Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/34352e3233342e3130302e302f32342d3234203d3e203631353932.roa
File:                     34352e3233342e3130302e302f32342d3234203d3e203631353932.roa (raw, json)
Hash identifier:          Mllu5KULC2IDgjuNZNHeM85RgdQADaqap7rFpBghv04=
Subject key identifier:   00:B3:75:1D:FA:ED:09:30:12:3C:96:7B:3B:46:11:C4:A9:50:1E:59
Certificate issuer:       /CN=909E9FEA566321BE0782982D2D8BAB3FE3A8D22B
Certificate serial:       3282BE09370F645E94246774A6BE92F4C74B0A1C
Authority key identifier: 90:9E:9F:EA:56:63:21:BE:07:82:98:2D:2D:8B:AB:3F:E3:A8:D2:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/34352e3233342e3130302e302f32342d3234203d3e203631353932.roa
Signing time:             Fri 28 Mar 2025 19:34:13 +0000
ROA not before:           Fri 28 Mar 2025 19:29:13 +0000
ROA not after:            Fri 27 Mar 2026 19:34:13 +0000
asID:                     61592
IP address blocks:        45.234.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.crl
                          rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 09:38:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:82:be:09:37:0f:64:5e:94:24:67:74:a6:be:92:f4:c7:4b:0a:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=909E9FEA566321BE0782982D2D8BAB3FE3A8D22B
        Validity
            Not Before: Mar 28 19:29:13 2025 GMT
            Not After : Mar 27 19:34:13 2026 GMT
        Subject: CN=00B3751DFAED0930123C967B3B4611C4A9501E59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7d:89:a0:cb:ab:da:f7:1d:a4:19:e4:f1:fc:
                    4d:be:91:b0:47:9b:70:e7:98:1b:5f:03:6e:39:7e:
                    59:1c:4d:79:07:c0:e2:cb:0a:3d:db:09:22:62:5f:
                    3a:8e:f5:f6:3c:c2:d1:5d:96:52:2d:d7:16:dc:fc:
                    3d:59:fd:61:d2:48:ab:eb:5a:97:4b:49:32:54:ae:
                    4e:eb:f1:e1:5b:1f:39:5e:f1:75:d2:6e:07:87:f3:
                    59:9c:3d:ac:28:09:7d:f9:f3:3c:74:91:04:27:a7:
                    44:62:ff:92:73:34:55:f8:2a:f1:1c:8a:b4:b0:f6:
                    de:94:1a:d6:26:37:23:5b:02:47:26:09:86:6e:66:
                    f9:cf:7c:01:0b:17:9b:3b:b0:e1:6f:8b:af:61:71:
                    b4:a9:8d:af:71:d0:a0:1d:85:c3:d2:ce:6e:f4:19:
                    b5:93:36:53:17:41:ea:95:48:8b:13:78:81:37:c0:
                    38:7c:2b:9d:a3:f9:71:6a:05:69:a9:82:00:a9:17:
                    a9:ca:52:8d:1f:20:72:42:a4:92:d6:cf:ab:3d:97:
                    d8:b2:8c:d4:d2:ce:65:92:e7:d0:10:1a:f9:15:fb:
                    b8:5f:62:91:d7:3e:ee:50:65:f3:81:ac:04:80:9c:
                    cd:de:12:bb:ee:34:28:ae:63:10:c8:f5:b0:13:b0:
                    21:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B3:75:1D:FA:ED:09:30:12:3C:96:7B:3B:46:11:C4:A9:50:1E:59
            X509v3 Authority Key Identifier:
