Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/34352e3232342e3231372e302f32342d3234203d3e203631353932.roa
File:                     34352e3232342e3231372e302f32342d3234203d3e203631353932.roa (raw, json)
Hash identifier:          t0VulVL6JggjTEve7KGO0Yg+i1sVlVSpQwr74s3GJJk=
Subject key identifier:   48:E0:3D:F4:52:AB:33:D5:18:FB:3E:46:37:B0:89:6B:C9:81:55:F9
Certificate issuer:       /CN=909E9FEA566321BE0782982D2D8BAB3FE3A8D22B
Certificate serial:       518BC4720704A84043EF5FD96F196919B8135105
Authority key identifier: 90:9E:9F:EA:56:63:21:BE:07:82:98:2D:2D:8B:AB:3F:E3:A8:D2:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/34352e3232342e3231372e302f32342d3234203d3e203631353932.roa
Signing time:             Fri 28 Mar 2025 19:34:13 +0000
ROA not before:           Fri 28 Mar 2025 19:29:13 +0000
ROA not after:            Fri 27 Mar 2026 19:34:13 +0000
asID:                     61592
IP address blocks:        45.224.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.crl
                          rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 09:38:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:8b:c4:72:07:04:a8:40:43:ef:5f:d9:6f:19:69:19:b8:13:51:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=909E9FEA566321BE0782982D2D8BAB3FE3A8D22B
        Validity
            Not Before: Mar 28 19:29:13 2025 GMT
            Not After : Mar 27 19:34:13 2026 GMT
        Subject: CN=48E03DF452AB33D518FB3E4637B0896BC98155F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a4:83:ff:b8:05:9c:b9:fc:48:d9:0b:67:17:
                    46:35:83:a8:8a:8b:48:34:99:87:e5:34:7f:8e:45:
                    eb:e0:f8:6d:11:2e:44:bb:a7:70:73:0a:72:6e:be:
                    96:cc:7f:26:79:95:4a:42:f1:06:a1:10:f2:33:6b:
                    b4:83:7f:38:47:b5:af:ec:a2:0f:17:9a:ba:ce:7f:
                    c2:fa:eb:1a:34:8e:02:2f:37:c2:ae:79:36:9e:0e:
                    5d:5a:37:93:cc:37:96:8d:55:b9:2a:01:06:8e:9e:
                    cb:2b:a2:3b:7c:1f:28:67:ae:70:94:b3:78:58:a5:
                    d2:8b:f9:41:d8:7e:f3:17:ab:63:4f:3b:19:a6:ba:
                    bd:75:79:ac:69:c1:f3:85:63:6c:6f:4e:ba:fd:64:
                    67:58:38:18:45:65:ad:0b:2f:ee:f6:56:ff:0d:e9:
                    4c:b6:34:5b:6f:2a:a4:6d:1b:1e:6b:c1:15:87:ec:
                    73:29:9a:79:f5:9c:5a:eb:cc:67:38:1c:f2:33:e3:
                    ea:dc:4a:20:96:5e:ec:62:96:9b:b0:cd:8b:91:4e:
                    36:70:72:2b:61:2f:3f:34:3d:a6:c8:95:a5:47:79:
                    05:91:9c:e5:34:47:3c:62:e4:3c:cc:5b:5a:9b:0e:
                    47:e3:e8:87:ff:2f:a8:ee:d2:b3:bd:31:44:f6:51:
                    87:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E0:3D:F4:52:AB:33:D5:18:FB:3E:46:37:B0:89:6B:C9:81:55:F9
            X509v3 Authority Key Identifier:
