Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/34352e3233342e3231342e302f32342d3234203d3e20323637333733.roa
File:                     34352e3233342e3231342e302f32342d3234203d3e20323637333733.roa (raw, json)
Hash identifier:          kH3S536BXFFRY3Ukkc9PPKI4LEkvpGJ3fV00M/ofsag=
Subject key identifier:   BE:AA:DC:5D:99:4E:6E:09:0D:8B:11:99:1C:80:73:F6:84:CC:A0:4F
Certificate issuer:       /CN=67E390BE3E2214C4FBBADD091C55EEBAE671D882
Certificate serial:       7A3740D34A9C7A2A07EAFD2CE9BFDC66EE9C06BC
Authority key identifier: 67:E3:90:BE:3E:22:14:C4:FB:BA:DD:09:1C:55:EE:BA:E6:71:D8:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/34352e3233342e3231342e302f32342d3234203d3e20323637333733.roa
Signing time:             Thu 24 Apr 2025 18:44:20 +0000
ROA not before:           Thu 24 Apr 2025 18:39:20 +0000
ROA not after:            Thu 23 Apr 2026 18:44:20 +0000
asID:                     267373
IP address blocks:        45.234.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl
                          rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 09:02:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:37:40:d3:4a:9c:7a:2a:07:ea:fd:2c:e9:bf:dc:66:ee:9c:06:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67E390BE3E2214C4FBBADD091C55EEBAE671D882
        Validity
            Not Before: Apr 24 18:39:20 2025 GMT
            Not After : Apr 23 18:44:20 2026 GMT
        Subject: CN=BEAADC5D994E6E090D8B11991C8073F684CCA04F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:de:9f:f3:f7:a3:71:30:49:19:4f:81:57:d4:
                    3a:6b:53:e8:66:55:6d:c3:b6:f1:11:b7:dd:72:7c:
                    ae:05:dc:57:7a:50:bd:8f:6c:7f:6c:54:1d:02:77:
                    41:93:36:c9:93:c3:45:34:f1:a5:58:0c:19:35:61:
                    c2:a4:e8:19:9d:6c:4a:30:86:82:00:38:89:af:a7:
                    4b:ce:da:23:ef:db:08:fd:92:dd:a2:86:3b:52:fd:
                    4a:74:90:8a:4e:62:08:96:61:a2:fb:f8:29:ab:56:
                    ab:27:45:ce:df:39:6e:c5:c8:d9:a3:3b:74:2b:da:
                    ef:2f:82:44:1f:ca:27:b6:9b:6c:d9:57:d1:f6:c2:
                    28:0a:63:4b:3d:67:61:59:c9:fe:bb:87:c0:4b:bd:
                    ab:a3:66:d7:44:25:9e:d5:0e:62:ec:43:2f:d8:b2:
                    46:54:f6:93:05:16:25:db:db:cf:df:6e:06:8d:cb:
                    ff:16:99:c7:d0:1e:70:c1:c8:43:28:ad:66:b4:b6:
                    63:11:6f:d8:c5:36:7f:c3:02:6f:e5:83:19:1a:ff:
                    5d:fc:1a:b8:fb:d9:3b:3e:f5:27:49:74:12:4a:c2:
                    fd:82:7a:11:3f:f3:59:e7:cb:94:97:fc:4d:57:e6:
                    0a:75:bd:f6:52:af:c3:3f:7d:d3:45:0d:88:2b:1b:
                    09:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:AA:DC:5D:99:4E:6E:09:0D:8B:11:99:1C:80:73:F6:84:CC:A0:4F
            X509v3 Authority Key Identifier:
                keyid:67:E3:90:BE:3E:22:14:C4:FB:BA:DD:09:1C:55:EE:BA:E6:71:D8:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/34352e3233342e3231342e302f32342d3234203d3e20323637333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:27:e6:38:1d:b4:be:2c:0d:6b:72:da:ee:2d:17:af:e7:bd:
         bb:cc:38:1b:04:a4:28:bc:17:c2:f3:b0:5f:04:46:a1:ac:78:
         b5:fa:d7:a0:99:57:90:15:01:ba:6f:3c:67:f4:3e:5b:eb:81:
         60:e3:3d:9f:7b:bb:0e:3d:f5:e2:b0:46:8f:34:34:0b:b3:73:
         2c:a9:be:d1:dc:a1:3d:61:c2:af:cd:77:87:32:d5:94:18:3d:
         74:a8:d0:f4:98:9d:b8:81:e2:9b:aa:04:ae:e2:b6:c1:ee:28:
         83:89:36:e9:4a:e9:97:37:25:96:1d:ea:11:68:26:88:e0:bc:
         1b:3e:e3:b9:48:57:32:0b:31:ac:77:9a:b1:d0:f3:25:2e:1a:
         a0:30:6d:92:a1:8d:44:d5:f5:b3:0b:4f:f7:1b:f0:8e:9b:4a:
         b7:52:8e:7f:41:72:1f:9e:77:c1:60:d7:d3:ce:4d:75:79:8d:
         c1:73:24:30:92:cd:81:b0:80:90:95:c9:54:0a:de:c4:0c:59:
         1a:ec:2a:bb:65:50:9f:93:d3:f5:f7:c9:3c:e6:bf:da:ab:f4:
         5b:e4:5c:41:01:3b:1b:33:a7:70:78:57:ea:78:7b:f0:e3:64:
         e8:b8:62:79:3a:1a:98:01:c5:a1:fc:a9:ff:fb:06:33:77:e1:
         0c:fd:0c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 13:30:57 2025 by rpki-client