Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/34352e3233322e3231342e302f32342d3234203d3e203631363134.roa
File:                     34352e3233322e3231342e302f32342d3234203d3e203631363134.roa (raw, json)
Hash identifier:          Ha9iyvdVKEEFADzCYvvAQMBp3+rD2fZhJHP7OkKzEdg=
Subject key identifier:   E3:19:FB:2F:8A:AC:6A:E1:F6:D5:96:34:BA:7A:D4:33:BE:40:06:EB
Certificate issuer:       /CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
Certificate serial:       365E5294B07345A845FB654BAFFDE12EA9919CBB
Authority key identifier: A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/34352e3233322e3231342e302f32342d3234203d3e203631363134.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     61614
IP address blocks:        45.232.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl
                          rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 03:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:5e:52:94:b0:73:45:a8:45:fb:65:4b:af:fd:e1:2e:a9:91:9c:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:00:4f:b0:6a:1c:92:e6:f4:66:64:8b:6b:3c:
                    78:25:b2:fe:bd:fe:5d:78:5f:b7:4d:5c:26:b5:4d:
                    1c:43:37:04:61:83:86:6f:ca:6d:37:fe:3c:94:58:
                    1e:2e:20:5e:de:a9:d1:70:a6:0e:eb:b0:41:87:de:
                    3c:de:16:0c:77:90:ed:75:24:16:d5:08:c4:84:0d:
                    df:19:92:c5:71:3f:a2:ae:62:de:96:c3:37:9a:f7:
                    7b:45:f2:cd:54:77:f2:37:c4:f0:3b:75:77:62:4a:
                    27:12:54:7c:3e:9e:73:ee:df:26:c2:33:8c:dc:65:
                    f8:db:56:d7:58:b6:0d:52:0c:32:ee:4b:c7:cb:99:
                    c4:c9:9b:cc:22:f3:62:52:cf:35:de:19:74:f1:ad:
                    a1:fc:2a:8b:01:25:34:a3:46:6e:ba:43:fc:77:f3:
                    f5:03:a4:33:c9:ed:97:75:d8:11:31:49:6f:71:93:
                    14:ee:14:80:4b:d2:bd:1b:8f:21:b9:1b:49:42:d8:
                    e1:d5:d5:40:de:f1:19:24:aa:44:eb:77:9c:8c:73:
                    f8:2a:39:84:85:8b:c4:5e:89:e5:6b:f3:e4:f5:e8:
                    d4:ce:12:4e:b8:83:5b:60:66:29:2c:9f:a5:a6:6d:
                    35:d5:f8:e0:a1:33:86:08:37:38:18:86:f5:a2:73:
                    20:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:19:FB:2F:8A:AC:6A:E1:F6:D5:96:34:BA:7A:D4:33:BE:40:06:EB
            X509v3 Authority Key Identifier:
                keyid:A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/34352e3233322e3231342e302f32342d3234203d3e203631363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:11:a2:b2:40:9b:1b:cf:94:67:14:f5:1c:8b:2c:fd:02:57:
         b0:6c:88:fb:1e:9f:3f:00:78:fb:a6:70:5c:26:23:ff:5e:89:
         09:34:b6:07:5e:14:07:cf:59:4b:ee:3c:d0:ed:b6:67:40:1a:
         31:f9:1d:b0:83:41:d7:f1:9b:f6:53:8d:f3:20:e3:78:90:21:
         1e:78:26:4f:86:3c:2f:15:6e:ec:d3:f4:fe:2c:f8:23:85:ec:
         2c:07:34:5c:99:1a:ba:f5:57:6e:17:2b:f0:fd:ab:4d:1f:de:
         c7:a5:fd:b7:95:f5:e6:e6:63:a3:3f:03:dc:4b:2e:50:0e:58:
         fb:6e:c2:52:72:4e:e4:55:0b:db:e1:ec:86:ff:d0:a2:91:5e:
         a6:21:b3:97:9d:d1:b2:bb:e9:fe:70:eb:76:cf:3f:30:e9:50:
         49:e8:fa:22:27:bc:a4:bf:f1:76:d4:60:4a:db:b4:47:7e:47:
         02:a1:58:3d:f3:97:e3:89:4d:4d:f9:f1:a2:ce:5e:5e:1a:42:
         ab:19:78:23:49:ae:36:16:38:16:41:b5:e9:bc:36:35:fc:85:
         83:83:83:5b:73:8f:53:66:04:fc:33:5f:33:3b:ce:83:29:dc:
         cf:40:f6:7b:03:7b:6b:fa:f5:d7:4c:a9:e9:c3:e3:93:b4:62:
         89:36:8a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:05:01 2025 by rpki-client