Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/34352e3136392e33322e302f32342d3234203d3e20323638313133.roa
File:                     34352e3136392e33322e302f32342d3234203d3e20323638313133.roa (raw, json)
Hash identifier:          mUyhDqUrJI47oQGY+3+FFzcTiCegNXNcj/RsNHqPhEk=
Subject key identifier:   BA:22:12:E9:0A:EF:BB:2D:15:A2:92:93:43:02:CA:22:3F:01:71:B2
Certificate issuer:       /CN=FEDCFD2EE0191BA604BD915813F4DD016164EE40
Certificate serial:       1A18CD56C7632AC081CA88FA17925DA540B23289
Authority key identifier: FE:DC:FD:2E:E0:19:1B:A6:04:BD:91:58:13:F4:DD:01:61:64:EE:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEDCFD2EE0191BA604BD915813F4DD016164EE40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/34352e3136392e33322e302f32342d3234203d3e20323638313133.roa
Signing time:             Sat 26 Apr 2025 02:14:41 +0000
ROA not before:           Sat 26 Apr 2025 02:09:41 +0000
ROA not after:            Sat 25 Apr 2026 02:14:41 +0000
asID:                     268113
IP address blocks:        45.169.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/FEDCFD2EE0191BA604BD915813F4DD016164EE40.crl
                          rsync://rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/FEDCFD2EE0191BA604BD915813F4DD016164EE40.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEDCFD2EE0191BA604BD915813F4DD016164EE40.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 19:27:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:18:cd:56:c7:63:2a:c0:81:ca:88:fa:17:92:5d:a5:40:b2:32:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEDCFD2EE0191BA604BD915813F4DD016164EE40
        Validity
            Not Before: Apr 26 02:09:41 2025 GMT
            Not After : Apr 25 02:14:41 2026 GMT
        Subject: CN=BA2212E90AEFBB2D15A292934302CA223F0171B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:53:99:ef:20:a7:d2:4c:6b:fd:df:40:0c:43:
                    9b:2c:75:11:9d:67:b2:7b:cb:d4:b9:d2:f7:6d:8d:
                    c4:7c:5a:1f:3d:da:ab:88:0d:97:51:b3:ef:e8:f2:
                    60:92:2c:fd:5c:1b:5f:1a:a7:d8:09:35:2b:10:15:
                    7e:3e:b3:5f:6a:c4:74:c3:11:8b:aa:68:d2:88:b4:
                    2f:57:d5:64:7b:0c:8c:2a:a7:80:f6:1e:56:43:08:
                    30:95:f4:65:20:c5:31:1a:e7:ba:ea:58:e2:e9:ab:
                    ee:47:cd:07:08:8f:bb:67:dd:d5:f9:21:a0:2d:91:
                    10:75:82:c9:72:eb:fd:d2:e0:dc:3a:7c:1b:60:7f:
                    ea:22:bb:2a:7d:50:fe:1b:1f:23:f2:4e:33:92:71:
                    37:3e:3f:95:d7:d8:59:eb:6d:fd:db:42:88:92:a0:
                    19:f0:7f:ba:dc:11:3e:26:d6:d6:dd:94:ac:15:40:
                    c1:5c:4e:d2:4b:38:e5:7a:2b:f6:0b:65:4c:dd:3d:
                    22:5f:c2:70:b2:47:18:2c:5f:17:a5:c2:be:35:97:
                    97:e1:a3:09:c4:f5:30:38:fd:2f:b8:2a:e4:7f:2c:
                    45:22:a7:bb:a7:12:a7:07:0e:fe:38:0f:37:10:44:
                    2c:02:84:20:70:fe:45:84:ad:ae:09:d0:38:4c:16:
                    89:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:22:12:E9:0A:EF:BB:2D:15:A2:92:93:43:02:CA:22:3F:01:71:B2
            X509v3 Authority Key Identifier:
                keyid:FE:DC:FD:2E:E0:19:1B:A6:04:BD:91:58:13:F4:DD:01:61:64:EE:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/FEDCFD2EE0191BA604BD915813F4DD016164EE40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEDCFD2EE0191BA604BD915813F4DD016164EE40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/34352e3136392e33322e302f32342d3234203d3e20323638313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:0d:e2:c0:1b:7c:19:f4:14:d1:72:74:67:0a:99:1a:66:53:
         96:8c:46:8d:e4:0d:8e:de:da:19:64:cd:b2:5e:a5:96:85:9e:
         95:d8:71:09:c0:42:7e:25:5f:55:86:dc:1c:e3:22:55:43:40:
         c7:c9:9c:28:fe:e8:19:60:77:60:47:11:d9:22:ac:8a:c0:ca:
         37:58:17:43:ef:fd:af:19:4d:7c:eb:bd:d2:56:37:c2:c3:34:
         69:2f:88:23:14:d7:cd:e5:c9:b6:d9:8b:36:12:a1:ea:7d:bd:
         6c:6b:73:29:f8:cf:ec:2c:08:15:36:5b:eb:7e:8d:8c:57:ac:
         0d:3f:e8:5d:d9:79:68:5b:91:d3:54:c0:bd:ed:cb:2c:eb:cf:
         bc:08:6d:88:7b:61:ab:db:83:ea:08:50:fd:48:d7:db:8d:a6:
         7e:1f:97:34:e0:66:a0:1d:14:3f:b5:e1:1c:2d:79:d6:8b:52:
         05:b5:cf:08:c8:ca:94:a5:1b:eb:76:b5:ca:1b:35:98:ad:32:
         8b:47:46:55:0e:f9:cf:06:a3:b8:0f:f7:da:db:e2:52:08:56:
         f9:44:08:e8:20:a5:19:f9:07:29:72:ce:78:27:88:54:c8:9f:
         b0:06:bf:8e:e4:6e:29:50:84:b1:c6:b4:e6:a9:1e:f6:25:8c:
         3d:83:d5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 21:38:54 2025 by rpki-client