Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/34352e3233322e3138392e302f32342d3234203d3e203631353932.roa
File:                     34352e3233322e3138392e302f32342d3234203d3e203631353932.roa (raw, json)
Hash identifier:          jTqJFAugZmmes5jGYxFlzOG0Qj5KQM2t0I4y7a4h3s8=
Subject key identifier:   96:77:81:2D:EE:69:3C:BE:5C:52:C7:0C:48:38:7B:E6:86:55:AE:65
Certificate issuer:       /CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
Certificate serial:       5E0EF97C8326DA6AB9DFF947615CB99074176DC4
Authority key identifier: 45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/34352e3233322e3138392e302f32342d3234203d3e203631353932.roa
Signing time:             Wed 12 Feb 2025 14:31:00 +0000
ROA not before:           Wed 12 Feb 2025 14:26:00 +0000
ROA not after:            Wed 11 Feb 2026 14:31:00 +0000
asID:                     61592
IP address blocks:        45.232.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/45D8EABBB8344E57C69E3416BF523D78A65C0103.crl
                          rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/45D8EABBB8344E57C69E3416BF523D78A65C0103.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 22 Feb 2025 08:11:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:0e:f9:7c:83:26:da:6a:b9:df:f9:47:61:5c:b9:90:74:17:6d:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
        Validity
            Not Before: Feb 12 14:26:00 2025 GMT
            Not After : Feb 11 14:31:00 2026 GMT
        Subject: CN=9677812DEE693CBE5C52C70C48387BE68655AE65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a1:d5:0f:86:cf:52:66:38:e7:d3:9f:be:62:
                    59:c9:b0:03:32:4d:d4:6b:0a:60:26:99:87:de:d7:
                    15:7d:19:c7:46:bf:65:a0:de:55:96:d7:a5:45:01:
                    5f:1c:d5:81:16:0b:fb:f0:49:2c:d0:f6:3a:3d:3a:
                    33:7d:68:c8:49:98:6e:e9:a3:27:8d:38:35:a2:b6:
                    96:9e:5d:f7:fe:6c:63:12:c7:f0:f2:74:5e:9c:6a:
                    19:20:09:61:e4:da:45:d1:d7:ce:fd:f8:2f:01:ff:
                    b6:b6:a8:e0:03:e3:66:cd:89:ae:42:e7:16:ce:09:
                    1d:2b:b4:b7:63:aa:50:dd:f2:ac:5c:38:3d:ba:9b:
                    9a:22:00:f4:fb:38:c0:a9:0f:73:4c:91:c0:50:83:
                    3f:cd:a9:c6:a2:53:17:0d:cc:ab:86:c4:a3:a8:7e:
                    f3:be:69:e6:64:34:bc:db:5b:b9:04:fd:e6:c3:aa:
                    da:c3:2e:a6:d6:a3:3a:f6:63:d9:55:15:82:e6:e8:
                    ef:79:78:18:05:b5:21:0e:2b:d7:af:bb:dc:f2:f1:
                    b1:f8:6f:e2:0b:a7:05:93:6e:bb:49:77:c4:f8:99:
                    f2:d1:2a:eb:fe:0a:1b:ae:71:ab:28:bf:75:70:03:
                    c8:a7:6f:1c:c5:28:5a:cc:24:c3:25:a8:33:81:e6:
                    c0:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:77:81:2D:EE:69:3C:BE:5C:52:C7:0C:48:38:7B:E6:86:55:AE:65
            X509v3 Authority Key Identifier:
                keyid:45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/45D8EABBB8344E57C69E3416BF523D78A65C0103.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/34352e3233322e3138392e302f32342d3234203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:2f:a1:f4:73:e4:d9:ca:60:8c:30:df:7a:fa:b4:e5:f9:67:
         9c:9a:32:58:03:64:15:55:30:98:a8:33:a4:0b:61:e2:98:57:
         8c:2e:d8:ab:47:57:e1:4b:0c:d0:8b:3a:85:d4:e8:6f:61:ad:
         31:cf:f2:95:2d:b8:e3:9f:8c:0d:4a:17:1f:97:e5:02:ec:3a:
         0e:a1:65:6b:c5:4d:a6:e5:01:80:8c:2a:3c:d5:75:41:81:91:
         e9:3b:be:ea:ae:87:51:f8:40:a1:7a:72:db:a5:86:9b:2e:dd:
         ab:f4:e7:11:4a:b5:61:d5:9c:2f:37:02:76:6e:f1:72:42:08:
         a5:e4:66:04:ce:e1:fc:86:27:19:76:b8:55:7f:1d:f6:3b:3c:
         3e:db:35:64:d6:1c:9a:66:f1:4b:89:1d:5d:ff:b0:3d:9d:3a:
         50:5a:eb:f1:f2:ec:53:8f:1d:ba:63:f3:7e:6e:e6:df:92:fb:
         d4:e3:d9:0e:78:3f:a6:e0:d2:37:cc:0f:0e:e2:00:10:de:71:
         1b:14:df:4a:d9:80:a8:3a:50:1e:ef:38:fb:17:95:ba:92:3a:
         c8:ae:b2:11:03:45:52:eb:9e:56:b8:4b:88:1d:49:36:80:3b:
         e9:4b:da:e0:cd:1a:8d:a7:9f:91:e7:75:ec:31:f9:24:74:18:
         09:9a:3f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:06:35 2025 by rpki-client