Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/34352e3233322e3231332e302f32342d3234203d3e203631363134.roa
File:                     34352e3233322e3231332e302f32342d3234203d3e203631363134.roa (raw, json)
Hash identifier:          FRR+IbqkIjuJ8URHu039Q9CVmIC608f4miw8E994Ywk=
Subject key identifier:   12:58:97:C6:31:36:4E:73:92:CA:AD:EB:EB:40:80:9D:E1:94:97:88
Certificate issuer:       /CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
Certificate serial:       653892465DA4FACB12E151059E4250172F5828EA
Authority key identifier: A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/34352e3233322e3231332e302f32342d3234203d3e203631363134.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     61614
IP address blocks:        45.232.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl
                          rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 19:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:38:92:46:5d:a4:fa:cb:12:e1:51:05:9e:42:50:17:2f:58:28:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8e:61:c3:c1:c9:06:ad:1e:57:79:86:94:13:
                    54:94:dc:ee:42:fd:9a:58:2b:05:e7:be:a8:30:1e:
                    a7:9b:9b:74:5a:b9:a0:32:62:4a:c6:1e:ae:de:ba:
                    83:f9:4c:0d:91:c1:2e:92:9a:2b:f7:93:e1:c8:c1:
                    e1:2e:d7:1f:b6:1f:1b:4f:23:61:dc:dd:7c:8a:8f:
                    e7:dc:97:86:a4:46:ef:2a:c8:de:2d:cd:de:19:b4:
                    23:1d:38:76:50:57:b2:e0:13:38:1c:25:af:20:8c:
                    32:c7:91:79:09:d9:d3:ac:84:ff:6c:3d:ab:68:6d:
                    35:f2:32:ba:d7:28:a9:a1:12:47:15:d5:ea:6b:01:
                    f0:28:65:29:52:bf:91:23:9d:fa:91:b2:25:66:39:
                    78:14:53:7c:ec:7c:0e:25:80:f1:d3:df:cd:ce:a7:
                    d2:5f:04:c0:a2:12:2a:7e:d2:45:b7:7d:ce:0b:85:
                    3a:81:08:48:ab:b4:c6:e0:9b:70:8a:34:7a:ad:ac:
                    35:b3:19:f4:b3:7e:fa:ed:2b:56:f3:9d:33:27:ae:
                    5e:e6:00:53:ea:3d:c2:96:db:21:05:f3:55:a2:e8:
                    e7:f3:d6:97:ea:0b:aa:d6:72:71:40:1f:60:2f:19:
                    c3:a9:9e:7f:3e:dc:88:40:0e:7f:66:55:d3:aa:f9:
                    9d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:58:97:C6:31:36:4E:73:92:CA:AD:EB:EB:40:80:9D:E1:94:97:88
            X509v3 Authority Key Identifier:
                keyid:A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/34352e3233322e3231332e302f32342d3234203d3e203631363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:09:a3:9c:25:4b:88:9b:d2:0b:8c:93:b1:ab:30:d6:b9:45:
         d4:c2:95:71:21:ef:95:87:30:ef:a2:92:37:5a:71:9a:86:71:
         be:33:c5:e3:32:ce:a1:61:e2:31:26:0b:ae:e8:40:23:17:cb:
         79:aa:27:02:10:c6:2a:94:1f:df:5d:09:e8:d7:b7:50:1a:ee:
         39:eb:54:3c:39:1f:38:79:8e:ee:e0:cd:65:54:a9:d7:98:01:
         2c:cf:14:9f:e3:c1:72:66:46:e1:7e:77:0a:27:39:8a:2b:2a:
         6f:b0:45:10:1a:bf:00:12:4e:58:59:2b:d3:c3:c2:13:dd:51:
         c2:0c:f2:85:16:f7:c1:ed:91:25:88:1f:75:28:65:76:56:51:
         8a:ee:e2:5a:03:bc:6a:53:b6:7b:45:85:3f:55:17:83:d0:ca:
         9d:12:e6:48:12:a6:ec:2a:b6:1f:f2:84:f3:10:cd:e8:af:d6:
         68:81:8a:86:5f:fb:6b:9f:4e:d0:17:2b:a0:9b:72:9b:eb:ca:
         3f:8b:d7:00:31:7e:63:57:82:01:73:30:ce:80:06:f4:05:54:
         62:92:09:bd:33:90:9a:12:38:71:ab:84:58:81:84:a4:21:66:
         72:ea:b9:01:a2:20:e1:2d:16:03:ae:9c:5e:33:16:02:53:33:
         a3:f5:71:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:15:50 2025 by rpki-client