                keyid:90:9E:9F:EA:56:63:21:BE:07:82:98:2D:2D:8B:AB:3F:E3:A8:D2:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/34352e3232342e3231372e302f32342d3234203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:de:ab:cd:ed:70:2d:fe:f0:e7:23:f8:54:75:64:87:b5:74:
         fe:27:53:69:d6:b3:90:2c:a8:01:65:e5:f6:de:29:a9:9f:bd:
         04:52:2a:f2:ea:b0:e5:0d:4b:55:63:13:04:79:62:b1:46:d5:
         45:68:b6:2b:57:21:b3:76:ea:bc:e3:92:f7:04:94:27:cc:61:
         17:2f:76:8d:86:24:87:cb:af:b4:b9:e2:6d:ad:bd:9f:c4:cb:
         eb:fb:85:eb:82:ba:83:96:80:da:40:ff:e4:9a:31:61:30:8c:
         d9:73:df:68:a3:d8:a0:94:3c:c6:96:17:db:a8:a7:07:8a:7e:
         41:8b:a0:5f:b9:9a:c1:20:a1:7d:88:1c:0e:0a:10:d9:a6:d9:
         71:e5:d8:d9:e1:f3:51:b9:f4:0c:b7:49:6e:fe:0a:02:43:ac:
         31:5f:12:50:09:96:58:4d:af:ca:6e:d4:ec:5a:a4:10:83:dd:
         b1:2f:12:fc:ba:27:a4:dd:4d:f1:a1:56:fa:07:19:00:2e:73:
         a6:5b:01:d9:63:bc:24:42:ff:cc:3f:f2:62:4f:b0:18:4e:13:
         8a:09:5c:f2:2c:5a:74:b2:71:bf:b2:8e:df:a7:9f:3a:b6:e4:
         7b:64:5c:30:67:63:12:40:8c:fe:a3:fb:24:83:0a:6f:88:26:
         4e:3c:f8:2d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUUYvEcgcEqEBD71/ZbxlpGbgTUQUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTA5RTlGRUE1NjYzMjFCRTA3ODI5ODJEMkQ4QkFCM0ZF
M0E4RDIyQjAeFw0yNTAzMjgxOTI5MTNaFw0yNjAzMjcxOTM0MTNaMDMxMTAvBgNV
BAMTKDQ4RTAzREY0NTJBQjMzRDUxOEZCM0U0NjM3QjA4OTZCQzk4MTU1RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCpIP/uAWcufxI2QtnF0Y1g6iK
i0g0mYflNH+ORevg+G0RLkS7p3BzCnJuvpbMfyZ5lUpC8QahEPIza7SDfzhHta/s
og8XmrrOf8L66xo0jgIvN8KueTaeDl1aN5PMN5aNVbkqAQaOnssrojt8HyhnrnCU
s3hYpdKL+UHYfvMXq2NPOxmmur11eaxpwfOFY2xvTrr9ZGdYOBhFZa0LL+72Vv8N
6Uy2NFtvKqRtGx5rwRWH7HMpmnn1nFrrzGc4HPIz4+rcSiCWXuxilpuwzYuRTjZw
cithLz80PabIlaVHeQWRnOU0Rzxi5DzMW1qbDkfj6If/L6ju0rO9MUT2UYe7AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUSOA99FKrM9UY+z5GN7CJa8mBVfkwHwYDVR0j
BBgwFoAUkJ6f6lZjIb4HgpgtLYurP+Oo0iswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkVMOW1ydlBYZ2NwTGJDUTFNbnFhSlVnUkx2YXhhWUp4QThzMzdHUG84
bXAvMS85MDlFOUZFQTU2NjMyMUJFMDc4Mjk4MkQyRDhCQUIzRkUzQThEMjJCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkwOUU5RkVBNTY2MzIxQkUw
NzgyOTgyRDJEOEJBQjNGRTNBOEQyMkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJFTDltcnZQWGdjcExiQ1ExTW5xYUpVZ1JMdmF4YVlKeEE4czM3R1BvOG1wLzEv
MzQzNTJlMzIzMjM0MmUzMjMxMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMx
MzUzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALeDZMA0GCSqGSIb3DQEBCwUAA4IBAQC13qvN7XAt
/vDnI/hUdWSHtXT+J1Np1rOQLKgBZeX23impn70EUiry6rDlDUtVYxMEeWKxRtVF
aLYrVyGzduq845L3BJQnzGEXL3aNhiSHy6+0ueJtrb2fxMvr+4XrgrqDloDaQP/k
mjFhMIzZc99oo9iglDzGlhfbqKcHin5Bi6BfuZrBIKF9iBwOChDZptlx5djZ4fNR
ufQMt0lu/goCQ6wxXxJQCZZYTa/KbtTsWqQQg92xLxL8uiek3U3xoVb6BxkALnOm
WwHZY7wkQv/MP/JiT7AYThOKCVzyLFp0snG/so7fp586tuR7ZFwwZ2MSQIz+o/sk
gwpviCZOPPgt
-----END CERTIFICATE-----
Generated at Sun Apr 13 01:20:24 2025 by rpki-client