                keyid:90:9E:9F:EA:56:63:21:BE:07:82:98:2D:2D:8B:AB:3F:E3:A8:D2:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/34352e3233342e3130302e302f32342d3234203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:00:7e:2e:ad:f4:ec:65:bb:00:c1:0e:9d:9d:d8:04:fa:8d:
         02:e7:6f:e6:84:a6:62:9e:9f:2d:f3:f9:74:ee:e9:61:15:62:
         10:51:59:ce:f3:a7:9f:75:b7:b8:5f:10:7f:f6:3a:65:03:a1:
         60:c6:ed:ee:3a:e7:88:98:e9:79:09:b9:1c:d6:d9:91:29:e0:
         47:f7:9e:5d:d1:80:16:63:31:25:54:87:09:b2:85:e2:e4:88:
         36:54:ac:dc:90:ac:9b:d7:3e:84:a2:8f:e7:19:8f:93:5e:54:
         3c:29:4f:4f:bd:0f:0c:31:cf:91:86:07:fc:70:a9:f0:1b:2e:
         c6:b0:b7:ce:38:59:ca:f5:96:90:32:6a:6e:80:97:50:9c:07:
         74:12:bf:3d:2f:a9:89:85:27:da:6f:82:1e:16:48:aa:f8:dd:
         5a:5e:82:5c:ee:ba:10:d6:5a:eb:5a:be:cc:2c:5b:1b:33:57:
         5f:f5:0e:90:e8:85:09:d2:56:8c:e0:95:47:b8:11:c7:96:10:
         37:96:c9:04:f4:04:59:3f:b9:74:c4:b4:3f:76:60:42:0f:e9:
         7e:d3:32:99:cc:19:84:e8:6d:ce:a6:6b:84:1e:80:f2:be:0e:
         3c:91:74:bc:6c:bc:e2:8a:89:e9:33:3a:c0:9b:ee:16:87:43:
         e3:04:4c:e7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUMoK+CTcPZF6UJGd0pr6S9MdLChwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTA5RTlGRUE1NjYzMjFCRTA3ODI5ODJEMkQ4QkFCM0ZF
M0E4RDIyQjAeFw0yNTAzMjgxOTI5MTNaFw0yNjAzMjcxOTM0MTNaMDMxMTAvBgNV
BAMTKDAwQjM3NTFERkFFRDA5MzAxMjNDOTY3QjNCNDYxMUM0QTk1MDFFNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+fYmgy6va9x2kGeTx/E2+kbBH
m3DnmBtfA245flkcTXkHwOLLCj3bCSJiXzqO9fY8wtFdllIt1xbc/D1Z/WHSSKvr
WpdLSTJUrk7r8eFbHzle8XXSbgeH81mcPawoCX358zx0kQQnp0Ri/5JzNFX4KvEc
irSw9t6UGtYmNyNbAkcmCYZuZvnPfAELF5s7sOFvi69hcbSpja9x0KAdhcPSzm70
GbWTNlMXQeqVSIsTeIE3wDh8K52j+XFqBWmpggCpF6nKUo0fIHJCpJLWz6s9l9iy
jNTSzmWS59AQGvkV+7hfYpHXPu5QZfOBrASAnM3eErvuNCiuYxDI9bATsCHNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUALN1HfrtCTASPJZ7O0YRxKlQHlkwHwYDVR0j
BBgwFoAUkJ6f6lZjIb4HgpgtLYurP+Oo0iswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkVMOW1ydlBYZ2NwTGJDUTFNbnFhSlVnUkx2YXhhWUp4QThzMzdHUG84
bXAvMS85MDlFOUZFQTU2NjMyMUJFMDc4Mjk4MkQyRDhCQUIzRkUzQThEMjJCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkwOUU5RkVBNTY2MzIxQkUw
NzgyOTgyRDJEOEJBQjNGRTNBOEQyMkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJFTDltcnZQWGdjcExiQ1ExTW5xYUpVZ1JMdmF4YVlKeEE4czM3R1BvOG1wLzEv
MzQzNTJlMzIzMzM0MmUzMTMwMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMx
MzUzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALepkMA0GCSqGSIb3DQEBCwUAA4IBAQC7AH4urfTs
ZbsAwQ6dndgE+o0C52/mhKZinp8t8/l07ulhFWIQUVnO86efdbe4XxB/9jplA6Fg
xu3uOueImOl5Cbkc1tmRKeBH955d0YAWYzElVIcJsoXi5Ig2VKzckKyb1z6Eoo/n
GY+TXlQ8KU9PvQ8MMc+Rhgf8cKnwGy7GsLfOOFnK9ZaQMmpugJdQnAd0Er89L6mJ
hSfab4IeFkiq+N1aXoJc7roQ1lrrWr7MLFsbM1df9Q6Q6IUJ0laM4JVHuBHHlhA3
lskE9ARZP7l0xLQ/dmBCD+l+0zKZzBmE6G3OpmuEHoDyvg48kXS8bLziionpMzrA
m+4Wh0PjBEzn
-----END CERTIFICATE-----
Generated at Sun Apr 13 01:20:06 2025 by rpki-client