Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/34352e3233342e3130332e302f32342d3234203d3e203631353932.roa
File:                     34352e3233342e3130332e302f32342d3234203d3e203631353932.roa (raw, json)
Hash identifier:          xHS956d9WIvY7EjOGQDTcqpzoQ2yNyLTL7RDvP2x8Gk=
Subject key identifier:   B5:7D:37:17:E7:02:91:2A:8D:98:FE:DE:20:01:EB:11:DE:B9:05:66
Certificate issuer:       /CN=909E9FEA566321BE0782982D2D8BAB3FE3A8D22B
Certificate serial:       62AAD279F88D358628821274B76CCD9DAE49B349
Authority key identifier: 90:9E:9F:EA:56:63:21:BE:07:82:98:2D:2D:8B:AB:3F:E3:A8:D2:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/34352e3233342e3130332e302f32342d3234203d3e203631353932.roa
Signing time:             Fri 28 Mar 2025 19:34:13 +0000
ROA not before:           Fri 28 Mar 2025 19:29:13 +0000
ROA not after:            Fri 27 Mar 2026 19:34:13 +0000
asID:                     61592
IP address blocks:        45.234.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.crl
                          rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 09:38:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:aa:d2:79:f8:8d:35:86:28:82:12:74:b7:6c:cd:9d:ae:49:b3:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=909E9FEA566321BE0782982D2D8BAB3FE3A8D22B
        Validity
            Not Before: Mar 28 19:29:13 2025 GMT
            Not After : Mar 27 19:34:13 2026 GMT
        Subject: CN=B57D3717E702912A8D98FEDE2001EB11DEB90566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b3:19:34:c3:28:a8:f7:20:b0:64:29:b2:81:
                    f3:1d:09:93:e5:79:11:2f:da:8c:37:42:96:0a:53:
                    ba:a1:16:63:2a:e9:a5:dc:11:b0:52:b6:13:55:b9:
                    5c:f3:e9:c9:b7:5b:67:2f:36:f6:b7:69:9a:dc:9e:
                    6a:66:33:fc:21:5a:2b:d7:c5:2d:2f:54:e5:3f:0e:
                    25:a1:f0:21:5a:91:bd:0f:47:3c:21:60:42:7a:82:
                    13:1d:2b:76:6a:a3:e8:06:6f:9b:73:2d:70:6b:69:
                    a4:1c:8c:de:12:10:10:45:64:8b:42:a8:09:92:a3:
                    29:19:21:b5:be:bc:97:45:97:0d:ad:77:33:11:47:
                    38:af:a5:09:2a:01:83:f6:f2:7d:19:93:10:e3:2f:
                    04:53:93:62:38:e9:bc:d3:1d:d6:8c:a8:32:84:b5:
                    74:b1:4e:76:f7:02:5a:cf:5b:f6:4f:00:05:f8:9a:
                    ee:49:e8:ac:c7:f5:87:d1:9f:cb:57:df:67:49:74:
                    19:df:d2:34:f8:08:fd:dd:a1:56:51:f8:fb:26:8a:
                    53:f1:56:1e:a3:88:e1:c0:ca:32:bb:1e:29:aa:29:
                    3c:6e:9c:77:39:f1:69:35:d5:db:c5:94:bb:ea:85:
                    57:7f:d3:02:9d:ab:ef:a4:10:f3:ab:0d:e5:22:2a:
                    e8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:7D:37:17:E7:02:91:2A:8D:98:FE:DE:20:01:EB:11:DE:B9:05:66
            X509v3 Authority Key Identifier:
                keyid:90:9E:9F:EA:56:63:21:BE:07:82:98:2D:2D:8B:AB:3F:E3:A8:D2:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/34352e3233342e3130332e302f32342d3234203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:f6:f4:40:36:17:32:79:1a:e4:d1:9e:9a:bb:7e:c9:53:96:
         d2:0d:cb:e5:8d:04:bf:07:75:90:1f:92:d7:57:4c:df:fc:c4:
         a1:1e:d1:6d:57:21:70:fd:27:ec:2c:87:d3:41:73:fe:b5:04:
         32:d2:d3:96:97:e6:95:54:96:ef:42:ee:3a:69:4b:44:17:eb:
         b6:20:87:c6:7d:d8:a2:51:34:67:60:77:4c:1f:92:47:05:c9:
         52:46:61:6f:94:f4:27:51:4e:35:77:b0:bc:ae:c1:87:c6:fa:
         4d:7e:5e:4b:6a:36:45:24:74:6d:8f:1f:95:0c:33:fa:44:c8:
         b1:ea:a6:dd:09:0d:f7:59:5a:7c:67:04:65:e7:10:9f:40:1b:
         92:20:70:86:af:89:fb:f4:a6:0f:83:21:12:64:1a:93:f1:bf:
         62:40:bc:51:9e:6b:0c:3e:1b:19:b8:0b:ad:2d:1f:0c:b0:cc:
         7a:b4:af:20:10:6c:88:84:9c:4b:ea:1a:6c:23:07:19:ae:ef:
         45:01:0e:e4:5b:ff:a8:c1:0b:93:7f:6c:98:b6:a6:1f:f0:50:
         4e:3c:a6:fe:30:1a:55:07:26:d1:91:97:19:02:c3:d3:25:9e:
         4c:11:dc:be:6e:3c:f4:e8:02:54:49:9a:e1:ac:f8:10:20:3d:
         c9:57:ee:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:20:15 2025 by rpki-client