Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/34352e3233322e3138382e302f32342d3234203d3e203631353932.roa
File:                     34352e3233322e3138382e302f32342d3234203d3e203631353932.roa (raw, json)
Hash identifier:          lRfxX+3ZkhjRekZbpV9cdRqYOgmejezDmHgunxeK0tY=
Subject key identifier:   50:59:FC:A2:53:4D:F3:92:17:69:74:25:16:22:F9:EF:51:5B:97:0F
Certificate issuer:       /CN=909E9FEA566321BE0782982D2D8BAB3FE3A8D22B
Certificate serial:       35F4443A4708366BDC09211AFBF117E87F85667C
Authority key identifier: 90:9E:9F:EA:56:63:21:BE:07:82:98:2D:2D:8B:AB:3F:E3:A8:D2:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/34352e3233322e3138382e302f32342d3234203d3e203631353932.roa
Signing time:             Fri 28 Mar 2025 19:34:12 +0000
ROA not before:           Fri 28 Mar 2025 19:29:12 +0000
ROA not after:            Fri 27 Mar 2026 19:34:12 +0000
asID:                     61592
IP address blocks:        45.232.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.crl
                          rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 09:38:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:f4:44:3a:47:08:36:6b:dc:09:21:1a:fb:f1:17:e8:7f:85:66:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=909E9FEA566321BE0782982D2D8BAB3FE3A8D22B
        Validity
            Not Before: Mar 28 19:29:12 2025 GMT
            Not After : Mar 27 19:34:12 2026 GMT
        Subject: CN=5059FCA2534DF392176974251622F9EF515B970F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f5:81:8c:52:fc:d3:38:78:60:ac:7c:a8:b5:
                    b7:8f:24:67:56:f7:19:b8:02:12:48:5e:0e:1c:28:
                    0d:c8:cd:98:f5:f9:1c:e6:f6:10:43:09:01:b4:7f:
                    70:63:31:71:de:61:3b:1c:39:bf:70:2e:f0:d1:c2:
                    15:d6:29:ea:bb:1b:58:df:3b:45:5f:a7:3d:dd:80:
                    f2:5c:ec:7a:1c:ad:89:59:c0:06:fb:0c:66:b7:59:
                    a9:c8:da:68:34:20:02:b7:09:1d:f3:9a:7e:66:70:
                    0a:81:bd:60:b5:66:26:b2:b5:2f:6d:70:30:bd:11:
                    a3:49:65:bc:68:05:6f:85:34:78:9c:63:29:0d:41:
                    34:57:24:9d:54:bb:a3:5a:cf:c4:06:ee:66:c4:8a:
                    9e:51:2d:70:94:c0:cc:7e:57:3f:ed:13:28:57:29:
                    c3:11:7f:f0:23:ab:a2:91:4d:24:91:e1:9b:aa:98:
                    ff:45:88:0e:e5:31:83:31:0b:cd:03:c7:ba:a8:92:
                    36:95:e4:e1:cb:69:e6:4c:23:eb:21:c4:49:9a:22:
                    e6:32:a0:0c:00:30:2a:41:96:8a:dd:fb:91:b9:a8:
                    d1:d5:72:26:87:3a:05:04:48:45:1a:e4:34:26:3c:
                    7e:3c:46:aa:fb:8a:cd:dc:c4:6b:89:3d:49:95:df:
                    04:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:59:FC:A2:53:4D:F3:92:17:69:74:25:16:22:F9:EF:51:5B:97:0F
            X509v3 Authority Key Identifier:
