Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/34352e3136392e33322e302f32322d3232203d3e20323638313133.roa
File:                     34352e3136392e33322e302f32322d3232203d3e20323638313133.roa (raw, json)
Hash identifier:          SvM5wp+mUQ0ENMWroIm8JOwDuvZNZUFiQ6UMgh3sHj4=
Subject key identifier:   57:9D:9D:98:52:61:18:17:FE:86:42:70:05:44:80:90:C4:ED:78:6D
Certificate issuer:       /CN=FEDCFD2EE0191BA604BD915813F4DD016164EE40
Certificate serial:       37ABC9DBC7356204C2710FA9DD90C0BFB438ADF4
Authority key identifier: FE:DC:FD:2E:E0:19:1B:A6:04:BD:91:58:13:F4:DD:01:61:64:EE:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEDCFD2EE0191BA604BD915813F4DD016164EE40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/34352e3136392e33322e302f32322d3232203d3e20323638313133.roa
Signing time:             Sat 26 Apr 2025 02:15:44 +0000
ROA not before:           Sat 26 Apr 2025 02:10:44 +0000
ROA not after:            Sat 25 Apr 2026 02:15:44 +0000
asID:                     268113
IP address blocks:        45.169.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/FEDCFD2EE0191BA604BD915813F4DD016164EE40.crl
                          rsync://rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/FEDCFD2EE0191BA604BD915813F4DD016164EE40.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEDCFD2EE0191BA604BD915813F4DD016164EE40.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 05 May 2025 07:55:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:ab:c9:db:c7:35:62:04:c2:71:0f:a9:dd:90:c0:bf:b4:38:ad:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEDCFD2EE0191BA604BD915813F4DD016164EE40
        Validity
            Not Before: Apr 26 02:10:44 2025 GMT
            Not After : Apr 25 02:15:44 2026 GMT
        Subject: CN=579D9D9852611817FE86427005448090C4ED786D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9d:3b:19:19:fd:49:80:6b:cc:59:3c:d3:79:
                    d8:0e:f0:ac:96:c3:f9:e5:fb:03:1f:97:b9:f8:89:
                    22:c2:c9:4a:11:6a:cf:b1:bf:e3:bc:0b:58:cc:9d:
                    cb:f2:53:18:ba:fb:a1:e2:03:31:fc:60:e9:20:e1:
                    66:dc:88:8b:c7:6f:23:71:03:d3:29:31:33:c8:8a:
                    4c:a3:d7:fd:da:c2:76:1e:58:e1:70:68:e3:2f:1e:
                    35:5a:a2:fa:78:3f:bb:80:4f:64:da:a3:9c:71:12:
                    45:ea:97:6d:fc:d8:27:5c:b3:cd:52:e4:0f:b1:dc:
                    68:59:f3:07:57:0a:30:da:2c:14:ea:cd:8c:ce:3d:
                    1a:62:d5:4e:4b:4c:4b:3d:c0:fa:51:d0:40:da:51:
                    e0:fc:26:91:27:eb:dc:c8:86:d9:86:31:85:c4:29:
                    1c:71:bc:22:6c:92:92:ed:3d:57:aa:57:af:71:ea:
                    b6:6f:3b:4d:35:d0:d1:d7:74:1b:db:0d:9a:e8:69:
                    93:73:12:2b:72:a7:1f:bf:fd:1d:a6:97:09:43:e6:
                    68:33:f0:34:92:a4:3f:5e:89:8b:6d:8b:e3:20:e7:
                    15:8b:79:6c:12:9c:10:17:66:4a:b7:9e:02:ad:43:
                    ab:36:a0:c3:b4:d7:18:91:4e:fd:25:ba:a6:7b:38:
                    57:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:9D:9D:98:52:61:18:17:FE:86:42:70:05:44:80:90:C4:ED:78:6D
            X509v3 Authority Key Identifier:
                keyid:FE:DC:FD:2E:E0:19:1B:A6:04:BD:91:58:13:F4:DD:01:61:64:EE:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/FEDCFD2EE0191BA604BD915813F4DD016164EE40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEDCFD2EE0191BA604BD915813F4DD016164EE40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/34352e3136392e33322e302f32322d3232203d3e20323638313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:d6:14:bd:58:27:0a:fc:10:49:13:6d:51:e2:00:8e:3f:9a:
         2d:52:83:de:77:29:8f:cd:ff:eb:cc:f5:8e:9e:7c:58:b5:c0:
         6c:a8:4c:3b:fa:74:40:40:02:85:b2:e6:d4:b6:44:d6:07:90:
         ba:a6:03:5d:39:80:39:0f:db:f0:bf:13:39:a7:d4:ea:f1:41:
         55:e1:ec:7f:4f:6a:1c:4f:53:83:b5:57:b0:a3:67:03:cf:f7:
         cd:8b:66:38:78:93:b4:8a:ea:3d:fe:5c:07:4e:2a:7e:95:6c:
         34:4a:3c:6e:f4:85:13:09:fc:05:08:9b:6f:73:69:0c:84:ab:
         17:e3:10:4f:bb:30:88:87:d0:c3:fd:92:96:5b:b6:bd:49:53:
         59:85:43:cd:65:bb:12:87:0d:c9:3e:ea:ce:ba:8a:2f:37:d1:
         c1:1c:02:94:45:c3:93:d8:ab:40:ff:23:35:89:0e:e8:63:e5:
         91:b9:16:e8:3c:d0:72:c9:5f:cb:a6:fe:e9:1f:ce:78:a5:69:
         2b:36:00:ea:9c:2b:2e:13:c3:fb:97:27:39:05:2a:2f:71:04:
         f4:0d:dc:9c:df:2c:14:1a:06:ec:6f:59:1c:2c:ca:12:b9:70:
         8d:23:e1:9a:f9:49:7b:c6:ad:9c:ce:bd:6e:8b:c5:72:75:11:
         49:66:e5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 14:00:50 2025 by rpki-client