Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/34352e3233342e3130302e302f32322d3232203d3e203631353932.roa
File:                     34352e3233342e3130302e302f32322d3232203d3e203631353932.roa (raw, json)
Hash identifier:          /OvqXJAnLD1xaOyw/3RVqZfzS9Ll32/EcxWyNexHU48=
Subject key identifier:   D7:21:AB:9C:9E:5B:CE:8D:D8:68:92:FC:47:06:FC:13:18:6E:F7:2F
Certificate issuer:       /CN=909E9FEA566321BE0782982D2D8BAB3FE3A8D22B
Certificate serial:       0ACCFB2DB4EDAC3089267C1D594502B6893E75F8
Authority key identifier: 90:9E:9F:EA:56:63:21:BE:07:82:98:2D:2D:8B:AB:3F:E3:A8:D2:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/34352e3233342e3130302e302f32322d3232203d3e203631353932.roa
Signing time:             Fri 28 Mar 2025 19:34:10 +0000
ROA not before:           Fri 28 Mar 2025 19:29:10 +0000
ROA not after:            Fri 27 Mar 2026 19:34:10 +0000
asID:                     61592
IP address blocks:        45.234.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.crl
                          rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 09:38:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:cc:fb:2d:b4:ed:ac:30:89:26:7c:1d:59:45:02:b6:89:3e:75:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=909E9FEA566321BE0782982D2D8BAB3FE3A8D22B
        Validity
            Not Before: Mar 28 19:29:10 2025 GMT
            Not After : Mar 27 19:34:10 2026 GMT
        Subject: CN=D721AB9C9E5BCE8DD86892FC4706FC13186EF72F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:31:a7:53:61:35:bf:e7:6e:09:bf:3e:8f:5f:
                    80:12:c7:a4:ad:35:3d:37:0b:48:00:8b:38:de:7b:
                    d5:88:40:17:86:3d:88:3d:7a:04:69:3e:f0:30:f1:
                    c3:fc:1e:bc:7c:be:bc:5c:d2:b5:e2:1d:2a:58:5e:
                    f1:be:04:c5:f6:1c:3f:23:cb:44:7f:50:0c:03:c5:
                    c8:80:3b:ce:0d:f8:3b:23:9e:c3:21:4c:49:ae:4a:
                    40:11:58:84:9a:ba:a0:2c:78:da:e1:23:00:b4:73:
                    65:08:24:f9:fd:0d:69:c3:22:aa:a5:65:25:f2:7b:
                    95:24:1a:e5:b2:d7:ac:04:eb:0a:20:2f:49:f4:4f:
                    84:7d:9c:2d:7a:cb:08:68:15:ad:68:33:9b:fa:2b:
                    0c:6c:85:83:6b:3f:23:79:50:74:d9:3a:0b:24:0f:
                    0b:b2:28:7c:d6:79:60:6c:19:33:5b:af:16:b9:d6:
                    22:63:b4:5a:52:68:e3:fd:bf:26:24:22:b0:0b:08:
                    d4:16:f5:d5:c4:95:6f:10:81:6a:4a:c0:9f:2f:68:
                    22:9e:f1:a1:4c:ee:d4:44:ed:d5:59:e0:83:16:27:
                    e8:0a:e5:d9:ac:15:e6:d2:00:d8:54:3a:ec:07:51:
                    59:34:0c:02:65:91:2b:a9:01:56:1f:41:ec:ba:57:
                    c7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:21:AB:9C:9E:5B:CE:8D:D8:68:92:FC:47:06:FC:13:18:6E:F7:2F
            X509v3 Authority Key Identifier:
                keyid:90:9E:9F:EA:56:63:21:BE:07:82:98:2D:2D:8B:AB:3F:E3:A8:D2:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/34352e3233342e3130302e302f32322d3232203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:25:30:f7:c4:5a:4d:8f:ac:37:c8:31:d9:6c:f4:fb:16:0f:
         6f:1f:2d:9d:eb:b4:ef:b1:ee:79:34:14:24:38:ef:05:2c:a8:
         b0:dc:07:81:18:e7:04:82:fc:2d:43:bc:54:96:52:2f:8f:df:
         94:43:df:8b:80:e2:cf:9c:31:59:29:2b:6e:b2:c0:6f:c9:23:
         22:41:be:0e:d9:60:20:22:3b:c2:a5:ca:0a:2d:87:de:fc:01:
         6f:8c:d4:96:57:57:e4:53:d8:a3:a5:24:12:d6:0b:0f:84:3c:
         89:22:e0:c3:4b:9b:5f:f5:ec:f7:c3:1e:b0:84:6d:52:32:3f:
         3a:14:ca:a8:86:35:4d:ef:df:3c:10:5a:27:bc:68:80:c4:af:
         b2:bf:fa:0f:68:43:b9:92:27:71:af:af:42:32:7b:36:a1:b1:
         a9:85:a4:4e:4e:39:3d:b3:90:e7:88:65:19:b7:5f:ed:91:c2:
         52:f3:50:53:06:8b:d9:32:f0:dd:69:e9:d3:75:13:2e:aa:d4:
         4c:36:d2:11:1a:1e:f9:5d:76:7e:ad:b8:89:d5:ee:25:a5:d2:
         87:52:27:93:3a:9a:84:3b:54:20:7f:38:c4:27:6d:04:16:c1:
         f4:c0:29:54:b8:c4:38:30:3d:45:06:19:98:70:10:ff:b8:f5:
         a0:4e:cf:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:17:33 2025 by rpki-client