Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/34352e3138372e3132312e302f32342d3234203d3e20323638353436.roa
File:                     34352e3138372e3132312e302f32342d3234203d3e20323638353436.roa (raw, json)
Hash identifier:          omEnbemDArEhscDOt1sUNnHwRiqWGmkNbbfCZbU0LXo=
Subject key identifier:   7B:19:1F:4F:77:1A:F5:27:1D:56:84:06:8E:E2:44:DE:A9:5B:C7:02
Certificate issuer:       /CN=32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4
Certificate serial:       23F206D562BAC8548ED6725D632A454511D60CEF
Authority key identifier: 32:C3:A2:0B:EB:E1:AC:7A:6C:3E:09:58:CC:B9:71:DE:A6:4D:E1:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/34352e3138372e3132312e302f32342d3234203d3e20323638353436.roa
Signing time:             Wed 04 Jun 2025 01:05:43 +0000
ROA not before:           Wed 04 Jun 2025 01:00:43 +0000
ROA not after:            Wed 03 Jun 2026 01:05:43 +0000
asID:                     268546
IP address blocks:        45.187.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.crl
                          rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 11:40:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:f2:06:d5:62:ba:c8:54:8e:d6:72:5d:63:2a:45:45:11:d6:0c:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4
        Validity
            Not Before: Jun  4 01:00:43 2025 GMT
            Not After : Jun  3 01:05:43 2026 GMT
        Subject: CN=7B191F4F771AF5271D5684068EE244DEA95BC702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:47:ef:0c:c6:83:ba:52:02:3e:a1:0d:f7:3e:
                    83:40:1b:b8:d9:5f:9d:ff:cd:f8:d1:e6:ef:3c:9a:
                    04:21:a4:e8:a4:cd:4b:85:b7:29:53:b4:7c:c8:48:
                    d5:b1:3d:5f:b6:11:61:cd:bd:4b:af:59:33:17:b1:
                    fc:9c:5d:d6:98:3c:ff:0c:f2:65:9f:88:82:28:a2:
                    fe:be:59:fd:2f:0f:8b:00:31:91:c9:ae:b0:6f:e8:
                    35:7e:97:e9:e5:1c:70:3e:ce:b5:c8:30:73:de:a6:
                    c3:6e:75:25:bc:a7:b0:11:ea:cf:17:fd:91:b1:88:
                    cf:22:aa:7d:5f:bf:98:3a:39:1f:bb:ca:c1:be:d4:
                    36:0a:5f:18:1f:8c:bd:22:41:e6:11:f9:6d:fa:8c:
                    1e:b1:4f:1c:c5:69:44:02:35:67:d7:2c:64:2c:4d:
                    87:ff:04:47:67:95:4b:1c:45:d5:7d:49:32:68:8d:
                    25:1d:e1:6a:63:6e:d1:88:00:62:c7:56:5b:a2:94:
                    f0:17:03:d3:0f:0b:1f:25:99:d7:53:67:10:32:2d:
                    08:1b:6e:9c:d3:7c:6b:97:f3:85:13:96:f6:48:2c:
                    c4:9a:47:62:17:a4:c0:42:2e:b0:71:b9:2b:4c:8e:
                    78:6d:69:0f:49:c9:70:65:b5:ba:83:a0:e5:18:84:
                    21:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:19:1F:4F:77:1A:F5:27:1D:56:84:06:8E:E2:44:DE:A9:5B:C7:02
            X509v3 Authority Key Identifier:
                keyid:32:C3:A2:0B:EB:E1:AC:7A:6C:3E:09:58:CC:B9:71:DE:A6:4D:E1:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/34352e3138372e3132312e302f32342d3234203d3e20323638353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:63:13:70:d4:29:c9:bd:cd:58:a4:37:f6:85:d2:4f:ed:e6:
         b4:ba:bc:b0:7a:4d:a2:71:6d:b0:ce:9e:34:dc:e4:9c:af:c4:
         37:62:9f:a5:87:4e:bf:3e:3d:5d:e4:bd:4d:ff:cc:ec:8d:d0:
         73:04:16:dc:a9:ab:93:17:b2:b2:1d:fd:be:f1:b1:8f:5d:62:
         7c:90:e3:a4:f7:06:c1:66:b9:da:fa:56:69:5d:29:00:54:c8:
         30:a3:67:17:31:34:87:6a:98:84:c6:80:8e:d1:4e:3a:3e:5b:
         3e:69:90:61:1d:90:79:85:58:0c:8d:c4:47:85:a3:d8:02:76:
         da:c6:6a:0e:09:c0:88:ae:db:4e:96:63:f3:25:e5:16:e7:7d:
         89:a9:08:22:91:ca:58:bb:93:9f:6b:f6:dc:bd:e6:81:47:8f:
         37:21:07:a8:c5:9b:5f:cb:5d:8c:77:fb:cf:d1:56:6b:dd:07:
         c3:4a:cf:ce:3e:f2:a5:e5:da:04:27:00:24:2a:eb:7e:7e:fa:
         a2:d8:b7:fb:e3:2c:b6:ac:d7:19:83:63:df:5f:9a:b5:67:5a:
         41:82:5f:c2:ef:6e:09:86:fc:9d:80:1e:c4:d7:67:10:08:32:
         53:33:aa:ab:57:61:20:9b:ff:df:3e:c8:58:5c:b5:77:4a:fc:
         0a:32:b9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:33:02 2025 by rpki-client