Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/34352e3136392e31342e302f32342d3234203d3e20323638353436.roa
File:                     34352e3136392e31342e302f32342d3234203d3e20323638353436.roa (raw, json)
Hash identifier:          eJza9cuIlyXfkJ2PZLii5mhrl6tvUZxmCh4sOUICQmI=
Subject key identifier:   0B:A9:52:99:2A:B4:F5:F5:4E:72:14:63:1F:C3:D8:B6:BD:BC:F1:04
Certificate issuer:       /CN=32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4
Certificate serial:       10DF076A977F5C4A93FEC0E51119D0FC94A3E2D9
Authority key identifier: 32:C3:A2:0B:EB:E1:AC:7A:6C:3E:09:58:CC:B9:71:DE:A6:4D:E1:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/34352e3136392e31342e302f32342d3234203d3e20323638353436.roa
Signing time:             Wed 04 Jun 2025 01:05:45 +0000
ROA not before:           Wed 04 Jun 2025 01:00:45 +0000
ROA not after:            Wed 03 Jun 2026 01:05:45 +0000
asID:                     268546
IP address blocks:        45.169.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.crl
                          rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 23:03:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:df:07:6a:97:7f:5c:4a:93:fe:c0:e5:11:19:d0:fc:94:a3:e2:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4
        Validity
            Not Before: Jun  4 01:00:45 2025 GMT
            Not After : Jun  3 01:05:45 2026 GMT
        Subject: CN=0BA952992AB4F5F54E7214631FC3D8B6BDBCF104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:13:27:09:bb:dd:9e:a0:04:c2:7e:33:03:7b:
                    f3:19:19:d3:24:6d:2d:28:cd:6e:0e:cb:bf:46:b1:
                    c0:7f:31:05:35:65:6d:b8:ea:69:c2:91:d9:f3:d3:
                    96:de:87:e8:6f:1e:96:68:98:07:45:f4:5b:4a:af:
                    ec:40:74:b3:8b:f3:8c:1b:2b:63:b7:d1:0c:c1:4a:
                    54:cf:78:de:c4:b6:6d:78:05:e7:fa:fb:ee:4e:e8:
                    dd:e6:39:a6:2b:aa:8f:39:58:fc:14:8d:90:b4:98:
                    53:a2:cf:d0:77:96:48:61:3a:25:d2:81:ca:b9:f9:
                    0f:84:7c:be:cb:d3:be:62:9e:88:3d:6b:1c:a6:5f:
                    03:05:e7:5f:cc:3f:f8:14:15:e7:dc:ba:13:ff:67:
                    b4:ed:ba:7c:c4:8e:5c:2e:db:d1:ae:5f:72:51:74:
                    33:38:e8:7a:51:51:68:77:ca:3b:1d:3f:95:89:7d:
                    e4:2a:34:16:85:e9:c2:79:5f:ac:6c:eb:48:5e:0f:
                    37:5c:a9:43:5a:92:32:f2:e2:85:6c:18:73:bc:98:
                    e8:01:71:a3:7f:66:ca:82:01:4b:97:09:57:7c:ac:
                    45:b7:0a:43:47:59:a5:4d:dc:2e:be:e6:4f:a2:a5:
                    bf:65:3f:8a:79:66:75:4b:be:dc:60:2a:cf:53:8d:
                    b3:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A9:52:99:2A:B4:F5:F5:4E:72:14:63:1F:C3:D8:B6:BD:BC:F1:04
            X509v3 Authority Key Identifier:
                keyid:32:C3:A2:0B:EB:E1:AC:7A:6C:3E:09:58:CC:B9:71:DE:A6:4D:E1:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/34352e3136392e31342e302f32342d3234203d3e20323638353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:eb:3d:9c:bd:79:ab:7c:83:b3:75:b1:c7:1e:0f:e4:4f:7f:
         a6:d2:28:43:41:0d:8f:15:f6:92:af:f0:27:0f:7c:d7:0f:69:
         69:db:dc:13:28:7c:a7:18:0b:67:71:11:f6:55:f0:3f:c8:18:
         31:54:8f:44:1a:e4:36:3f:5b:47:8e:5d:c7:ae:18:86:22:ef:
         b4:39:c4:f8:9f:bd:a0:77:89:e0:a9:d1:12:88:e7:cd:92:cd:
         7f:3a:ec:94:84:60:8b:1e:87:a5:b0:93:de:d2:ce:1e:69:c0:
         39:41:92:90:ae:31:65:54:2f:79:00:f7:c9:2d:6c:5a:06:d5:
         45:fd:36:93:79:62:25:15:28:15:cb:10:84:ad:c2:75:3e:6c:
         4e:52:35:5d:c1:e7:6e:a1:c7:25:49:f4:4d:4d:b0:7b:ea:66:
         35:6d:d1:fc:4e:d2:84:6c:fe:ee:ae:fb:7c:5a:ec:e8:09:4d:
         34:64:fc:2c:aa:27:ac:4f:d3:7b:49:45:09:2a:16:ba:2f:de:
         7a:af:1d:fd:10:c6:b0:27:cf:6b:89:f0:e0:12:88:ea:9b:62:
         ac:a0:ae:5a:45:3f:f6:3f:1e:64:2f:7f:a5:4f:1b:e7:88:7d:
         19:34:ab:52:f1:cc:65:df:ef:67:25:0e:32:42:0f:0c:d0:e9:
         13:40:37:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 03:28:26 2025 by rpki-client