                keyid:90:9E:9F:EA:56:63:21:BE:07:82:98:2D:2D:8B:AB:3F:E3:A8:D2:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/34352e3233322e3138382e302f32342d3234203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:90:04:04:70:e7:11:de:af:87:e6:95:ec:96:67:41:22:83:
         19:50:84:a7:5d:fd:78:57:53:11:c3:90:c3:2c:49:c5:66:5b:
         e6:43:0a:83:f4:ae:3a:d8:fa:07:fb:d1:40:b8:22:d1:eb:4b:
         e9:0f:e5:5c:f3:8c:b6:ca:58:f2:4f:fb:08:66:c0:36:16:45:
         dd:87:8f:2a:aa:88:fa:3d:ff:74:21:30:9c:ae:b7:80:b3:c8:
         a3:6b:73:47:72:39:3e:9c:18:3b:b1:fc:42:4b:28:97:cf:52:
         fc:f7:dc:e6:b8:08:f6:54:34:8e:7c:82:5f:fb:ae:86:52:50:
         7b:6b:74:e9:ed:89:42:bc:dc:0d:52:97:32:6d:48:b7:fb:64:
         2b:ec:ec:00:ca:ae:fa:3e:3c:cb:6e:25:48:b8:4f:dd:1d:cf:
         80:3a:6b:02:91:3b:6b:ea:fd:04:be:3a:ec:21:5f:c9:2e:6a:
         54:60:77:d9:68:1a:cb:df:bd:b1:c4:c5:f2:a2:c4:90:a3:24:
         f3:2e:11:c0:50:cb:f5:0d:d0:ab:57:ce:0f:d4:20:6c:9a:f1:
         2f:ca:cc:51:37:1d:50:ea:61:9d:0b:7c:1b:82:4f:fe:78:fb:
         1f:8c:5b:40:4a:53:92:d3:67:d2:7a:c0:ab:9f:5b:49:1a:f8:
         f9:71:41:f0
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUNfREOkcINmvcCSEa+/EX6H+FZnwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTA5RTlGRUE1NjYzMjFCRTA3ODI5ODJEMkQ4QkFCM0ZF
M0E4RDIyQjAeFw0yNTAzMjgxOTI5MTJaFw0yNjAzMjcxOTM0MTJaMDMxMTAvBgNV
BAMTKDUwNTlGQ0EyNTM0REYzOTIxNzY5NzQyNTE2MjJGOUVGNTE1Qjk3MEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG9YGMUvzTOHhgrHyotbePJGdW
9xm4AhJIXg4cKA3IzZj1+Rzm9hBDCQG0f3BjMXHeYTscOb9wLvDRwhXWKeq7G1jf
O0Vfpz3dgPJc7HocrYlZwAb7DGa3WanI2mg0IAK3CR3zmn5mcAqBvWC1ZiaytS9t
cDC9EaNJZbxoBW+FNHicYykNQTRXJJ1Uu6Naz8QG7mbEip5RLXCUwMx+Vz/tEyhX
KcMRf/Ajq6KRTSSR4ZuqmP9FiA7lMYMxC80Dx7qokjaV5OHLaeZMI+shxEmaIuYy
oAwAMCpBlord+5G5qNHVciaHOgUESEUa5DQmPH48Rqr7is3cxGuJPUmV3wRDAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUUFn8olNN85IXaXQlFiL571Fblw8wHwYDVR0j
BBgwFoAUkJ6f6lZjIb4HgpgtLYurP+Oo0iswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkVMOW1ydlBYZ2NwTGJDUTFNbnFhSlVnUkx2YXhhWUp4QThzMzdHUG84
bXAvMS85MDlFOUZFQTU2NjMyMUJFMDc4Mjk4MkQyRDhCQUIzRkUzQThEMjJCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkwOUU5RkVBNTY2MzIxQkUw
NzgyOTgyRDJEOEJBQjNGRTNBOEQyMkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJFTDltcnZQWGdjcExiQ1ExTW5xYUpVZ1JMdmF4YVlKeEE4czM3R1BvOG1wLzEv
MzQzNTJlMzIzMzMyMmUzMTM4MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMx
MzUzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALei8MA0GCSqGSIb3DQEBCwUAA4IBAQCjkAQEcOcR
3q+H5pXslmdBIoMZUISnXf14V1MRw5DDLEnFZlvmQwqD9K462PoH+9FAuCLR60vp
D+Vc84y2yljyT/sIZsA2FkXdh48qqoj6Pf90ITCcrreAs8ija3NHcjk+nBg7sfxC
SyiXz1L899zmuAj2VDSOfIJf+66GUlB7a3Tp7YlCvNwNUpcybUi3+2Qr7OwAyq76
PjzLbiVIuE/dHc+AOmsCkTtr6v0EvjrsIV/JLmpUYHfZaBrL372xxMXyosSQoyTz
LhHAUMv1DdCrV84P1CBsmvEvysxRNx1Q6mGdC3wbgk/+ePsfjFtASlOS02fSesCr
n1tJGvj5cUHw
-----END CERTIFICATE-----
Generated at Sun Apr 13 01:20:38 2025 by rpki-client