Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32332e302f32342d3234203d3e20323638343430.roa
File:                     34352e3136312e32332e302f32342d3234203d3e20323638343430.roa (raw, json)
Hash identifier:          gu7wZfo1vZPM6KCABXiyBMLjxOzEp/E43hLjS/zEls4=
Subject key identifier:   B2:DA:D9:6D:FB:83:29:54:C3:AD:3B:51:B9:02:19:D8:6A:5E:F3:CD
Certificate issuer:       /CN=3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA
Certificate serial:       74AB3BF0888C7236721F05F0C623D42A340B206F
Authority key identifier: 3E:C1:D6:02:0A:56:64:8E:4D:80:57:9E:DE:6A:9A:E6:4E:D1:AD:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32332e302f32342d3234203d3e20323638343430.roa
Signing time:             Mon 05 May 2025 20:58:37 +0000
ROA not before:           Mon 05 May 2025 20:53:37 +0000
ROA not after:            Mon 04 May 2026 20:58:37 +0000
asID:                     268440
IP address blocks:        45.161.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.crl
                          rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 21:54:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:ab:3b:f0:88:8c:72:36:72:1f:05:f0:c6:23:d4:2a:34:0b:20:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA
        Validity
            Not Before: May  5 20:53:37 2025 GMT
            Not After : May  4 20:58:37 2026 GMT
        Subject: CN=B2DAD96DFB832954C3AD3B51B90219D86A5EF3CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0a:98:31:88:d5:76:49:12:76:0d:e5:52:4a:
                    be:b5:66:48:a9:ff:b0:4f:77:91:56:1a:f1:09:08:
                    9f:b0:3e:43:bf:f6:6b:49:d6:ae:a5:9c:21:ad:5f:
                    c4:89:4d:97:14:34:2f:37:7f:cb:fa:92:ba:74:7d:
                    0c:fd:a8:b1:a9:af:31:4d:0b:a2:1f:59:93:3b:70:
                    44:4e:14:58:f7:7b:ed:39:e2:d9:90:93:11:81:7d:
                    00:03:26:9d:c1:78:02:8c:04:95:61:b0:07:56:61:
                    1c:9c:f1:35:8a:31:55:b8:cf:51:a0:c1:a1:f8:f5:
                    92:d2:81:86:8d:03:f8:2e:f7:21:8f:84:e8:00:f6:
                    98:69:3c:20:62:7e:fa:5e:2b:9e:5c:71:31:b6:8c:
                    9e:34:d7:39:4b:31:b9:cc:94:c0:23:c1:bc:98:8b:
                    29:96:19:c1:ca:b5:37:2f:69:32:40:d6:83:2a:c3:
                    66:43:4a:14:61:2b:d3:55:38:dd:b1:81:6f:aa:56:
                    48:8c:c6:a8:24:d4:d5:0b:de:02:9f:88:00:1d:cd:
                    39:fc:6d:71:de:92:5e:4a:9b:53:90:e7:87:95:5b:
                    c2:3c:b1:a5:6c:db:39:cd:64:59:06:00:25:4e:d5:
                    4e:3a:5b:4b:c8:16:5f:bd:71:05:03:0f:f8:a5:fd:
                    24:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:DA:D9:6D:FB:83:29:54:C3:AD:3B:51:B9:02:19:D8:6A:5E:F3:CD
            X509v3 Authority Key Identifier:
                keyid:3E:C1:D6:02:0A:56:64:8E:4D:80:57:9E:DE:6A:9A:E6:4E:D1:AD:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32332e302f32342d3234203d3e20323638343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:f9:19:39:18:22:3d:af:1b:31:05:53:b7:b0:ac:66:1d:e3:
         e9:52:f1:39:32:0a:18:65:1c:0a:ad:d4:0c:30:b5:34:ad:f9:
         da:38:31:26:ac:46:63:59:8f:e2:b8:77:50:f0:7f:fc:f4:05:
         0f:cc:fb:db:ad:80:5d:a3:00:98:95:bb:e5:83:f4:d7:cb:8d:
         c3:a6:26:d1:56:44:fd:8a:bb:0d:ce:4c:38:da:59:00:4d:90:
         38:d0:b3:5c:bb:30:28:f2:77:93:da:d9:c9:36:6c:43:51:ee:
         23:bd:86:82:a7:a7:d4:4e:b1:a7:47:5a:88:fc:ab:11:e9:8f:
         7e:82:3e:c7:db:42:17:a1:c3:c8:ec:33:cc:09:a5:60:fc:14:
         bf:f5:02:59:c3:8f:61:c8:f2:4c:e8:14:8f:1c:ac:bd:10:f1:
         9d:68:9d:01:8f:d3:2c:a6:af:30:24:76:93:aa:ed:0f:f2:2d:
         be:15:c9:ae:33:1b:e4:a4:08:e3:1e:21:75:6e:fc:3c:9b:cd:
         44:ce:b5:c3:e3:00:c6:c2:5e:50:e8:c9:93:a2:8d:82:9e:c9:
         08:4a:d4:51:9e:12:ef:62:72:54:93:56:91:12:52:c7:48:a5:
         d2:a8:74:25:12:a9:26:44:2c:14:ee:eb:5f:ea:e9:e7:de:2d:
         5d:46:73:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 14:22:08 2025 by rpki-client