:44:dd:d8:ec:d4:a6:52:df:b8:61:fc:98:7f:ba:
                    ef:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:84:F3:FF:41:D3:FA:C7:EC:41:68:F1:D4:E9:40:ED:C9:5E:D1:E5
            X509v3 Authority Key Identifier:
                keyid:19:32:C0:4D:67:CD:B6:67:AB:EE:DD:FE:BE:7D:0B:09:F5:D2:D6:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HPktu2Dk7o8VanZ9fZ9p1f2dBa5DCHwa2EhiJBMjPJe2/0/1932C04D67CDB667ABEEDDFEBE7D0B09F5D2D602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1932C04D67CDB667ABEEDDFEBE7D0B09F5D2D602.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HPktu2Dk7o8VanZ9fZ9p1f2dBa5DCHwa2EhiJBMjPJe2/0/323830343a326433383a3a2f33322d3333203d3e20323635323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d38::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:e3:01:02:8b:0e:bb:2a:81:bc:2e:2d:c6:98:f5:81:79:15:
         fe:74:8f:65:c3:d5:5d:b1:80:36:ce:ec:79:0a:8c:81:fa:d6:
         4c:10:3a:b7:06:ac:85:33:ff:8d:36:51:65:df:2e:6e:95:9e:
         c4:ae:91:7b:ee:a3:17:14:29:5c:ef:16:6d:6d:e8:c6:3b:a8:
         4e:5e:52:cf:74:48:8b:f3:ce:c0:83:de:2c:8e:06:c9:4c:c9:
         d8:d1:c0:b3:57:f6:cf:85:a9:80:ea:0d:bf:2c:e9:75:64:e6:
         75:61:2b:06:7e:ff:c0:a2:88:be:ba:a8:0e:f2:47:94:e0:2d:
         8b:b2:54:7a:7a:20:ee:ce:9b:aa:11:c5:b4:e9:e0:52:b2:c0:
         93:ec:11:89:14:71:b2:e0:fa:23:9a:40:db:d5:c3:18:55:50:
         3a:94:29:cc:91:e7:0f:16:5f:f4:ef:58:cf:aa:4b:4d:52:ee:
         30:78:f1:dc:50:9e:22:c8:bf:2b:5b:09:fd:1c:7d:46:a9:f3:
         e6:e4:c4:56:26:93:c0:49:61:67:a7:63:2c:99:7b:b3:47:f4:
         30:44:ff:98:26:48:55:07:de:85:a8:5e:31:ec:a3:07:a4:a9:
         a3:0d:1d:b8:76:c3:2d:12:a9:7f:a0:47:06:e1:ab:5e:ac:dc:
         94:58:f2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 03:53:29 2025 by rpki-client