Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/1/34352e3137362e3232322e302f32342d3234203d3e20323639303134.roa
File:                     34352e3137362e3232322e302f32342d3234203d3e20323639303134.roa (raw, json)
Hash identifier:          f9orR80lB+xhLSp5xUzyHnaU8YWJ3WG+uhOrYgqinFU=
Subject key identifier:   9C:D3:31:06:BB:A7:05:DE:D8:E5:05:23:0E:65:1E:82:4E:C7:03:93
Certificate issuer:       /CN=E9874D754A4F2E9B8149C3B894251362FDD83E90
Certificate serial:       30E3AA5A41288581415CC9B3391F412107A020C3
Authority key identifier: E9:87:4D:75:4A:4F:2E:9B:81:49:C3:B8:94:25:13:62:FD:D8:3E:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9874D754A4F2E9B8149C3B894251362FDD83E90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/1/34352e3137362e3232322e302f32342d3234203d3e20323639303134.roa
Signing time:             Wed 19 Mar 2025 00:10:58 +0000
ROA not before:           Wed 19 Mar 2025 00:05:58 +0000
ROA not after:            Wed 18 Mar 2026 00:10:58 +0000
asID:                     269014
IP address blocks:        45.176.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/1/E9874D754A4F2E9B8149C3B894251362FDD83E90.crl
                          rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/1/E9874D754A4F2E9B8149C3B894251362FDD83E90.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9874D754A4F2E9B8149C3B894251362FDD83E90.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 07:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:e3:aa:5a:41:28:85:81:41:5c:c9:b3:39:1f:41:21:07:a0:20:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9874D754A4F2E9B8149C3B894251362FDD83E90
        Validity
            Not Before: Mar 19 00:05:58 2025 GMT
            Not After : Mar 18 00:10:58 2026 GMT
        Subject: CN=9CD33106BBA705DED8E505230E651E824EC70393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5b:3d:c5:3e:9e:b8:28:14:ed:cc:16:0c:95:
                    03:f4:30:93:35:bf:25:c6:6b:91:4c:72:f0:7d:2d:
                    13:21:ce:63:97:a6:06:75:96:fb:79:91:29:14:6b:
                    3b:a7:5c:58:95:a6:69:75:64:24:3a:c2:d2:9c:9c:
                    9b:3d:fe:fa:00:b3:2c:b5:e0:2f:38:d3:17:f5:b8:
                    d2:75:26:c5:71:10:d7:ea:e1:95:62:26:d5:5a:3b:
                    d5:bd:08:ae:2d:b8:88:d0:b2:13:7a:72:be:d9:90:
                    4e:82:4c:5e:e7:36:df:00:d6:8d:43:0f:17:bf:29:
                    0f:bb:dd:c3:6f:94:b1:da:be:39:91:c4:2a:43:ed:
                    fd:95:be:20:7b:b2:fd:96:5c:26:c5:40:41:75:f4:
                    c8:62:7e:ed:cb:f7:f1:02:d1:23:2d:95:32:a8:38:
                    76:58:8a:02:79:21:b9:d7:ed:08:13:dc:91:65:16:
                    a4:5f:b8:a4:f4:2d:6d:08:bd:11:4b:9f:fb:36:12:
                    20:b9:88:4c:19:ae:2d:43:0c:c7:50:c5:34:6a:84:
                    35:53:7c:14:a0:e1:31:e7:00:4d:b8:75:23:6e:08:
                    e4:b8:7e:45:ff:cb:ae:ee:5f:c4:64:7c:b4:50:be:
                    54:9c:5f:51:3c:20:c4:f8:c3:24:de:3b:04:de:5f:
                    91:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D3:31:06:BB:A7:05:DE:D8:E5:05:23:0E:65:1E:82:4E:C7:03:93
            X509v3 Authority Key Identifier:
