Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EQQHCx9r91N1KtXPzJv75zuPPkEG7Q8iqU8HK9D2r14T/0/34352e3138322e34382e302f32322d3234203d3e20323639323235.roa
File:                     34352e3138322e34382e302f32322d3234203d3e20323639323235.roa (raw, json)
Hash identifier:          EVNOmpKv2FjSS0YIsfdvFc2RSOr0P6/OTGoNq/CTsjs=
Subject key identifier:   94:D8:2E:91:74:A4:D1:99:51:C2:E1:40:07:43:F9:B4:70:C3:36:C9
Certificate issuer:       /CN=9B631A7BE6FE9041D41421E649466C47C99A3F14
Certificate serial:       06E7A6AF85B66A85983BA2A4E758EB71A913B089
Authority key identifier: 9B:63:1A:7B:E6:FE:90:41:D4:14:21:E6:49:46:6C:47:C9:9A:3F:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B631A7BE6FE9041D41421E649466C47C99A3F14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EQQHCx9r91N1KtXPzJv75zuPPkEG7Q8iqU8HK9D2r14T/0/34352e3138322e34382e302f32322d3234203d3e20323639323235.roa
Signing time:             Fri 17 Jan 2025 20:26:36 +0000
ROA not before:           Fri 17 Jan 2025 20:21:36 +0000
ROA not after:            Fri 16 Jan 2026 20:26:36 +0000
asID:                     269225
IP address blocks:        45.182.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EQQHCx9r91N1KtXPzJv75zuPPkEG7Q8iqU8HK9D2r14T/0/9B631A7BE6FE9041D41421E649466C47C99A3F14.crl
                          rsync://rpki-repo.registro.br/repo/EQQHCx9r91N1KtXPzJv75zuPPkEG7Q8iqU8HK9D2r14T/0/9B631A7BE6FE9041D41421E649466C47C99A3F14.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B631A7BE6FE9041D41421E649466C47C99A3F14.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 11:30:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:e7:a6:af:85:b6:6a:85:98:3b:a2:a4:e7:58:eb:71:a9:13:b0:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B631A7BE6FE9041D41421E649466C47C99A3F14
        Validity
            Not Before: Jan 17 20:21:36 2025 GMT
            Not After : Jan 16 20:26:36 2026 GMT
        Subject: CN=94D82E9174A4D19951C2E1400743F9B470C336C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ef:19:93:25:50:e6:93:55:32:ae:ca:34:b8:
                    cb:11:79:d2:db:70:c3:21:28:7d:d3:ee:d6:cc:8d:
                    27:a4:97:a5:12:75:93:68:fb:11:f6:8d:88:93:f8:
                    de:b9:75:b4:7b:e5:ef:e1:51:c2:15:f6:59:5e:97:
                    4d:f7:79:de:02:b6:df:15:c6:0d:83:54:e3:bb:6a:
                    70:53:5f:74:2c:2f:85:7c:c0:bc:ac:94:f6:0d:59:
                    52:71:16:be:69:b2:b2:63:71:41:06:85:f2:74:67:
                    b0:cc:5e:24:f1:74:c0:79:e0:ca:cd:cd:40:51:80:
                    9d:6c:34:c7:16:39:2c:f4:ca:e6:53:f7:5f:31:12:
                    15:dd:78:49:18:02:7e:73:07:a6:e9:bd:9c:84:e2:
                    cf:18:4a:cf:34:f7:e5:ac:9a:02:b9:11:2d:9f:00:
                    5b:ac:11:49:96:9b:70:47:71:7e:0c:0c:31:30:75:
                    d4:b3:e2:ac:b9:8d:38:46:58:97:45:87:c7:f1:8f:
                    04:17:91:bb:85:4d:50:5f:fb:52:af:52:d6:8d:76:
                    ee:ac:d3:1f:35:d8:6b:1d:f0:33:6e:7b:d2:cc:0e:
                    25:0e:bd:8a:f1:1f:eb:d2:36:24:04:b5:bc:66:63:
                    33:fa:63:14:06:49:4d:68:c1:b1:1c:23:d4:8d:56:
                    26:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:D8:2E:91:74:A4:D1:99:51:C2:E1:40:07:43:F9:B4:70:C3:36:C9
            X509v3 Authority Key Identifier:
                keyid:9B:63:1A:7B:E6:FE:90:41:D4:14:21:E6:49:46:6C:47:C9:9A:3F:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EQQHCx9r91N1KtXPzJv75zuPPkEG7Q8iqU8HK9D2r14T/0/9B631A7BE6FE9041D41421E649466C47C99A3F14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B631A7BE6FE9041D41421E649466C47C99A3F14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQQHCx9r91N1KtXPzJv75zuPPkEG7Q8iqU8HK9D2r14T/0/34352e3138322e34382e302f32322d3234203d3e20323639323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:9d:70:02:43:90:ed:60:b1:1d:f9:19:59:ec:bc:8a:90:be:
         07:f8:3f:c1:78:01:79:80:87:99:c6:e7:d4:0e:a5:cc:83:10:
         8b:60:21:29:b3:4d:01:f0:7c:03:03:2e:a3:da:fd:0e:ae:dc:
         0e:c3:0e:d9:0f:45:62:c3:69:f9:fb:e8:a6:0a:6e:4b:89:35:
         d0:25:26:c8:23:0f:63:d9:2b:24:8c:47:a1:bf:e5:52:bf:4f:
         6d:62:9e:b2:3b:45:c5:7e:fa:3e:2b:21:bf:65:03:9a:25:18:
         cb:62:99:2e:b8:4f:98:d0:56:ff:ca:ec:65:06:89:bd:c9:e9:
         e9:c4:c6:2f:9e:46:61:87:41:6a:16:f9:e0:fe:02:8f:de:d8:
         fe:be:77:9b:22:3e:d1:fe:d6:82:76:ff:72:a8:4e:27:f5:1f:
         cd:0e:93:0f:a0:02:f2:2b:04:3a:c0:34:51:8c:36:fd:d0:c8:
         24:53:a1:bf:6f:e4:66:05:60:6a:c1:b2:50:33:ec:c0:fb:8f:
         8e:79:07:6d:0d:d5:e0:82:19:c8:48:7f:80:b8:ad:cb:2e:34:
         86:85:45:e7:f6:8f:7c:94:30:41:85:17:10:a1:ed:93:6e:af:
         6d:ba:6e:99:67:b2:3f:8e:c5:f8:e6:fb:99:6a:ac:ec:b7:a8:
         96:47:23:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:27:31 2025 by rpki-client