Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/34352e3138372e3132322e302f32342d3234203d3e20323638353436.roa
File:                     34352e3138372e3132322e302f32342d3234203d3e20323638353436.roa (raw, json)
Hash identifier:          CUBRzApTziWqi52rDLkz4tLoAI+Vzd8yIfvUh0o6Boo=
Subject key identifier:   00:46:16:30:D5:B8:A0:C0:60:64:06:15:0B:34:E1:73:C0:02:1C:92
Certificate issuer:       /CN=32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4
Certificate serial:       69428B2996CE7D8EFEA14038B6EFCDA994FEF37A
Authority key identifier: 32:C3:A2:0B:EB:E1:AC:7A:6C:3E:09:58:CC:B9:71:DE:A6:4D:E1:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/34352e3138372e3132322e302f32342d3234203d3e20323638353436.roa
Signing time:             Wed 04 Jun 2025 01:05:46 +0000
ROA not before:           Wed 04 Jun 2025 01:00:46 +0000
ROA not after:            Wed 03 Jun 2026 01:05:46 +0000
asID:                     268546
IP address blocks:        45.187.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.crl
                          rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 11:40:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:42:8b:29:96:ce:7d:8e:fe:a1:40:38:b6:ef:cd:a9:94:fe:f3:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4
        Validity
            Not Before: Jun  4 01:00:46 2025 GMT
            Not After : Jun  3 01:05:46 2026 GMT
        Subject: CN=00461630D5B8A0C0606406150B34E173C0021C92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:97:bc:ff:ff:e8:04:98:7d:d4:31:ac:34:4f:
                    15:2f:e7:cf:c5:ea:df:88:26:92:a3:a5:0c:c2:3e:
                    71:33:af:e3:68:20:9a:28:ba:0e:cf:76:17:79:5b:
                    49:fc:28:4f:05:79:09:60:ea:c1:94:ad:23:56:1a:
                    cf:d4:a0:32:b3:09:07:02:4a:2f:53:2d:24:23:25:
                    a9:1e:f2:c5:15:57:32:6d:fd:36:33:21:8f:ee:a3:
                    42:79:f1:44:c1:3d:f2:28:c6:59:41:69:a3:5e:43:
                    b7:e1:ae:ef:b6:f3:97:74:f5:43:2e:b0:a5:7a:ba:
                    f6:ad:2e:a2:bc:33:79:43:69:44:80:b2:de:36:2f:
                    b8:75:08:81:12:34:21:f4:89:61:66:a6:8f:17:03:
                    d5:65:ec:35:80:11:0e:f4:a0:a3:d2:3f:69:3e:0a:
                    c5:fe:fd:68:a3:e1:48:73:63:48:e4:26:07:0c:a1:
                    f9:8c:27:d0:a9:ec:e0:29:44:8b:db:9b:93:81:ee:
                    3d:d8:30:a7:14:05:44:8d:2a:5c:06:4c:54:43:54:
                    c1:3d:52:32:4d:b7:07:ba:08:b1:71:3a:69:9a:52:
                    f5:83:77:3a:36:e4:9f:a2:c3:aa:c9:e5:ee:56:34:
                    27:ec:aa:26:db:d9:c9:63:a3:cd:92:ab:81:52:70:
                    8d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:46:16:30:D5:B8:A0:C0:60:64:06:15:0B:34:E1:73:C0:02:1C:92
            X509v3 Authority Key Identifier:
                keyid:32:C3:A2:0B:EB:E1:AC:7A:6C:3E:09:58:CC:B9:71:DE:A6:4D:E1:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/34352e3138372e3132322e302f32342d3234203d3e20323638353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:8b:89:f2:73:73:77:d1:7b:23:0f:26:cf:be:0f:e6:3b:09:
         dc:91:51:4d:ab:5f:26:b6:b3:71:6a:86:8b:d2:e8:d4:ec:32:
         98:7c:01:de:80:0a:9f:81:0f:88:b7:18:6f:20:ba:4f:07:a9:
         1d:dc:68:8b:91:1f:ee:c7:94:b6:dc:53:c1:07:55:58:fe:ea:
         24:38:c0:89:fe:8b:8a:e3:56:7e:cd:dc:35:25:86:86:e8:f7:
         dc:c1:b9:74:a8:86:31:08:9b:75:e4:18:4a:12:d1:25:ed:ba:
         ba:11:5d:11:cc:6f:91:52:22:90:e1:53:33:f9:a6:e2:61:4f:
         c3:fd:1a:49:02:9f:09:18:6d:5f:ab:0d:b7:86:cd:e6:60:01:
         ee:c4:da:70:1f:bb:36:58:97:ee:7e:51:0c:72:4d:3d:f2:ba:
         5a:6d:4a:96:4e:97:ed:88:0d:d8:2d:ff:92:34:e6:c3:a4:3c:
         14:7f:e5:3d:66:61:5f:e2:64:0f:36:9c:4e:30:8d:ef:f8:77:
         2a:10:b6:b9:7e:0f:b4:d6:2c:3b:82:49:da:87:0e:9b:5b:80:
         2d:56:fa:88:f7:64:4c:1e:de:f6:d8:01:93:e5:36:84:2c:75:
         3f:a6:95:01:0f:43:9e:5e:60:dc:39:b3:58:be:7f:91:18:39:
         76:18:c3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:54:43 2025 by rpki-client