Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/1/34352e3232342e3230342e302f32322d3234203d3e20323637363635.roa
File:                     34352e3232342e3230342e302f32322d3234203d3e20323637363635.roa (raw, json)
Hash identifier:          hCE1ogHvH4qPcn8sv5t/TqhqO7XMK+TsAzSGeeGlX4c=
Subject key identifier:   40:8C:B9:F1:FC:81:CD:0D:E5:F9:7B:A5:BF:8B:4E:F9:32:DD:3B:D3
Certificate issuer:       /CN=32BB15FBC2CCD329839D40CEF59CEF6DFE3CDAF6
Certificate serial:       513A591F202C143077E27450C9A54AD7775B156B
Authority key identifier: 32:BB:15:FB:C2:CC:D3:29:83:9D:40:CE:F5:9C:EF:6D:FE:3C:DA:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32BB15FBC2CCD329839D40CEF59CEF6DFE3CDAF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/1/34352e3232342e3230342e302f32322d3234203d3e20323637363635.roa
Signing time:             Thu 06 Mar 2025 16:45:58 +0000
ROA not before:           Thu 06 Mar 2025 16:40:58 +0000
ROA not after:            Thu 05 Mar 2026 16:45:58 +0000
asID:                     267665
IP address blocks:        45.224.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/1/32BB15FBC2CCD329839D40CEF59CEF6DFE3CDAF6.crl
                          rsync://rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/1/32BB15FBC2CCD329839D40CEF59CEF6DFE3CDAF6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32BB15FBC2CCD329839D40CEF59CEF6DFE3CDAF6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 16:53:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:3a:59:1f:20:2c:14:30:77:e2:74:50:c9:a5:4a:d7:77:5b:15:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32BB15FBC2CCD329839D40CEF59CEF6DFE3CDAF6
        Validity
            Not Before: Mar  6 16:40:58 2025 GMT
            Not After : Mar  5 16:45:58 2026 GMT
        Subject: CN=408CB9F1FC81CD0DE5F97BA5BF8B4EF932DD3BD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:39:be:40:56:d4:ad:be:ad:fc:2f:b8:02:bb:
                    9f:d1:38:ca:24:eb:75:59:84:ce:9c:ee:09:83:ea:
                    13:55:6d:b4:a8:c0:8d:e2:5b:1e:18:5e:8d:44:45:
                    c2:b5:95:a4:87:a2:85:42:aa:35:e0:e6:2a:04:4e:
                    e0:88:73:1f:8e:67:d7:3e:08:44:8b:8e:83:0f:ea:
                    5b:29:ef:ba:59:83:c4:47:30:66:4f:6e:33:07:8a:
                    0d:44:3e:7a:46:38:61:ed:64:0b:a2:da:50:b7:4f:
                    d2:49:8b:db:d5:1c:84:78:41:54:8a:da:ee:ae:49:
                    66:0e:d2:d6:d8:e6:dd:9f:4e:32:f6:19:41:95:3d:
                    a8:fd:4a:72:a4:79:c2:42:27:84:41:7f:8d:de:0f:
                    5b:e8:0a:75:9e:26:ed:30:85:fb:f4:35:b5:5c:f3:
                    f0:55:34:64:63:5a:43:b0:84:a7:7d:85:8e:0b:3a:
                    1e:48:8d:7d:c2:93:f3:f9:21:23:77:b3:99:f6:6d:
                    85:67:4c:11:06:9e:cb:82:df:c3:ec:fe:bc:8a:64:
                    21:0c:da:86:ea:9e:67:a8:5b:3f:e2:9c:0b:8a:35:
                    51:e4:65:2f:45:62:57:91:d5:0f:fa:47:ff:38:4f:
                    42:8d:9c:45:0f:46:bd:f4:b1:6a:6a:34:a0:5a:96:
                    14:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:8C:B9:F1:FC:81:CD:0D:E5:F9:7B:A5:BF:8B:4E:F9:32:DD:3B:D3
            X509v3 Authority Key Identifier:
                keyid:32:BB:15:FB:C2:CC:D3:29:83:9D:40:CE:F5:9C:EF:6D:FE:3C:DA:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/1/32BB15FBC2CCD329839D40CEF59CEF6DFE3CDAF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32BB15FBC2CCD329839D40CEF59CEF6DFE3CDAF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/1/34352e3232342e3230342e302f32322d3234203d3e20323637363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:af:39:56:14:0f:8f:bd:80:84:86:d1:da:d8:bd:90:58:d7:
         6d:66:38:93:8b:36:62:a0:d6:87:a8:8a:ee:a7:a2:9f:42:54:
         1a:0d:7a:f5:e2:b0:18:e7:41:8a:7b:7f:47:a0:76:cd:b3:54:
         24:a3:96:c3:e5:8d:3c:60:f5:b6:f3:34:61:62:cd:4f:d9:82:
         0b:2d:8c:50:54:22:5d:20:20:4b:e8:9f:e1:32:0f:e1:8c:66:
         dc:2a:15:be:c1:47:a4:08:05:0f:a0:a9:57:d9:f2:da:a6:43:
         32:7a:12:30:10:94:a2:33:6a:4c:f4:59:84:f1:66:2c:52:7f:
         e1:60:0f:e1:39:2e:b2:47:da:97:b0:42:da:34:0e:40:e0:0a:
         3d:eb:00:73:81:3f:4b:7d:1d:96:ad:08:16:eb:d3:bc:da:70:
         07:b3:f3:53:73:5d:91:be:54:84:18:04:d2:99:29:61:4a:b7:
         73:90:49:3f:0a:61:e0:1d:ab:a7:ff:2c:43:f8:c8:85:2f:12:
         51:c7:28:09:93:de:99:16:5d:57:33:e4:68:dd:c5:e6:fc:83:
         8e:48:59:32:f9:49:1e:87:15:0c:e6:79:24:cd:94:54:18:6a:
         ac:16:3c:d9:8d:67:d5:60:b7:e9:4f:45:a8:52:a5:6f:bc:4e:
         b4:9c:ea:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:53:26 2025 by rpki-client