Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/34352e3233322e3139312e302f32342d3234203d3e203631353932.roa
File:                     34352e3233322e3139312e302f32342d3234203d3e203631353932.roa (raw, json)
Hash identifier:          EfSJk9YiY08D3hjd4KiyCaMeCFI3p7Jc5SYiWkJ7k9I=
Subject key identifier:   6B:66:78:C9:B7:F5:0A:8C:C4:0D:A2:30:99:56:C8:4D:BB:4E:51:57
Certificate issuer:       /CN=909E9FEA566321BE0782982D2D8BAB3FE3A8D22B
Certificate serial:       461B95FCECC3B9888E6CA199C29019403281F376
Authority key identifier: 90:9E:9F:EA:56:63:21:BE:07:82:98:2D:2D:8B:AB:3F:E3:A8:D2:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/34352e3233322e3139312e302f32342d3234203d3e203631353932.roa
Signing time:             Fri 28 Mar 2025 19:34:13 +0000
ROA not before:           Fri 28 Mar 2025 19:29:13 +0000
ROA not after:            Fri 27 Mar 2026 19:34:13 +0000
asID:                     61592
IP address blocks:        45.232.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.crl
                          rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 09:38:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:1b:95:fc:ec:c3:b9:88:8e:6c:a1:99:c2:90:19:40:32:81:f3:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=909E9FEA566321BE0782982D2D8BAB3FE3A8D22B
        Validity
            Not Before: Mar 28 19:29:13 2025 GMT
            Not After : Mar 27 19:34:13 2026 GMT
        Subject: CN=6B6678C9B7F50A8CC40DA2309956C84DBB4E5157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:38:87:c8:4c:5e:ec:cd:c5:c3:7e:87:b9:a3:
                    83:af:87:87:d7:f9:93:57:3e:c7:67:42:d0:08:a8:
                    0c:86:f0:91:07:87:04:3f:87:30:53:90:2e:bd:1d:
                    7a:d1:55:5d:74:62:09:8f:08:97:89:ad:04:d6:df:
                    bd:84:e9:19:e8:ad:e0:ab:ce:ea:66:cb:2f:ab:f1:
                    15:ad:74:fd:97:93:8d:53:c7:85:bf:22:ac:ef:58:
                    85:51:d3:ab:98:54:2c:33:d3:7b:b5:b5:22:7c:c3:
                    cd:39:71:86:d3:9f:22:83:91:02:94:f6:d7:ab:d7:
                    ad:a3:82:1c:b6:4d:8d:f0:59:e4:7b:69:6c:39:94:
                    fa:88:6d:52:14:1b:e8:d5:3f:45:80:f7:89:34:83:
                    f6:99:19:3c:3c:8e:4c:7e:65:1a:14:8d:fd:16:4d:
                    13:2b:e9:ef:0c:48:0d:f9:6f:6c:be:dc:9e:6e:8f:
                    d3:c2:0a:7b:36:79:5b:56:cb:e0:05:cc:fa:54:b5:
                    dd:8b:63:a5:59:31:57:f2:4e:e1:77:bb:49:b6:2f:
                    04:34:82:33:16:68:81:cf:d2:fa:bb:66:6b:9c:b4:
                    f7:43:0a:78:da:8f:55:ba:c3:b6:a6:9a:b5:7a:57:
                    d8:04:75:22:ef:2b:6e:a4:47:da:5a:c5:9f:5a:e6:
                    fc:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:66:78:C9:B7:F5:0A:8C:C4:0D:A2:30:99:56:C8:4D:BB:4E:51:57
            X509v3 Authority Key Identifier:
                keyid:90:9E:9F:EA:56:63:21:BE:07:82:98:2D:2D:8B:AB:3F:E3:A8:D2:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/34352e3233322e3139312e302f32342d3234203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:19:7f:46:5e:9d:a2:dc:49:d9:f4:4f:e7:e9:5a:ab:51:bd:
         46:3a:34:84:40:d7:12:86:b1:7c:51:13:0a:13:6f:fc:93:ba:
         97:77:17:7c:e2:80:62:b7:56:3b:62:3c:8e:9f:8e:2f:83:66:
         6f:19:2a:b8:63:74:7c:bf:ee:4d:6c:83:5c:d9:48:9f:2f:c8:
         49:fc:0e:58:54:8f:96:47:21:3d:11:2f:87:8a:0d:fd:9b:60:
         56:b9:2b:9a:02:25:28:6f:5c:25:b7:50:25:ed:be:c6:03:e1:
         09:b5:7c:a8:67:fd:17:0c:57:7b:e6:93:b2:c1:9f:eb:e0:65:
         41:3b:80:d0:ab:0e:61:5a:73:f4:ec:cb:5b:0c:cd:49:b3:ec:
         29:df:6a:59:52:08:96:65:e8:5a:e8:a3:e8:54:04:cf:42:a8:
         3c:4d:81:36:33:e9:43:df:ea:28:c5:80:c3:c2:58:13:6b:1e:
         4f:c2:5a:d2:a5:7d:6e:c7:f1:e6:bc:6f:c9:da:59:2d:86:71:
         3a:66:eb:fc:25:ba:52:d3:72:bb:fb:e3:d3:a9:cb:78:5f:29:
         c1:7d:ac:d2:3f:33:ff:46:fd:98:87:f8:7f:04:6a:f2:0a:fc:
         b4:af:37:62:8b:fb:b6:a7:25:35:85:bc:40:52:f6:48:ad:5b:
         b2:44:9d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:17:16 2025 by rpki-client