Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/34352e3232342e3231392e302f32342d3234203d3e203631353932.roa
File:                     34352e3232342e3231392e302f32342d3234203d3e203631353932.roa (raw, json)
Hash identifier:          VfG1W+7tFI4Ikvhjxs8/B+Lx7iPlXKyVXSP2XY+LMSo=
Subject key identifier:   23:69:D9:F9:94:0F:99:31:7E:60:FA:DB:86:A8:84:CB:5E:72:93:CE
Certificate issuer:       /CN=909E9FEA566321BE0782982D2D8BAB3FE3A8D22B
Certificate serial:       170DB3F052A99F0574D2BEF638F668643E8F08C3
Authority key identifier: 90:9E:9F:EA:56:63:21:BE:07:82:98:2D:2D:8B:AB:3F:E3:A8:D2:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/34352e3232342e3231392e302f32342d3234203d3e203631353932.roa
Signing time:             Fri 28 Mar 2025 19:34:12 +0000
ROA not before:           Fri 28 Mar 2025 19:29:12 +0000
ROA not after:            Fri 27 Mar 2026 19:34:12 +0000
asID:                     61592
IP address blocks:        45.224.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.crl
                          rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 09:38:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:0d:b3:f0:52:a9:9f:05:74:d2:be:f6:38:f6:68:64:3e:8f:08:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=909E9FEA566321BE0782982D2D8BAB3FE3A8D22B
        Validity
            Not Before: Mar 28 19:29:12 2025 GMT
            Not After : Mar 27 19:34:12 2026 GMT
        Subject: CN=2369D9F9940F99317E60FADB86A884CB5E7293CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2f:f0:0f:a9:06:71:04:72:35:a8:da:04:50:
                    d7:3b:fc:ac:ea:0c:ec:ef:32:8d:85:7e:22:44:d8:
                    0c:8d:0c:1a:13:8a:fa:b0:21:f1:db:d8:0c:97:6c:
                    2d:4e:11:ed:52:10:0a:95:4e:ba:ed:3e:bc:77:0f:
                    96:c3:66:49:7c:73:0c:8e:c7:0a:99:2e:e7:c3:38:
                    e4:0b:29:9e:23:d3:6e:79:e4:46:4a:2b:4c:84:65:
                    c7:b5:84:36:b3:93:45:27:f7:94:ac:17:f9:1c:27:
                    1f:89:33:5f:e4:39:70:87:0c:20:68:b2:2b:a5:a6:
                    b7:88:20:05:69:50:e7:ec:dc:c7:5e:59:35:f2:b1:
                    a0:f6:a1:70:23:e1:2d:24:07:03:eb:3b:d3:95:25:
                    1c:0d:fb:a2:27:86:81:30:97:7d:0e:28:b6:35:cf:
                    46:a9:8c:f1:92:7e:25:70:1c:e7:50:a3:0e:eb:74:
                    14:05:91:23:71:f8:8d:29:b8:ab:51:98:9d:0f:46:
                    2a:25:00:ae:31:5f:7f:95:6c:93:5c:75:f2:7a:5c:
                    fd:c8:a3:2d:8e:f3:e3:b5:d6:72:a0:ff:64:3f:70:
                    7d:63:d7:98:a4:ee:78:3f:cf:19:3b:a0:92:85:cb:
                    d7:7a:05:e1:c8:ee:f3:05:e4:b5:60:53:52:80:f4:
                    09:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:69:D9:F9:94:0F:99:31:7E:60:FA:DB:86:A8:84:CB:5E:72:93:CE
            X509v3 Authority Key Identifier:
                keyid:90:9E:9F:EA:56:63:21:BE:07:82:98:2D:2D:8B:AB:3F:E3:A8:D2:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/34352e3232342e3231392e302f32342d3234203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:fb:c4:40:e7:d0:b4:dd:a4:48:0d:1c:e3:ff:22:ea:1b:bf:
         69:31:7f:44:e3:f5:f3:c2:06:cc:d0:81:72:f8:4c:19:05:77:
         cf:3f:c2:08:77:d7:7e:e4:de:04:2f:b0:13:49:bd:b5:01:47:
         7a:6b:f3:cb:58:c7:6e:6b:2f:f3:86:2c:97:8f:3d:00:a6:9b:
         e2:48:cf:98:f4:dd:07:37:40:b9:c3:8b:85:2a:8f:e1:e3:a2:
         be:c7:5e:cf:08:52:92:6e:5c:96:24:13:b1:77:08:91:19:7e:
         5b:52:70:18:11:7e:0c:05:4e:bf:42:73:e9:24:2a:2b:69:29:
         53:6c:83:66:d9:4d:e7:c8:54:c0:6d:56:8a:f1:7a:64:85:9d:
         01:76:ec:50:82:66:8f:fe:7e:1d:fe:f4:b3:33:75:22:df:89:
         5e:95:7b:0d:0c:16:a4:67:04:d6:29:18:87:92:c7:e8:41:6f:
         d9:f4:3f:88:46:a4:ba:30:96:77:26:cd:08:ed:7d:7f:b6:24:
         30:2e:a6:6d:42:2d:59:6b:90:3e:de:bd:d2:dd:6a:4d:12:a1:
         33:3e:6c:57:de:56:86:ba:6c:aa:02:80:88:a9:88:d9:e6:4c:
         a6:cb:3c:b6:c2:8a:86:b8:44:d3:f2:8c:12:d3:33:50:4c:55:
         fd:3d:7c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:19:57 2025 by rpki-client