Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/34352e3138342e3137382e302f32332d3233203d3e20323639333932.roa
File:                     34352e3138342e3137382e302f32332d3233203d3e20323639333932.roa (raw, json)
Hash identifier:          9oCvgVcA9zyrxL9AHAJRRHoxWEvKlFhGZYHtdt61ank=
Subject key identifier:   15:DB:A1:8B:54:6A:68:53:96:54:D1:88:73:1A:69:0D:60:99:38:11
Certificate issuer:       /CN=ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541
Certificate serial:       24CF7FB2AA78834838644E0D2614DC3FC17D1ECB
Authority key identifier: ED:5B:37:FD:E1:A3:03:C3:A4:BD:5A:1C:26:E0:08:AA:C9:11:35:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/34352e3138342e3137382e302f32332d3233203d3e20323639333932.roa
Signing time:             Thu 06 Mar 2025 00:49:50 +0000
ROA not before:           Thu 06 Mar 2025 00:44:50 +0000
ROA not after:            Thu 05 Mar 2026 00:49:50 +0000
asID:                     269392
IP address blocks:        45.184.178.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.crl
                          rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 23:15:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:cf:7f:b2:aa:78:83:48:38:64:4e:0d:26:14:dc:3f:c1:7d:1e:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541
        Validity
            Not Before: Mar  6 00:44:50 2025 GMT
            Not After : Mar  5 00:49:50 2026 GMT
        Subject: CN=15DBA18B546A68539654D188731A690D60993811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:28:2c:68:d2:14:3a:a4:c6:a0:ca:7a:b8:9d:
                    2a:08:67:ab:42:f4:86:76:f3:d3:b6:86:e9:61:e9:
                    b0:2f:58:e5:62:e5:51:5c:43:2c:6a:75:b4:74:ae:
                    9d:f1:52:ab:2a:11:00:bc:7e:da:78:43:35:43:ef:
                    c0:64:2a:05:00:07:a6:38:d9:c5:3f:c8:3f:f6:65:
                    87:02:e1:42:8a:04:28:e2:b7:b2:b8:24:12:6f:f0:
                    3e:ae:66:bd:78:73:f5:bc:20:1b:23:be:f5:f0:9a:
                    a7:49:97:c6:0b:3f:61:1a:52:02:ef:89:87:d5:05:
                    92:f3:ca:1e:4e:64:b3:f8:92:a1:4a:48:53:40:e6:
                    98:8c:d1:9c:a7:f3:3a:f7:3e:d3:a8:36:d1:8b:e7:
                    e9:3d:f5:96:78:8e:71:d7:da:01:73:32:f8:a5:05:
                    a0:3b:37:f2:d1:0b:a7:39:43:3b:89:48:63:c3:be:
                    f9:d2:58:80:d5:22:0c:d1:c8:27:cf:7e:c6:16:6e:
                    4d:80:d2:33:ae:e9:c6:74:b3:cc:ad:d1:d4:24:d4:
                    ed:1e:42:43:f0:49:a9:13:a6:31:e6:56:81:15:4d:
                    80:e4:c1:d5:4f:58:23:e5:3e:25:95:4d:87:c2:99:
                    28:9e:d2:10:8f:c0:90:ac:4a:a1:47:aa:15:b3:f3:
                    3f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:DB:A1:8B:54:6A:68:53:96:54:D1:88:73:1A:69:0D:60:99:38:11
            X509v3 Authority Key Identifier:
                keyid:ED:5B:37:FD:E1:A3:03:C3:A4:BD:5A:1C:26:E0:08:AA:C9:11:35:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED5B37FDE1A303C3A4BD5A1C26E008AAC9113541.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/1/34352e3138342e3137382e302f32332d3233203d3e20323639333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:de:b8:76:0a:f5:d0:7e:08:8f:04:4d:57:66:a8:b1:77:7c:
         e1:c9:74:0a:19:f4:0f:76:8f:57:b0:a4:e6:70:41:7a:8f:e9:
         3e:07:7f:b3:4d:f6:1e:98:f1:67:86:60:63:55:76:3a:05:54:
         e6:e7:47:15:95:18:7a:81:ba:97:b5:4b:1d:19:e3:c6:ba:88:
         0c:27:05:57:05:7e:a0:b5:e6:77:75:18:f2:e4:8c:fe:85:87:
         4f:cf:a9:11:96:ee:ff:29:67:02:3b:fb:4d:87:67:65:33:30:
         80:5b:5e:59:dd:d3:1e:ad:b1:b4:18:dd:52:e5:64:d0:c0:33:
         fa:11:60:d7:90:ab:c2:e1:0b:b6:e6:7b:d7:7d:a2:a7:94:f8:
         89:ec:bc:c6:46:17:2e:37:50:8e:d0:61:22:d7:75:49:40:b2:
         10:c4:d6:42:aa:1d:a3:b6:e1:7b:c2:23:01:06:d3:b5:15:36:
         40:86:4d:2c:c2:8d:13:79:ab:12:55:37:75:f4:73:c8:75:68:
         4e:5d:61:97:32:b2:5b:fa:01:4d:ce:8a:0b:01:0e:24:1e:c9:
         13:7d:34:25:73:e8:59:31:3b:dc:38:7a:13:52:bd:6c:5b:1c:
         77:fe:32:74:2f:9f:86:ce:ee:60:96:a8:06:50:43:dd:a2:34:
         ca:e3:30:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:57:42 2025 by rpki-client