Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/34352e3233322e3231352e302f32342d3234203d3e203631363134.roa
File:                     34352e3233322e3231352e302f32342d3234203d3e203631363134.roa (raw, json)
Hash identifier:          EowsTv2XVo4Rlp0o7XozH14lOgeLld8HbhfTDF+rc28=
Subject key identifier:   6A:E5:1B:28:BE:AB:D6:F0:0F:72:78:BD:58:4F:BD:67:9A:93:8E:83
Certificate issuer:       /CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
Certificate serial:       331DE76FB392449DB76D46FA417DDDDC931F600E
Authority key identifier: A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/34352e3233322e3231352e302f32342d3234203d3e203631363134.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     61614
IP address blocks:        45.232.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl
                          rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 03:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:1d:e7:6f:b3:92:44:9d:b7:6d:46:fa:41:7d:dd:dc:93:1f:60:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d4:92:36:0e:77:56:57:8e:14:f1:a6:62:94:
                    c0:46:16:15:35:31:cf:8c:00:e1:58:11:c1:ee:62:
                    b3:21:97:d8:06:6d:85:d9:c6:ea:e5:df:46:74:76:
                    03:9b:67:bd:75:67:f4:d1:0b:a2:69:34:cd:a8:36:
                    b0:ca:5c:05:5b:33:0b:9d:6a:a7:b7:20:82:bc:0a:
                    27:a2:3f:89:c2:ad:b8:14:c7:52:17:ef:f5:11:78:
                    79:ed:9d:43:f7:0c:4d:46:da:aa:02:f2:a8:8e:47:
                    d2:d9:99:85:5d:6e:53:82:0d:c9:dd:2b:e9:1b:04:
                    ab:8f:a3:a5:0b:e5:fa:34:b6:c0:d4:8b:8b:c1:36:
                    8d:18:5c:5c:62:0c:a4:3d:29:71:e8:9a:cd:8a:0f:
                    ae:52:74:07:71:6e:8d:a1:47:b0:08:c0:cf:5b:1a:
                    63:f9:c2:94:a0:32:1d:a0:55:d7:91:4e:af:b0:27:
                    c5:42:8c:0a:83:63:e7:cd:84:69:ff:18:5c:54:aa:
                    0a:02:14:e8:8a:09:77:f8:af:65:ff:22:35:d9:2d:
                    7b:ec:4c:05:09:79:19:9c:ea:0b:30:3d:4d:be:f4:
                    33:8e:a7:eb:f3:68:f2:b8:06:63:5a:3a:fb:75:e8:
                    f0:0a:f1:a0:99:76:ca:63:d0:be:06:9a:e5:63:6b:
                    23:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E5:1B:28:BE:AB:D6:F0:0F:72:78:BD:58:4F:BD:67:9A:93:8E:83
            X509v3 Authority Key Identifier:
                keyid:A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/34352e3233322e3231352e302f32342d3234203d3e203631363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:c3:b5:f5:dc:c1:22:02:03:e6:88:1d:c9:f9:30:de:27:63:
         5e:31:fc:9a:2e:9d:5b:ab:b0:84:37:05:63:e7:b0:37:6c:cb:
         a6:f9:41:52:d4:45:eb:b9:da:4f:1b:73:08:2e:fa:96:45:d6:
         68:51:8b:42:01:18:50:eb:12:d0:cf:66:9d:e8:2e:d5:d1:65:
         b6:75:93:c4:a6:53:55:56:e5:4e:6a:7e:83:16:a4:88:e2:cc:
         3a:c5:e2:98:b8:69:b9:55:18:93:6d:f4:32:2c:cc:ca:52:1a:
         01:d4:f9:56:50:2b:dc:7d:33:f3:6f:b7:63:f1:cf:eb:04:1e:
         ad:e2:09:04:d7:fd:8c:16:97:1e:27:fa:a2:8f:2f:81:af:62:
         62:f6:2b:82:13:52:1b:c8:3b:52:00:9c:80:76:7b:11:17:b8:
         79:2a:27:73:74:6c:2a:09:a6:d5:28:ad:7d:60:c8:fe:00:2a:
         b3:4d:c4:15:ca:83:7c:72:1e:8c:a1:a3:be:7c:a3:cf:44:c3:
         06:ce:9f:f8:e2:3d:a6:fa:34:88:af:c1:d7:f5:1a:7e:db:f7:
         98:c8:5f:53:19:c7:bd:6c:dc:60:66:41:a5:ef:1e:f4:eb:94:
         4a:0e:4b:d2:39:27:02:c7:6c:68:19:08:b0:fc:20:b8:31:5d:
         25:e6:1f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:02:19 2025 by rpki-client