Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/34352e3138372e3132332e302f32342d3234203d3e20323638353436.roa
File:                     34352e3138372e3132332e302f32342d3234203d3e20323638353436.roa (raw, json)
Hash identifier:          oefXe+7orDxe+17NveHo7IVHEuePPJpNac/h0/GDXZM=
Subject key identifier:   1A:5C:45:3E:EE:3E:2D:16:EC:64:6B:A2:72:A3:49:DA:EB:3C:62:46
Certificate issuer:       /CN=32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4
Certificate serial:       725EA04574D66F1DCC1BA355288CEE25F0594D64
Authority key identifier: 32:C3:A2:0B:EB:E1:AC:7A:6C:3E:09:58:CC:B9:71:DE:A6:4D:E1:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/34352e3138372e3132332e302f32342d3234203d3e20323638353436.roa
Signing time:             Wed 04 Jun 2025 01:13:26 +0000
ROA not before:           Wed 04 Jun 2025 01:08:26 +0000
ROA not after:            Wed 03 Jun 2026 01:13:26 +0000
asID:                     268546
IP address blocks:        45.187.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.crl
                          rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 18:04:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:5e:a0:45:74:d6:6f:1d:cc:1b:a3:55:28:8c:ee:25:f0:59:4d:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4
        Validity
            Not Before: Jun  4 01:08:26 2025 GMT
            Not After : Jun  3 01:13:26 2026 GMT
        Subject: CN=1A5C453EEE3E2D16EC646BA272A349DAEB3C6246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c8:12:a8:e8:bf:60:6e:14:f6:eb:05:de:43:
                    13:b3:2d:e0:40:61:26:52:d8:0a:1c:4f:df:1a:ca:
                    c8:b9:55:9f:b8:2d:45:45:2d:28:f2:11:a1:bd:e0:
                    60:74:a2:57:61:a2:97:45:18:70:7d:4d:1d:20:3e:
                    b4:87:b2:a7:b7:77:45:c7:49:37:4a:ea:48:e3:f5:
                    75:ad:21:4e:91:ca:10:02:b5:ab:5a:67:2d:66:f9:
                    83:13:ef:cc:4c:fd:73:51:e4:e6:66:d9:6d:2a:e8:
                    f8:28:da:ff:4d:da:2d:ca:bb:47:fe:67:fd:43:83:
                    87:52:cb:a1:ec:be:a6:3a:93:8d:57:3f:32:87:88:
                    ff:b2:0f:22:2e:fd:72:b7:59:66:46:8d:90:c1:49:
                    d0:6e:1e:db:5a:de:6e:86:98:9a:e1:ee:1b:bf:50:
                    e7:78:06:69:14:28:c4:77:b0:6a:bf:f6:9d:22:14:
                    41:cb:76:21:db:cc:b8:fc:6e:74:a8:15:08:5e:7d:
                    ca:bb:13:ff:1d:2f:d9:01:41:40:28:36:e1:c7:fd:
                    25:9e:bd:dd:a9:db:c7:2c:88:b1:97:4a:7f:d1:c1:
                    76:8b:9d:e5:70:06:e4:57:54:7a:4b:7f:f9:d1:fa:
                    61:26:e2:df:c4:81:fe:48:26:96:41:8b:dd:26:91:
                    8c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:5C:45:3E:EE:3E:2D:16:EC:64:6B:A2:72:A3:49:DA:EB:3C:62:46
            X509v3 Authority Key Identifier:
