Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/34352e3136392e31332e302f32342d3234203d3e20323638353436.roa
File:                     34352e3136392e31332e302f32342d3234203d3e20323638353436.roa (raw, json)
Hash identifier:          cm1kfz3LJy1uEAH+kJkAnPj54kX9fMV29gNq4ZOUxus=
Subject key identifier:   BE:40:D5:8D:B5:B7:6C:02:32:73:72:1A:FF:20:E4:DE:C5:69:EE:C5
Certificate issuer:       /CN=32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4
Certificate serial:       3361AC164AD21AE3A644028FC91AE0442F479D47
Authority key identifier: 32:C3:A2:0B:EB:E1:AC:7A:6C:3E:09:58:CC:B9:71:DE:A6:4D:E1:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/34352e3136392e31332e302f32342d3234203d3e20323638353436.roa
Signing time:             Wed 04 Jun 2025 01:05:44 +0000
ROA not before:           Wed 04 Jun 2025 01:00:44 +0000
ROA not after:            Wed 03 Jun 2026 01:05:44 +0000
asID:                     268546
IP address blocks:        45.169.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.crl
                          rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Jun 2025 21:38:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:61:ac:16:4a:d2:1a:e3:a6:44:02:8f:c9:1a:e0:44:2f:47:9d:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4
        Validity
            Not Before: Jun  4 01:00:44 2025 GMT
            Not After : Jun  3 01:05:44 2026 GMT
        Subject: CN=BE40D58DB5B76C023273721AFF20E4DEC569EEC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ad:30:ce:67:3f:cf:23:19:bc:66:6d:03:b8:
                    ac:64:30:fe:49:32:75:46:4a:1b:b3:df:70:8d:45:
                    fc:26:42:31:0c:83:c4:52:9d:99:65:67:aa:ee:05:
                    08:e7:bb:1b:2e:d1:43:f1:73:77:8d:09:c3:e7:34:
                    b0:08:11:41:ef:f8:e6:f2:1c:98:57:3f:40:e3:00:
                    c0:3f:9d:f1:90:e3:07:37:37:63:8c:7b:46:4b:8b:
                    13:85:92:97:48:af:cc:33:a0:80:b0:6f:35:1e:08:
                    04:35:18:3a:e0:90:73:eb:3b:c2:95:52:94:8d:4e:
                    76:64:7c:05:d9:ff:dc:e2:34:87:05:62:30:08:80:
                    15:fa:10:4d:70:8d:49:48:4d:d2:8b:52:fd:28:5c:
                    f4:a2:f5:25:68:e8:3c:56:23:94:36:91:14:44:52:
                    10:7d:59:15:0e:60:e9:3f:44:4d:56:f1:0d:e3:4f:
                    6f:71:a7:ce:6d:65:c5:bd:7f:0c:50:e6:7c:73:0a:
                    78:6c:54:bb:7c:ef:e6:37:88:db:f4:4f:0a:86:af:
                    57:b2:b6:63:25:80:f2:b0:ff:22:b4:cb:c4:18:30:
                    bc:2b:16:41:ad:36:c1:5e:d2:da:de:98:a7:dc:7e:
                    1f:ea:fb:39:05:66:b5:be:56:c1:3b:eb:16:34:f2:
                    8f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:40:D5:8D:B5:B7:6C:02:32:73:72:1A:FF:20:E4:DE:C5:69:EE:C5
            X509v3 Authority Key Identifier:
                keyid:32:C3:A2:0B:EB:E1:AC:7A:6C:3E:09:58:CC:B9:71:DE:A6:4D:E1:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/34352e3136392e31332e302f32342d3234203d3e20323638353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:3f:ad:dc:bd:82:b0:c6:10:9e:b9:18:69:bb:2a:c3:eb:b5:
         23:0a:d2:dd:f7:a2:24:48:1f:27:40:70:8e:93:11:68:06:6e:
         cb:8c:54:5a:7e:09:3b:5b:eb:d5:b6:14:37:3c:6b:58:7c:0f:
         e2:ab:c2:c2:d0:88:c6:cc:4d:ec:69:3a:56:fd:06:6f:de:bf:
         33:33:b5:1b:08:b2:9a:0c:9c:e4:32:72:92:4c:07:2e:fe:3c:
         37:e5:18:39:42:08:97:64:df:2c:d1:ff:f8:e9:f2:3a:ff:79:
         b9:f3:85:45:1a:0c:71:56:d9:2c:a6:4f:83:c3:d6:e7:ae:fb:
         2b:33:e8:a6:f5:89:a2:6e:5e:67:75:e0:53:03:9c:bb:0d:fd:
         12:b4:17:42:c2:d6:ae:0b:81:6a:1b:e1:74:30:63:3c:6a:34:
         a7:42:01:91:7f:38:5a:d4:bd:29:16:0c:7a:87:62:83:6f:0a:
         01:dc:ef:64:0e:0a:b8:90:01:99:30:1b:49:4b:78:7b:42:e0:
         01:fa:6e:0c:36:a0:69:92:e7:e5:ec:a6:b2:b7:b6:ae:a3:ac:
         da:98:13:fe:3c:42:e8:a7:36:24:18:cd:e8:8e:10:c9:4b:3c:
         e3:43:4b:38:e2:38:1c:fa:12:d9:be:f4:d0:b4:df:12:18:df:
         a8:c8:6c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 14:43:47 2025 by rpki-client