Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/34352e3233322e3139302e302f32332d3233203d3e203631353932.roa
File:                     34352e3233322e3139302e302f32332d3233203d3e203631353932.roa (raw, json)
Hash identifier:          IvXVISpuoK55Zi0J1uzvz7kQ/ikYDFJHFP+5ZRhKIjg=
Subject key identifier:   60:4D:DC:E2:A3:F3:75:45:E3:EE:F2:95:A3:1B:6E:58:97:D7:B8:05
Certificate issuer:       /CN=909E9FEA566321BE0782982D2D8BAB3FE3A8D22B
Certificate serial:       023685883430DB97AB54D5F089E8815F99249CA6
Authority key identifier: 90:9E:9F:EA:56:63:21:BE:07:82:98:2D:2D:8B:AB:3F:E3:A8:D2:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/34352e3233322e3139302e302f32332d3233203d3e203631353932.roa
Signing time:             Fri 28 Mar 2025 19:34:12 +0000
ROA not before:           Fri 28 Mar 2025 19:29:12 +0000
ROA not after:            Fri 27 Mar 2026 19:34:12 +0000
asID:                     61592
IP address blocks:        45.232.190.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.crl
                          rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 09:38:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:36:85:88:34:30:db:97:ab:54:d5:f0:89:e8:81:5f:99:24:9c:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=909E9FEA566321BE0782982D2D8BAB3FE3A8D22B
        Validity
            Not Before: Mar 28 19:29:12 2025 GMT
            Not After : Mar 27 19:34:12 2026 GMT
        Subject: CN=604DDCE2A3F37545E3EEF295A31B6E5897D7B805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d0:0a:9e:ad:ce:58:c8:89:b4:bb:60:e5:9d:
                    c8:d2:33:1f:c6:c8:ad:f8:e9:f5:ae:e0:1a:25:7a:
                    c7:8c:dc:d8:dc:c4:bb:6e:af:7f:c4:22:87:2d:07:
                    8d:e9:67:7f:bc:0b:34:07:b1:4e:6c:e6:b9:16:55:
                    95:33:0f:df:15:ba:ee:07:72:f2:29:ea:9d:3a:c2:
                    18:7d:fd:27:4c:9b:57:b3:87:25:bd:4c:64:7e:61:
                    4c:0b:08:e5:54:c5:af:00:95:ad:82:6c:db:e8:c9:
                    18:91:eb:42:41:8b:df:0b:1f:39:fc:31:a8:27:d1:
                    6c:f5:98:fe:38:0c:ce:2b:65:1b:90:a3:3c:df:aa:
                    60:11:64:f2:b2:b2:bc:17:08:ca:e9:e6:f5:e5:fa:
                    8f:f8:c0:5e:ad:82:41:d3:87:ca:79:8f:de:72:95:
                    60:92:03:5d:42:9d:70:20:5f:31:e4:7c:e2:77:77:
                    5c:f9:8a:09:4c:46:3e:ef:19:ac:91:c4:25:38:62:
                    e8:ed:6f:d9:71:b7:2c:fb:4e:a8:c0:bd:03:df:df:
                    de:2d:13:2e:32:f4:6e:07:c0:1a:68:42:cb:7a:6a:
                    2d:6a:56:19:ae:6c:3f:61:f1:f2:a1:57:0c:b8:00:
                    6f:ef:0a:ef:49:7a:67:01:79:bf:97:04:8f:ec:99:
                    f0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:4D:DC:E2:A3:F3:75:45:E3:EE:F2:95:A3:1B:6E:58:97:D7:B8:05
            X509v3 Authority Key Identifier:
                keyid:90:9E:9F:EA:56:63:21:BE:07:82:98:2D:2D:8B:AB:3F:E3:A8:D2:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/34352e3233322e3139302e302f32332d3233203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:3f:1c:3e:5d:54:80:68:26:01:3e:96:19:08:a9:85:6d:95:
         b9:06:0b:c1:60:24:e8:e2:3f:ba:14:d2:c8:f3:3a:be:b1:04:
         c6:92:65:b0:e0:86:b4:47:24:b1:3f:da:64:1d:95:8e:56:05:
         79:c0:cd:e1:a0:2a:bc:04:ee:8c:a2:74:5e:ea:71:92:04:ba:
         2a:ef:ad:20:15:a4:11:c4:2e:67:84:81:57:ac:2c:d6:26:53:
         bc:db:d8:10:d6:fe:47:a7:f9:5c:ee:e2:73:9a:d1:b1:5c:69:
         55:24:1f:53:d2:83:13:bc:ca:ec:81:92:f9:e8:cb:d0:59:e3:
         0b:b5:49:f2:9b:39:32:4c:d5:77:27:e7:d9:d4:07:08:e2:c9:
         e8:65:b0:42:75:91:e3:81:b3:a2:ac:7e:ef:9e:37:67:a6:d3:
         4f:15:1d:86:23:38:22:bc:a6:e1:c1:7d:9a:09:b3:0e:e6:59:
         58:c2:7a:78:a4:d3:85:39:f8:b4:84:23:c9:ee:06:ca:85:2f:
         40:f5:5d:84:a7:01:61:14:96:8e:64:e3:17:c9:98:3c:c7:98:
         91:ec:d2:49:63:99:f6:ae:8e:2c:e6:bc:59:f8:b6:cb:31:53:
         1a:76:09:35:6f:c6:8c:d6:83:27:22:60:7b:cd:45:a4:ab:4e:
         4a:b0:8f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:17:36 2025 by rpki-client