Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/0/34352e3138322e3230342e302f32322d3332203d3e20323639323337.roa
File:                     34352e3138322e3230342e302f32322d3332203d3e20323639323337.roa (raw, json)
Hash identifier:          PNCuzI9gT5YnP+UjMula6672p0wor250YvdzoBAQ+xI=
Subject key identifier:   5D:B6:8E:90:BD:EC:A2:F5:B9:94:47:69:2E:B3:36:EA:8C:C8:00:C2
Certificate issuer:       /CN=BEEC291E99280983D52B896A664497019F0107F2
Certificate serial:       4A09E4C2101F018A01BAEE99C8D44D0393B4BF55
Authority key identifier: BE:EC:29:1E:99:28:09:83:D5:2B:89:6A:66:44:97:01:9F:01:07:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEEC291E99280983D52B896A664497019F0107F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/0/34352e3138322e3230342e302f32322d3332203d3e20323639323337.roa
Signing time:             Wed 28 May 2025 19:13:14 +0000
ROA not before:           Wed 28 May 2025 19:08:14 +0000
ROA not after:            Wed 27 May 2026 19:13:14 +0000
asID:                     269237
IP address blocks:        45.182.204.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/0/BEEC291E99280983D52B896A664497019F0107F2.crl
                          rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/0/BEEC291E99280983D52B896A664497019F0107F2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEEC291E99280983D52B896A664497019F0107F2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 06:29:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:09:e4:c2:10:1f:01:8a:01:ba:ee:99:c8:d4:4d:03:93:b4:bf:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEEC291E99280983D52B896A664497019F0107F2
        Validity
            Not Before: May 28 19:08:14 2025 GMT
            Not After : May 27 19:13:14 2026 GMT
        Subject: CN=5DB68E90BDECA2F5B99447692EB336EA8CC800C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:48:c7:38:d6:8d:f6:ee:d1:09:a9:4d:d2:7b:
                    a1:d3:cc:85:ac:3a:10:df:8b:62:8b:5c:c2:6f:d6:
                    1d:83:93:76:fa:1a:7d:56:ae:be:1a:1b:42:8e:97:
                    82:67:36:6d:e4:0c:ed:0f:eb:ee:04:47:b8:7b:35:
                    2f:e2:da:92:b3:60:ff:64:63:be:0f:6e:5d:d8:1a:
                    d7:97:ee:d9:07:b2:fb:2f:6b:ac:f5:a0:10:6d:80:
                    cd:39:66:05:65:a2:f0:81:b4:30:35:4d:76:4f:1a:
                    4a:fc:7b:1e:ce:f0:74:f1:c4:9f:92:a8:f0:22:04:
                    76:61:25:cc:b5:c8:54:42:dc:47:52:b4:c1:f0:84:
                    3d:2f:ad:fb:17:01:08:fb:be:07:fc:dc:4d:e6:f7:
                    db:5e:1d:a5:32:83:40:c3:84:03:b2:45:6f:99:65:
                    0f:6b:59:ea:0d:eb:a3:ce:ba:37:47:9d:af:d3:55:
                    c1:1e:f6:26:63:29:0f:39:25:37:91:cd:7a:b5:0d:
                    d7:4d:3b:a0:31:f9:7c:15:df:1c:cf:3a:c3:25:6a:
                    76:40:d0:c2:91:4b:b0:5c:48:93:7a:7c:7f:b1:00:
                    30:3c:5c:37:5f:3d:df:92:da:52:b0:86:7c:87:34:
                    f9:2c:26:ef:19:cd:71:4d:31:fe:4c:5e:ce:5c:cc:
                    58:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B6:8E:90:BD:EC:A2:F5:B9:94:47:69:2E:B3:36:EA:8C:C8:00:C2
            X509v3 Authority Key Identifier:
                keyid:BE:EC:29:1E:99:28:09:83:D5:2B:89:6A:66:44:97:01:9F:01:07:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/0/BEEC291E99280983D52B896A664497019F0107F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEEC291E99280983D52B896A664497019F0107F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/0/34352e3138322e3230342e302f32322d3332203d3e20323639323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:1e:cb:77:0e:33:7b:8f:b5:30:cc:0d:6a:c6:84:f3:27:87:
         b8:fd:8f:66:d4:22:a3:79:b9:60:16:17:20:ae:61:6a:e1:69:
         eb:86:c5:ab:e1:05:c5:79:92:17:0b:c4:55:e0:dc:e0:3e:60:
         b7:e2:2c:86:4d:8f:74:2d:16:0b:1b:18:a6:23:45:a6:b8:a8:
         f3:17:04:16:70:74:20:63:f4:96:c8:f8:b1:bc:ad:ce:93:27:
         fb:48:85:20:2c:5b:55:6a:b1:9d:a1:a9:17:bf:0e:9c:1e:07:
         6c:50:00:67:03:ea:b4:e4:93:21:5c:21:f0:a2:22:1d:15:2f:
         5e:da:ca:93:c8:ac:69:4b:2e:3b:a3:63:5b:e5:93:76:50:67:
         87:54:f7:29:84:81:77:dc:67:b3:0c:cb:36:32:53:4b:91:af:
         8b:4b:a6:7e:4b:b3:e7:68:30:00:b8:95:76:47:22:ce:91:35:
         ef:2d:8f:42:86:e7:5c:0f:d8:b5:f6:8b:c4:e8:81:e7:f3:37:
         9c:08:a2:88:b0:92:a3:88:8e:5b:9c:54:76:d1:64:e1:d9:1b:
         02:e8:ce:9f:7f:a6:f5:d1:0c:a7:fe:4e:f0:42:2d:db:78:ef:
         d2:1a:30:0f:17:63:88:77:a1:1a:15:d1:8d:86:c7:81:e7:fd:
         f9:0d:9f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 21:12:33 2025 by rpki-client