Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/34352e3233322e3139312e302f32342d3234203d3e203631353932.roa
File:                     34352e3233322e3139312e302f32342d3234203d3e203631353932.roa (raw, json)
Hash identifier:          0qfj8T+9xav+663dRDRHwU27laQ2IV42zUubQvO71Nw=
Subject key identifier:   D5:55:19:9A:BD:61:3D:B6:77:B9:87:CF:F1:7F:A3:F9:13:20:9A:65
Certificate issuer:       /CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
Certificate serial:       15DC7B357C75EEFAA37DF5B6D40A21D1E4D76255
Authority key identifier: 45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/34352e3233322e3139312e302f32342d3234203d3e203631353932.roa
Signing time:             Wed 12 Feb 2025 14:31:00 +0000
ROA not before:           Wed 12 Feb 2025 14:26:00 +0000
ROA not after:            Wed 11 Feb 2026 14:31:00 +0000
asID:                     61592
IP address blocks:        45.232.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/45D8EABBB8344E57C69E3416BF523D78A65C0103.crl
                          rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/45D8EABBB8344E57C69E3416BF523D78A65C0103.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 22 Feb 2025 08:11:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:dc:7b:35:7c:75:ee:fa:a3:7d:f5:b6:d4:0a:21:d1:e4:d7:62:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
        Validity
            Not Before: Feb 12 14:26:00 2025 GMT
            Not After : Feb 11 14:31:00 2026 GMT
        Subject: CN=D555199ABD613DB677B987CFF17FA3F913209A65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9f:19:0b:76:78:52:af:77:ee:3b:04:0e:2e:
                    ea:c3:dd:85:a3:84:88:49:76:57:47:4f:c6:6b:60:
                    aa:4d:f1:56:79:a9:67:65:b2:00:26:fa:7c:76:59:
                    6d:32:22:08:22:66:c8:d2:29:24:1e:50:16:a5:77:
                    29:e8:0e:01:fc:a7:a9:5c:b2:cc:54:0e:37:1a:6e:
                    da:91:e8:3f:42:a2:b9:fe:4e:66:5f:ad:00:44:da:
                    5e:14:ae:ec:3b:3e:4b:4d:1d:6c:bd:8f:c0:28:d4:
                    1f:40:77:6b:89:d1:6d:9f:ec:41:27:dc:17:af:b0:
                    72:e0:77:51:90:7b:10:b5:b1:73:f1:ac:77:54:d7:
                    8d:98:41:e5:d2:4b:d0:85:ae:9f:ae:0a:39:88:09:
                    9c:7c:51:56:85:36:6b:0f:18:e7:3a:d7:d4:f7:c6:
                    95:ed:a9:8f:1d:0f:fe:fe:ec:66:33:0f:77:fb:79:
                    d6:85:27:5c:34:74:76:b5:0b:f5:25:74:85:22:fc:
                    43:68:d7:62:80:78:95:a3:87:e4:02:bd:82:dc:b9:
                    87:83:20:69:bb:b8:0b:05:c8:63:6e:2d:ba:3b:00:
                    46:7d:73:e5:32:a6:a8:2e:6c:51:5b:5f:af:59:98:
                    d7:e7:9f:1b:d1:23:35:54:d9:92:2d:71:b2:87:6c:
                    86:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:55:19:9A:BD:61:3D:B6:77:B9:87:CF:F1:7F:A3:F9:13:20:9A:65
            X509v3 Authority Key Identifier:
                keyid:45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/45D8EABBB8344E57C69E3416BF523D78A65C0103.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/34352e3233322e3139312e302f32342d3234203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:cc:27:0a:ef:f4:cf:c5:fd:ac:86:f5:64:25:a1:fa:1b:59:
         29:89:86:16:fe:0a:bf:66:84:e9:04:d7:6f:81:c7:d2:80:bb:
         51:f7:5c:1e:2f:e0:62:60:d9:ad:c4:11:9a:13:6a:69:9f:7e:
         77:91:ec:f4:a2:fc:50:a1:8a:15:51:18:7b:11:b1:90:c2:58:
         b3:53:16:2a:ce:8b:b5:db:7f:57:a4:e0:bc:c8:ed:00:9f:31:
         7e:64:24:ef:51:df:9b:ab:b5:81:3b:c2:c4:3e:34:4b:3e:59:
         9e:fe:23:c1:9f:c4:ef:a8:a7:90:e8:b1:a0:9b:ce:6c:d2:be:
         46:40:8c:12:b2:25:a4:9d:33:26:fa:f3:b1:49:71:53:ed:70:
         25:fa:7f:f5:ed:3d:5a:cd:4e:9e:38:de:5c:b2:0b:5e:a4:0d:
         53:27:c0:23:55:0a:b8:68:a8:0d:bd:46:0f:90:e7:b6:36:33:
         fb:d7:70:8e:0b:b5:a1:8f:fa:3e:ad:ea:b0:62:5e:89:5d:5f:
         41:12:bb:a4:c3:94:9b:90:09:c2:aa:62:4a:b4:43:06:9f:33:
         ba:98:39:3f:5b:59:0a:ae:e1:20:8d:94:87:ec:c3:a4:a3:69:
         ce:2a:63:0a:a4:a2:3d:f1:67:6e:5e:3e:d5:05:fe:44:f2:7f:
         f2:d3:f0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:05:13 2025 by rpki-client