Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/34352e3232342e3231372e302f32342d3234203d3e203631353932.roa
File:                     34352e3232342e3231372e302f32342d3234203d3e203631353932.roa (raw, json)
Hash identifier:          gR0JUSnGwFAZ1kJpmYftolSQhinSbvLkHAF/JXhTo/8=
Subject key identifier:   72:0E:47:57:DD:73:AE:E8:E9:6E:83:29:5D:4F:04:B8:1B:DD:5A:1D
Certificate issuer:       /CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
Certificate serial:       5E10AD7F8B028CBFD257433B2F68E2F27532B1CB
Authority key identifier: 45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/34352e3232342e3231372e302f32342d3234203d3e203631353932.roa
Signing time:             Wed 12 Feb 2025 14:31:04 +0000
ROA not before:           Wed 12 Feb 2025 14:26:04 +0000
ROA not after:            Wed 11 Feb 2026 14:31:04 +0000
asID:                     61592
IP address blocks:        45.224.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/45D8EABBB8344E57C69E3416BF523D78A65C0103.crl
                          rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/45D8EABBB8344E57C69E3416BF523D78A65C0103.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 22 Feb 2025 08:11:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:10:ad:7f:8b:02:8c:bf:d2:57:43:3b:2f:68:e2:f2:75:32:b1:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
        Validity
            Not Before: Feb 12 14:26:04 2025 GMT
            Not After : Feb 11 14:31:04 2026 GMT
        Subject: CN=720E4757DD73AEE8E96E83295D4F04B81BDD5A1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:75:48:a3:b0:c0:96:32:3a:e5:4d:5a:3c:b8:
                    66:fc:5f:38:51:cd:6f:8f:79:61:31:91:9f:9a:41:
                    93:b7:1e:37:20:72:51:2d:40:9e:cd:41:84:9c:f3:
                    3a:94:cf:2c:c7:1f:6f:82:f7:8d:41:29:19:73:c9:
                    fa:c8:25:bd:8d:8d:6e:36:c2:60:57:e7:4f:9f:de:
                    0d:a0:97:34:af:bf:7d:dd:d2:f1:69:ae:b8:6d:c7:
                    0d:56:30:cc:3b:06:d4:97:78:32:e9:94:19:6a:6e:
                    b5:10:4f:5a:9d:ea:84:de:2a:0d:f9:68:d5:ff:ae:
                    f9:10:24:63:2a:5b:7e:34:19:ec:62:a0:42:8a:90:
                    55:50:1f:93:0b:9d:26:96:72:92:39:b6:5b:77:dc:
                    95:28:63:79:6b:be:25:dd:f8:ab:8d:68:61:ae:31:
                    c0:18:4a:9f:9f:dc:0f:c3:da:69:74:32:d2:48:27:
                    2c:47:d9:b0:ab:05:a2:d2:81:ba:bc:26:43:5a:81:
                    14:95:64:4d:e5:b4:b8:05:38:18:25:44:a3:69:d5:
                    30:cc:dd:57:61:a6:a5:2c:79:44:3a:c3:c7:f5:1d:
                    16:ef:76:b4:bc:e3:71:5b:cf:69:b1:91:06:d9:01:
                    e0:d1:02:71:1c:a2:38:4e:1f:72:f5:ae:9e:ce:2d:
                    da:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:0E:47:57:DD:73:AE:E8:E9:6E:83:29:5D:4F:04:B8:1B:DD:5A:1D
            X509v3 Authority Key Identifier:
                keyid:45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/45D8EABBB8344E57C69E3416BF523D78A65C0103.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/34352e3232342e3231372e302f32342d3234203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:5e:07:74:d5:4c:12:5d:39:34:f2:84:a0:89:e4:a9:4a:27:
         3c:cb:28:09:86:c8:d4:c0:d8:c3:a8:45:f8:f2:ac:a3:53:51:
         39:f4:46:7f:bd:10:8c:5e:4f:59:c5:53:a8:9e:7e:ec:f4:96:
         0b:02:60:71:0c:53:5d:e5:16:c7:37:d3:a8:f3:7a:43:dc:7b:
         c3:4a:c6:a7:76:ea:5b:41:a5:3f:1c:b7:06:cc:5a:ba:a2:20:
         c7:a7:a1:b9:82:5c:33:2d:22:98:d6:21:f3:a8:1c:80:82:99:
         e0:97:9e:72:5f:17:af:61:2d:00:bf:32:d8:7c:ac:1b:44:d8:
         4e:81:ff:5c:1f:81:90:63:a4:da:c7:9c:12:33:4f:86:81:e2:
         0a:fb:d1:d9:8c:7f:02:a6:09:e9:31:f6:3f:82:53:74:7b:c5:
         49:e2:b2:cc:93:59:ec:28:1b:6d:3b:a5:06:aa:10:a7:de:31:
         b9:19:ad:5f:b1:6d:d0:94:7a:22:6d:7f:fa:f0:d9:84:5a:00:
         c8:77:e6:44:82:a0:14:4a:dc:ea:28:97:02:2a:10:b0:9e:e4:
         1b:42:c9:fb:e1:53:71:ef:cf:90:14:1d:c1:4b:1b:c1:6f:95:
         05:64:21:44:65:a4:1d:50:bb:67:91:e9:a9:bf:51:ce:56:45:
         7a:fe:d8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:02:46 2025 by rpki-client