                keyid:E9:87:4D:75:4A:4F:2E:9B:81:49:C3:B8:94:25:13:62:FD:D8:3E:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/1/E9874D754A4F2E9B8149C3B894251362FDD83E90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9874D754A4F2E9B8149C3B894251362FDD83E90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/1/34352e3137362e3232322e302f32342d3234203d3e20323639303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:ac:54:05:6c:9e:cb:08:d2:a1:88:46:e6:4b:25:08:e3:da:
         4f:96:32:f0:9a:31:2e:c8:6a:e5:42:4b:f1:d2:73:5d:53:49:
         c4:31:e2:28:21:de:1e:cd:03:3c:24:fe:b4:39:7d:a1:ee:b4:
         39:e3:1f:be:30:d3:34:d9:18:c4:ac:c9:81:0c:f4:6c:49:ed:
         62:a6:32:2b:5f:e1:b1:81:16:10:57:a2:0d:34:8b:b2:ca:86:
         5b:c4:45:81:be:0c:13:5c:22:da:9b:ab:66:d8:1f:75:26:7a:
         cd:50:3c:d9:e9:92:7c:93:af:4d:52:dc:ad:25:9b:99:45:1b:
         11:c1:de:88:6d:d7:fb:7b:b0:45:32:a6:42:96:f0:11:41:61:
         0e:82:50:6a:b2:e9:fc:35:a9:06:4e:ca:dd:08:60:7d:02:ec:
         ca:81:15:59:7b:63:84:8f:23:9e:d5:7d:a6:dd:6d:bb:3f:cb:
         48:04:d7:38:35:f7:a8:f6:40:4e:dc:8a:e4:6e:28:e1:12:e5:
         36:c7:c0:3f:43:5e:e3:dc:28:9e:04:07:31:2c:0c:7b:49:e0:
         e2:82:d4:08:84:7b:ee:05:71:3c:bb:30:fb:12:04:98:87:45:
         29:25:53:16:fd:8a:0c:8b:97:63:5a:86:35:ff:0f:07:b9:11:
         af:4e:15:e6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMOOqWkEohYFBXMmzOR9BIQegIMMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTk4NzRENzU0QTRGMkU5QjgxNDlDM0I4OTQyNTEzNjJG
REQ4M0U5MDAeFw0yNTAzMTkwMDA1NThaFw0yNjAzMTgwMDEwNThaMDMxMTAvBgNV
BAMTKDlDRDMzMTA2QkJBNzA1REVEOEU1MDUyMzBFNjUxRTgyNEVDNzAzOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaWz3FPp64KBTtzBYMlQP0MJM1
vyXGa5FMcvB9LRMhzmOXpgZ1lvt5kSkUazunXFiVpml1ZCQ6wtKcnJs9/voAsyy1
4C840xf1uNJ1JsVxENfq4ZViJtVaO9W9CK4tuIjQshN6cr7ZkE6CTF7nNt8A1o1D
Dxe/KQ+73cNvlLHavjmRxCpD7f2VviB7sv2WXCbFQEF19Mhifu3L9/EC0SMtlTKo
OHZYigJ5IbnX7QgT3JFlFqRfuKT0LW0IvRFLn/s2EiC5iEwZri1DDMdQxTRqhDVT
fBSg4THnAE24dSNuCOS4fkX/y67uX8RkfLRQvlScX1E8IMT4wyTeOwTeX5HfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUnNMxBrunBd7Y5QUjDmUegk7HA5MwHwYDVR0j
BBgwFoAU6YdNdUpPLpuBScO4lCUTYv3YPpAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQU5kcUp0Q2RKNUFVSEV0b1Bna0tNelpkeUtBOXRaWXNVeExXczhLM2E2
MUYvMS9FOTg3NEQ3NTRBNEYyRTlCODE0OUMzQjg5NDI1MTM2MkZERDgzRTkwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U5ODc0RDc1NEE0RjJFOUI4
MTQ5QzNCODk0MjUxMzYyRkREODNFOTAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FOZHFKdENkSjVBVUhFdG9QZ2tLTXpaZHlLQTl0WllzVXhMV3M4SzNhNjFGLzEv
MzQzNTJlMzEzNzM2MmUzMjMyMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzMDMxMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtsN4wDQYJKoZIhvcNAQELBQADggEBAGCsVAVs
nssI0qGIRuZLJQjj2k+WMvCaMS7IauVCS/HSc11TScQx4igh3h7NAzwk/rQ5faHu
tDnjH74w0zTZGMSsyYEM9GxJ7WKmMitf4bGBFhBXog00i7LKhlvERYG+DBNcItqb
q2bYH3Umes1QPNnpknyTr01S3K0lm5lFGxHB3oht1/t7sEUypkKW8BFBYQ6CUGqy
6fw1qQZOyt0IYH0C7MqBFVl7Y4SPI57Vfabdbbs/y0gE1zg196j2QE7ciuRuKOES
5TbHwD9DXuPcKJ4EBzEsDHtJ4OKC1AiEe+4FcTy7MPsSBJiHRSklUxb9igyLl2Na
hjX/Dwe5Ea9OFeY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:32:48 2025 by rpki-client