Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkDBt2FtpoenzA4YYuzWPGStpW7WZPtu4qcmssJwYFs6/0/34352e3138342e3137322e302f32322d3234203d3e20323639333332.roa
File:                     34352e3138342e3137322e302f32322d3234203d3e20323639333332.roa (raw, json)
Hash identifier:          epBFWWMSl4Bi+Nzpjp1e6ES8+Lvu4xchi4olyszKgiM=
Subject key identifier:   B9:2C:09:23:1C:F4:F0:40:D4:4F:CB:E9:9E:AE:1E:DC:CA:25:D6:94
Certificate issuer:       /CN=D5E0846B70760CECF01A29F21A7756CCC7B052AD
Certificate serial:       2A65C1C5D8683BC65F139FC01445B6863CCFC2F8
Authority key identifier: D5:E0:84:6B:70:76:0C:EC:F0:1A:29:F2:1A:77:56:CC:C7:B0:52:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5E0846B70760CECF01A29F21A7756CCC7B052AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkDBt2FtpoenzA4YYuzWPGStpW7WZPtu4qcmssJwYFs6/0/34352e3138342e3137322e302f32322d3234203d3e20323639333332.roa
Signing time:             Wed 06 Aug 2025 12:18:32 +0000
ROA not before:           Wed 06 Aug 2025 12:13:32 +0000
ROA not after:            Wed 05 Aug 2026 12:18:32 +0000
asID:                     269332
IP address blocks:        45.184.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HkDBt2FtpoenzA4YYuzWPGStpW7WZPtu4qcmssJwYFs6/0/D5E0846B70760CECF01A29F21A7756CCC7B052AD.crl
                          rsync://rpki-repo.registro.br/repo/HkDBt2FtpoenzA4YYuzWPGStpW7WZPtu4qcmssJwYFs6/0/D5E0846B70760CECF01A29F21A7756CCC7B052AD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5E0846B70760CECF01A29F21A7756CCC7B052AD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 14:46:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:65:c1:c5:d8:68:3b:c6:5f:13:9f:c0:14:45:b6:86:3c:cf:c2:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5E0846B70760CECF01A29F21A7756CCC7B052AD
        Validity
            Not Before: Aug  6 12:13:32 2025 GMT
            Not After : Aug  5 12:18:32 2026 GMT
        Subject: CN=B92C09231CF4F040D44FCBE99EAE1EDCCA25D694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:35:a4:b4:42:fe:bd:83:0a:cb:8d:e3:72:a5:
                    6a:4f:ec:08:65:9e:e6:52:a9:c2:f1:51:11:57:70:
                    a9:d3:1f:08:ec:ea:50:70:41:a4:c9:8c:9c:3a:d9:
                    9e:8e:1b:a9:43:d4:04:f6:9e:92:77:a4:8b:27:19:
                    f7:04:8c:a7:5d:0e:26:d5:8a:11:a3:d5:dc:5d:98:
                    c1:7c:d0:30:60:c6:6f:fd:76:2a:ad:c3:75:5d:1b:
                    cd:69:b0:07:91:82:36:21:e5:68:9c:38:7f:f1:eb:
                    20:53:78:fb:f6:2a:4a:a8:3b:be:85:15:d7:36:4d:
                    80:c7:00:fe:4e:1b:03:75:ef:3b:3a:8e:b0:cd:28:
                    db:72:3c:fd:3b:98:8c:c3:40:7d:78:66:f3:ad:95:
                    2d:00:66:26:4d:d7:97:00:54:ed:16:87:ee:e9:12:
                    c1:a7:73:c8:ab:84:4c:a0:00:8c:ba:2c:9c:a4:28:
                    4d:a0:3b:c8:b0:53:26:52:81:f1:fd:ed:8e:a7:c1:
                    b6:31:4b:87:eb:93:86:1e:18:5d:f4:62:ca:3c:ce:
                    ff:5b:a8:fb:63:1c:cc:48:4b:10:8b:17:23:c8:9e:
                    0b:6e:d3:83:35:5d:be:a4:ef:1a:35:ef:f3:09:9a:
                    24:f7:34:eb:0c:45:6e:f8:08:b0:44:23:be:c1:49:
                    97:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:2C:09:23:1C:F4:F0:40:D4:4F:CB:E9:9E:AE:1E:DC:CA:25:D6:94
            X509v3 Authority Key Identifier:
                keyid:D5:E0:84:6B:70:76:0C:EC:F0:1A:29:F2:1A:77:56:CC:C7:B0:52:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkDBt2FtpoenzA4YYuzWPGStpW7WZPtu4qcmssJwYFs6/0/D5E0846B70760CECF01A29F21A7756CCC7B052AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5E0846B70760CECF01A29F21A7756CCC7B052AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkDBt2FtpoenzA4YYuzWPGStpW7WZPtu4qcmssJwYFs6/0/34352e3138342e3137322e302f32322d3234203d3e20323639333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:3c:63:d0:9b:92:53:8d:c3:e8:eb:33:3d:a0:78:b0:04:4a:
         1d:a0:41:31:c4:29:82:71:49:35:03:a2:7c:4b:09:8b:44:47:
         bd:c3:b1:85:b3:52:a0:7d:f0:63:69:e2:e8:80:af:67:d3:a8:
         f4:13:b3:67:2b:00:f5:ad:6d:24:42:30:ac:97:1e:db:4e:29:
         2b:b2:f8:5d:cb:fb:e5:be:83:10:76:68:db:0c:b2:da:46:9e:
         ff:a4:7c:3a:eb:f2:b6:7b:3d:97:9f:f3:98:24:0d:5e:af:f9:
         15:8d:26:48:5b:e1:80:7f:09:29:7a:64:f0:d8:60:65:78:23:
         7f:06:6b:c6:62:fb:80:05:4d:fa:8d:43:f5:31:cd:29:f9:34:
         80:2c:fd:90:4a:01:58:7f:73:29:74:f6:b3:bd:6f:21:f1:e1:
         9a:26:0a:fd:3b:64:0e:02:7b:dd:58:6d:bd:1f:6d:08:8c:68:
         7a:e3:d6:da:e9:30:4c:2d:bb:e1:79:f9:65:11:eb:2b:f1:68:
         e2:9a:40:3e:f1:35:82:d7:40:7b:fc:65:08:a9:43:16:d5:dc:
         0b:79:d0:81:67:99:54:92:90:41:d2:40:f9:3e:c8:3d:dd:a7:
         20:20:c2:bc:a9:4e:17:3d:56:13:58:7a:f2:20:e2:59:9b:37:
         0f:0c:bb:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:57:42 2025 by rpki-client