Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/34352e3138372e3137312e302f32342d3234203d3e20323639343733.roa
File:                     34352e3138372e3137312e302f32342d3234203d3e20323639343733.roa (raw, json)
Hash identifier:          E9plHt7RLLvmbvHaG4OTDwGPfwEIE4mC0sfU15Aoajs=
Subject key identifier:   2F:4E:63:89:7E:D1:8F:89:B0:BF:D6:C1:1E:DB:FA:E2:55:1A:12:A3
Certificate issuer:       /CN=BAA91B8729924B4E8155B81952688BEC004DD0B7
Certificate serial:       08F1B7A67C8412EE101BE876696E1FA9A88650B1
Authority key identifier: BA:A9:1B:87:29:92:4B:4E:81:55:B8:19:52:68:8B:EC:00:4D:D0:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/34352e3138372e3137312e302f32342d3234203d3e20323639343733.roa
Signing time:             Sat 03 May 2025 12:14:51 +0000
ROA not before:           Sat 03 May 2025 12:09:51 +0000
ROA not after:            Sat 02 May 2026 12:14:51 +0000
asID:                     269473
IP address blocks:        45.187.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.crl
                          rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 04:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:f1:b7:a6:7c:84:12:ee:10:1b:e8:76:69:6e:1f:a9:a8:86:50:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAA91B8729924B4E8155B81952688BEC004DD0B7
        Validity
            Not Before: May  3 12:09:51 2025 GMT
            Not After : May  2 12:14:51 2026 GMT
        Subject: CN=2F4E63897ED18F89B0BFD6C11EDBFAE2551A12A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:02:8d:84:fa:2c:ff:56:1c:6f:77:bf:cd:01:
                    2e:b1:75:ce:70:68:a4:15:66:15:0f:a5:49:28:7f:
                    5c:54:e1:d3:a2:a4:54:64:2c:a4:32:34:f2:a5:b6:
                    d5:ee:76:a4:8c:bc:07:80:dd:1f:dc:87:e6:7e:ba:
                    5a:e1:2f:be:a8:86:7b:8b:1f:fc:a5:92:0b:03:c9:
                    e9:e2:7e:01:42:6a:e7:ff:b0:41:b3:51:87:a2:9d:
                    35:bd:ea:be:0e:f9:cd:b5:be:cc:cd:0e:ec:77:41:
                    7c:2d:c8:2e:03:4d:43:94:b2:0b:73:ae:dd:ad:5d:
                    a8:cf:94:2e:e0:62:17:96:3c:d6:55:85:34:c1:4c:
                    c2:6c:75:3a:0c:7e:81:e7:72:69:3e:82:9c:5c:7c:
                    46:fc:ea:de:16:0a:b5:16:49:90:76:14:97:71:76:
                    fd:7a:1b:0c:2e:99:08:6a:36:3a:d7:5c:19:7e:5b:
                    5e:d7:45:e9:bf:05:de:fa:bb:b4:c9:09:b0:66:ee:
                    1f:b0:a4:02:b4:d0:7e:92:b9:09:59:f9:8e:25:97:
                    fb:97:56:28:60:e6:3e:fa:f3:07:ba:cf:81:0a:e4:
                    f1:5f:0a:1b:f9:03:87:18:55:6f:5c:85:92:9e:5c:
                    aa:11:3d:b5:13:1c:b5:45:8a:d4:89:9a:88:c6:ed:
                    75:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:4E:63:89:7E:D1:8F:89:B0:BF:D6:C1:1E:DB:FA:E2:55:1A:12:A3
            X509v3 Authority Key Identifier:
                keyid:BA:A9:1B:87:29:92:4B:4E:81:55:B8:19:52:68:8B:EC:00:4D:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/34352e3138372e3137312e302f32342d3234203d3e20323639343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:5e:69:82:8e:a1:67:b5:25:fa:96:b9:9e:eb:27:20:e0:9d:
         46:d4:c2:0d:d8:e0:b9:98:49:fd:83:0a:82:5e:97:03:8c:1e:
         8f:ad:ce:89:ce:b9:2d:3f:a0:41:77:eb:e1:bc:16:e5:62:bf:
         21:6e:cf:f9:31:82:0e:aa:e4:4d:0a:43:9a:f2:88:19:52:56:
         fc:04:a2:f9:7d:1c:ac:25:4c:b8:d2:87:0f:e8:6d:b0:c2:ae:
         32:23:65:69:64:79:0c:76:4c:6a:34:26:32:a4:ff:1c:74:87:
         8a:c1:55:2a:bb:e1:b6:f2:01:85:b7:e4:73:a7:1a:1b:cd:3e:
         d2:33:ad:d4:b9:0f:77:27:87:a7:24:e6:20:81:b7:a3:03:7c:
         1e:6f:48:0b:61:93:57:c7:fd:05:47:00:26:f3:97:05:91:1b:
         b2:ed:8d:f4:d8:72:e3:b7:65:fb:4f:6d:26:24:86:3f:ef:6b:
         6b:3b:9a:86:a7:d4:2d:bb:02:d9:7b:85:5c:e0:6c:5d:95:ab:
         16:5f:45:b5:f2:26:5b:57:9a:8a:c2:43:3e:4a:35:26:6f:4d:
         1c:51:31:49:a8:6c:81:63:1c:4d:50:e5:84:95:45:eb:46:4d:
         73:46:84:62:66:45:82:74:84:66:4c:a8:57:9f:52:a0:60:36:
         8e:80:5f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 11:31:20 2025 by rpki-client