                keyid:32:C3:A2:0B:EB:E1:AC:7A:6C:3E:09:58:CC:B9:71:DE:A6:4D:E1:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/34352e3138372e3132332e302f32342d3234203d3e20323638353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:a9:9b:0e:6e:c3:be:08:ce:a8:1d:e6:30:0d:d5:47:98:2f:
         16:e7:7b:a8:79:df:97:c2:99:0f:4f:11:00:6e:34:2e:cb:2c:
         3f:e4:e3:50:ea:15:47:4d:57:ac:88:c8:ec:b3:69:0d:b5:96:
         42:86:db:4b:4c:dd:49:5f:c2:ce:db:08:cc:82:4d:37:de:e8:
         4a:3f:86:c5:db:9b:5f:29:1a:5a:3c:2f:a7:20:05:d0:17:3c:
         fc:6d:0a:06:1c:a8:b8:b7:82:c0:28:1b:d7:7f:15:84:bd:bc:
         2a:41:2a:20:78:4a:79:09:fa:10:6b:d0:52:aa:8b:02:44:9b:
         12:ba:cc:bf:ad:25:e3:b5:cf:38:f5:1a:8d:72:e5:cc:f6:23:
         67:d5:90:4a:a9:c2:ae:f0:d7:4c:a7:87:8e:14:77:98:98:9f:
         ae:48:9b:c4:29:49:f7:15:50:b6:5d:d3:65:68:40:ff:89:58:
         0c:80:d2:70:a4:40:f5:05:7e:76:16:8f:66:f3:f3:de:e6:e2:
         c6:1a:d4:83:45:c3:e1:41:cf:20:ac:68:ff:51:d9:02:c6:77:
         d5:db:0f:04:83:b3:41:13:69:8e:6c:c0:87:d8:49:d9:31:49:
         c8:fd:07:2a:87:ab:d6:ce:b1:2f:53:fb:5b:4e:8c:41:1a:58:
         1d:89:cf:a1
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcl6gRXTWbx3MG6NVKIzuJfBZTWQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzJDM0EyMEJFQkUxQUM3QTZDM0UwOTU4Q0NCOTcxREVB
NjRERTFCNDAeFw0yNTA2MDQwMTA4MjZaFw0yNjA2MDMwMTEzMjZaMDMxMTAvBgNV
BAMTKDFBNUM0NTNFRUUzRTJEMTZFQzY0NkJBMjcyQTM0OURBRUIzQzYyNDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4yBKo6L9gbhT26wXeQxOzLeBA
YSZS2AocT98aysi5VZ+4LUVFLSjyEaG94GB0oldhopdFGHB9TR0gPrSHsqe3d0XH
STdK6kjj9XWtIU6RyhACtataZy1m+YMT78xM/XNR5OZm2W0q6Pgo2v9N2i3Ku0f+
Z/1Dg4dSy6HsvqY6k41XPzKHiP+yDyIu/XK3WWZGjZDBSdBuHtta3m6GmJrh7hu/
UOd4BmkUKMR3sGq/9p0iFEHLdiHbzLj8bnSoFQhefcq7E/8dL9kBQUAoNuHH/SWe
vd2p28csiLGXSn/RwXaLneVwBuRXVHpLf/nR+mEm4t/Egf5IJpZBi90mkYzTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUGlxFPu4+LRbsZGuicqNJ2us8YkYwHwYDVR0j
BBgwFoAUMsOiC+vhrHpsPglYzLlx3qZN4bQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkhrR1ZkQjJoUm96ZHFoSkZmZkduTmRpY0I4aG5wdDZKclJvWG1jZ0hn
NTMvMC8zMkMzQTIwQkVCRTFBQzdBNkMzRTA5NThDQ0I5NzFERUE2NERFMUI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMyQzNBMjBCRUJFMUFDN0E2
QzNFMDk1OENDQjk3MURFQTY0REUxQjQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JIa0dWZEIyaFJvemRxaEpGZmZHbk5kaWNCOGhucHQ2SnJSb1htY2dIZzUzLzAv
MzQzNTJlMzEzODM3MmUzMTMyMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzNTM0MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtu3swDQYJKoZIhvcNAQELBQADggEBAAypmw5u
w74Izqgd5jAN1UeYLxbne6h535fCmQ9PEQBuNC7LLD/k41DqFUdNV6yIyOyzaQ21
lkKG20tM3Ulfws7bCMyCTTfe6Eo/hsXbm18pGlo8L6cgBdAXPPxtCgYcqLi3gsAo
G9d/FYS9vCpBKiB4SnkJ+hBr0FKqiwJEmxK6zL+tJeO1zzj1Go1y5cz2I2fVkEqp
wq7w10ynh44Ud5iYn65Im8QpSfcVULZd02VoQP+JWAyA0nCkQPUFfnYWj2bz897m
4sYa1INFw+FBzyCsaP9R2QLGd9XbDwSDs0ETaY5swIfYSdkxScj9ByqHq9bOsS9T
+1tOjEEaWB2Jz6E=
-----END CERTIFICATE-----
Generated at Mon Jun 9 09:50:48 2025 by rpki-client