Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/34352e3136392e33322e302f32332d3233203d3e20323638313133.roa
File:                     34352e3136392e33322e302f32332d3233203d3e20323638313133.roa (raw, json)
Hash identifier:          286xxr7xH6/QZ0TUOq6gUS9jBVHl1CGvXKzhHecr4bw=
Subject key identifier:   D8:62:88:96:DD:33:F1:0A:A1:AC:63:F7:2B:58:57:CB:40:C4:1A:21
Certificate issuer:       /CN=FEDCFD2EE0191BA604BD915813F4DD016164EE40
Certificate serial:       15436CF15E310AAD840E1CCA14214D95F629BBBF
Authority key identifier: FE:DC:FD:2E:E0:19:1B:A6:04:BD:91:58:13:F4:DD:01:61:64:EE:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEDCFD2EE0191BA604BD915813F4DD016164EE40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/34352e3136392e33322e302f32332d3233203d3e20323638313133.roa
Signing time:             Sat 26 Apr 2025 02:14:38 +0000
ROA not before:           Sat 26 Apr 2025 02:09:38 +0000
ROA not after:            Sat 25 Apr 2026 02:14:38 +0000
asID:                     268113
IP address blocks:        45.169.32.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/FEDCFD2EE0191BA604BD915813F4DD016164EE40.crl
                          rsync://rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/FEDCFD2EE0191BA604BD915813F4DD016164EE40.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEDCFD2EE0191BA604BD915813F4DD016164EE40.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 19:27:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:43:6c:f1:5e:31:0a:ad:84:0e:1c:ca:14:21:4d:95:f6:29:bb:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEDCFD2EE0191BA604BD915813F4DD016164EE40
        Validity
            Not Before: Apr 26 02:09:38 2025 GMT
            Not After : Apr 25 02:14:38 2026 GMT
        Subject: CN=D8628896DD33F10AA1AC63F72B5857CB40C41A21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:07:04:13:93:fa:49:dd:b4:07:03:e4:46:93:
                    e6:bb:b7:e7:a7:4f:c4:57:4a:2e:a9:98:16:53:77:
                    e4:67:8a:52:25:13:d8:59:d2:7e:d8:58:77:44:1d:
                    61:f7:bd:14:d2:b2:7d:63:2d:5c:aa:d5:07:59:9d:
                    44:c4:bb:e7:c5:6d:e8:83:f6:78:00:57:69:12:c0:
                    55:72:59:d6:8e:bc:67:ff:84:83:43:02:c8:cb:07:
                    2b:c9:be:18:ed:80:25:23:dc:05:69:4b:17:00:5d:
                    2c:79:ac:6b:fc:65:ec:43:25:f6:79:84:63:68:31:
                    92:f0:9d:a3:78:5f:9e:b3:6c:9c:97:d4:15:c7:c8:
                    e7:01:b2:cd:12:5a:71:1c:f2:84:3a:47:48:21:c8:
                    a0:95:ff:c0:97:8a:83:91:72:b6:ba:a9:5e:dc:40:
                    db:6e:8f:69:6b:90:2f:7a:90:87:8c:cb:5d:ab:02:
                    a1:39:d5:ef:c4:42:c8:6a:6f:9f:08:dc:5a:0e:ab:
                    f7:aa:3d:35:76:61:f0:7a:db:0b:99:50:6c:21:2c:
                    4d:b8:a5:b7:68:11:6b:7a:96:c9:32:38:8d:b6:fb:
                    d5:6c:3b:75:3d:9d:ca:e6:85:e9:4e:ac:3a:4c:82:
                    80:01:12:2a:9d:80:df:0d:b0:68:6a:9a:55:b5:4f:
                    4b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:62:88:96:DD:33:F1:0A:A1:AC:63:F7:2B:58:57:CB:40:C4:1A:21
            X509v3 Authority Key Identifier:
                keyid:FE:DC:FD:2E:E0:19:1B:A6:04:BD:91:58:13:F4:DD:01:61:64:EE:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/FEDCFD2EE0191BA604BD915813F4DD016164EE40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEDCFD2EE0191BA604BD915813F4DD016164EE40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/34352e3136392e33322e302f32332d3233203d3e20323638313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:a2:dc:b0:56:31:82:67:13:5d:22:dd:da:1a:be:be:3b:a2:
         fc:aa:d4:2a:82:7e:48:14:2d:42:01:d0:30:91:b2:4a:f6:2a:
         b6:8a:04:41:92:cb:01:0b:b5:21:df:ba:1b:cc:7f:f5:87:8d:
         cc:cb:16:f4:a1:2f:03:6e:ac:a0:26:53:e7:c0:66:68:ab:88:
         b1:e3:34:85:85:53:b5:92:bc:71:40:ee:12:35:a0:52:ca:e2:
         24:5c:9b:cb:84:f3:89:08:13:17:9c:35:80:b4:e7:99:56:87:
         cb:eb:48:a9:4d:d2:5a:b3:2d:ec:66:6d:c7:77:9c:28:8f:ab:
         49:1e:fd:e3:c5:cd:59:8c:37:f7:5a:c8:ac:27:ee:26:5e:b4:
         45:e4:7e:92:40:75:45:05:0e:58:a5:9f:9f:4a:66:87:c7:e1:
         64:58:62:8d:bd:3c:c6:3f:8c:25:00:2f:88:d9:91:01:5a:f1:
         6d:25:02:b0:6d:c3:64:c3:ac:07:05:86:66:18:8e:50:4a:f4:
         e8:e2:5f:58:d0:51:0c:73:78:84:6b:99:46:fd:eb:a7:3f:9b:
         bb:84:21:57:4f:52:9f:97:38:d7:13:24:d7:6a:03:cf:50:7e:
         9b:2d:f0:e0:d1:6a:c8:99:13:99:62:91:ae:a8:63:66:01:3a:
         54:f9:b3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 21:12:03 2025 by rpki-client