Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/34352e3233322e3138392e302f32342d3234203d3e203631353932.roa
File:                     34352e3233322e3138392e302f32342d3234203d3e203631353932.roa (raw, json)
Hash identifier:          eagollg4hFl79wqBQsa1C2JFkKGSBy63wyFEgIwu/OU=
Subject key identifier:   8C:51:9C:7B:49:79:13:98:28:56:51:66:18:AB:65:C1:1B:B7:89:82
Certificate issuer:       /CN=909E9FEA566321BE0782982D2D8BAB3FE3A8D22B
Certificate serial:       71D290FB24AF04DB2D9318D0B5F386CC355A23F9
Authority key identifier: 90:9E:9F:EA:56:63:21:BE:07:82:98:2D:2D:8B:AB:3F:E3:A8:D2:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/34352e3233322e3138392e302f32342d3234203d3e203631353932.roa
Signing time:             Fri 28 Mar 2025 19:34:12 +0000
ROA not before:           Fri 28 Mar 2025 19:29:12 +0000
ROA not after:            Fri 27 Mar 2026 19:34:12 +0000
asID:                     61592
IP address blocks:        45.232.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.crl
                          rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 09:38:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:d2:90:fb:24:af:04:db:2d:93:18:d0:b5:f3:86:cc:35:5a:23:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=909E9FEA566321BE0782982D2D8BAB3FE3A8D22B
        Validity
            Not Before: Mar 28 19:29:12 2025 GMT
            Not After : Mar 27 19:34:12 2026 GMT
        Subject: CN=8C519C7B497913982856516618AB65C11BB78982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:30:6e:50:96:f8:99:0b:db:32:88:35:1d:fd:
                    01:11:e0:37:cc:f2:51:ec:18:44:4f:d5:2b:83:c1:
                    e2:58:38:f4:72:62:4f:70:b0:11:e0:ed:28:9d:72:
                    65:fd:f6:01:68:59:91:5b:4f:d5:64:d0:b3:1b:c9:
                    ae:a5:4e:c4:fd:7b:61:5f:6b:c3:f4:ec:44:02:20:
                    ee:3e:af:8e:dc:b2:48:ed:c7:89:0a:35:a3:cd:3d:
                    98:17:bc:95:1e:a4:7f:81:ac:a9:9a:45:77:db:09:
                    6e:17:6a:95:b9:34:79:a2:2e:70:76:42:06:4e:0a:
                    a3:fb:a9:37:cf:f4:61:36:02:a9:8f:73:8d:a3:b0:
                    29:8c:a0:90:69:30:68:35:cd:3f:3a:60:c3:9c:2d:
                    29:f1:ea:d7:61:7e:ca:26:1e:ad:d2:b7:e0:b9:78:
                    d3:c6:ac:e8:93:47:45:ba:38:f2:66:81:52:c5:3e:
                    69:91:36:c4:4c:6e:79:22:c8:91:45:1e:2c:1a:84:
                    8b:a0:25:2d:ec:46:5a:b6:2f:50:98:06:3e:56:69:
                    e2:8a:5e:e2:03:84:8e:a8:a5:8e:d3:f1:f2:a0:57:
                    bb:40:e1:3a:0a:b8:f6:c7:e5:bc:4c:f8:86:37:36:
                    4d:51:1a:8e:10:e6:e3:eb:5e:9d:f3:b6:56:d4:6f:
                    61:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:51:9C:7B:49:79:13:98:28:56:51:66:18:AB:65:C1:1B:B7:89:82
            X509v3 Authority Key Identifier:
                keyid:90:9E:9F:EA:56:63:21:BE:07:82:98:2D:2D:8B:AB:3F:E3:A8:D2:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/34352e3233322e3138392e302f32342d3234203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:1c:80:13:ea:18:c0:b3:0a:74:72:b9:38:6a:79:7b:90:0b:
         76:41:85:57:da:90:ad:c8:66:58:89:75:4d:e9:45:15:a1:b5:
         f5:90:18:d9:24:58:3a:f8:9d:1f:a9:a8:7a:70:0a:72:d3:f2:
         ce:79:c5:66:83:68:4d:3a:57:3b:db:6e:34:01:10:ac:3e:42:
         f3:69:30:31:15:b7:f0:be:c2:74:81:0c:5f:a6:02:ab:73:6b:
         f2:5b:73:97:2a:23:57:47:9c:44:7b:80:73:27:e0:a8:57:f7:
         39:fa:0c:7d:c3:82:30:48:ce:fd:f4:8b:99:d6:57:ae:bb:bd:
         b7:3d:b6:79:ca:9a:fd:cf:75:9a:cd:f1:1e:11:45:3d:99:11:
         19:26:f0:28:2d:b9:ef:20:14:db:98:01:75:06:26:93:51:2b:
         e1:71:a8:1e:72:b2:3f:a9:b3:72:c6:21:53:cb:d3:26:5f:32:
         32:e3:e9:4c:0e:51:79:a0:c0:40:7f:76:0f:2b:bf:bd:49:e0:
         b7:70:43:28:c8:94:4a:7e:36:81:54:8a:5a:3b:51:4c:6c:7d:
         de:75:d0:83:0e:a0:cc:1d:85:6e:f5:5e:d3:b1:3d:27:12:55:
         2a:f4:6e:45:38:d9:38:8a:96:01:c2:cb:2b:04:bf:e9:69:10:
         d3:6e:b6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:20:43 2025 by rpki-client