Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/3/34352e3139302e3134302e302f32322d3234203d3e20323633363631.roa
File:                     34352e3139302e3134302e302f32322d3234203d3e20323633363631.roa (raw, json)
Hash identifier:          Bb5NpLPjuqkdqdUeTYDe78OyboZ2aPhZ5qQFnbIXgx0=
Subject key identifier:   47:4E:7F:3D:87:2A:3D:1F:3A:37:B3:CA:C6:64:87:0B:71:3E:30:76
Certificate issuer:       /CN=2CACC99A330A3753D03224139703412FA1CB21D3
Certificate serial:       040F91FA565D9C2820F67EF1C98DDCB9ABF3A23E
Authority key identifier: 2C:AC:C9:9A:33:0A:37:53:D0:32:24:13:97:03:41:2F:A1:CB:21:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CACC99A330A3753D03224139703412FA1CB21D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/3/34352e3139302e3134302e302f32322d3234203d3e20323633363631.roa
Signing time:             Mon 31 Mar 2025 21:13:50 +0000
ROA not before:           Mon 31 Mar 2025 21:08:50 +0000
ROA not after:            Mon 30 Mar 2026 21:13:50 +0000
asID:                     263661
IP address blocks:        45.190.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/3/2CACC99A330A3753D03224139703412FA1CB21D3.crl
                          rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/3/2CACC99A330A3753D03224139703412FA1CB21D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CACC99A330A3753D03224139703412FA1CB21D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 02:42:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:0f:91:fa:56:5d:9c:28:20:f6:7e:f1:c9:8d:dc:b9:ab:f3:a2:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CACC99A330A3753D03224139703412FA1CB21D3
        Validity
            Not Before: Mar 31 21:08:50 2025 GMT
            Not After : Mar 30 21:13:50 2026 GMT
        Subject: CN=474E7F3D872A3D1F3A37B3CAC664870B713E3076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:af:a6:ba:91:2e:b6:b1:60:dd:ef:ba:86:92:
                    41:eb:a7:85:c0:da:40:16:ef:47:98:92:6e:55:e4:
                    32:b4:cd:71:06:05:ed:f0:84:d5:9e:8f:49:18:59:
                    2d:ce:73:ca:00:90:98:8f:57:c1:39:a6:38:58:a2:
                    88:30:67:48:b0:f3:38:37:4d:dc:c3:c8:72:11:31:
                    74:49:fd:ce:b3:aa:66:fc:5d:a4:c8:9f:03:e7:62:
                    40:5d:ee:49:fd:de:15:b8:3d:1b:fd:0b:47:b8:92:
                    6f:06:17:7f:3a:a9:4f:93:64:9f:3e:11:e5:a1:a1:
                    aa:32:a2:59:bc:23:8a:29:cd:ed:24:a0:71:ff:03:
                    43:d8:1b:e3:7c:7d:36:11:ff:f0:9c:0c:8e:26:e2:
                    24:13:53:36:37:29:76:dc:cc:ac:12:38:9d:d8:a1:
                    53:b8:bd:9d:69:db:7d:ce:2c:13:0f:b6:f7:a2:1e:
                    e3:7a:49:de:ad:e0:01:63:e3:d6:24:e4:21:f3:33:
                    1a:67:42:5d:0b:9f:3b:99:05:72:52:a9:ed:1c:45:
                    3a:98:69:d8:1b:82:3e:a1:9a:a4:bc:b9:27:0f:7e:
                    c3:4c:9c:02:50:a3:c5:2a:91:ab:30:3c:d7:3d:89:
                    6c:c2:e1:83:b0:65:18:3b:ce:5b:1d:32:5a:36:0c:
                    39:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:4E:7F:3D:87:2A:3D:1F:3A:37:B3:CA:C6:64:87:0B:71:3E:30:76
            X509v3 Authority Key Identifier:
                keyid:2C:AC:C9:9A:33:0A:37:53:D0:32:24:13:97:03:41:2F:A1:CB:21:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/3/2CACC99A330A3753D03224139703412FA1CB21D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CACC99A330A3753D03224139703412FA1CB21D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/3/34352e3139302e3134302e302f32322d3234203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:61:ec:62:36:90:74:80:1a:83:14:24:fb:e5:84:ad:ab:65:
         70:b9:bc:6d:a5:22:d3:1c:47:60:c2:2d:b9:93:7e:70:d9:96:
         24:7f:4b:7b:7e:91:5f:36:06:d7:9e:90:2a:ff:f7:61:0a:09:
         62:a6:15:4e:3d:c4:57:87:19:18:71:36:fb:cb:48:16:1f:b0:
         05:6d:8c:78:d5:19:9b:21:05:a9:6f:27:f5:a6:9b:18:8c:77:
         d4:ca:d4:7d:44:c0:26:dc:61:c1:1e:71:55:cc:28:f4:2d:e7:
         0b:77:87:b0:2d:49:d8:92:5c:f8:f0:94:5a:41:c5:09:a2:ef:
         86:e8:4c:ba:59:47:1a:77:81:0d:74:65:e6:78:03:e6:a6:63:
         30:cf:bc:76:6f:78:21:73:c7:b8:09:cb:c1:aa:ac:e6:ff:b2:
         db:52:ec:9a:37:48:8f:fc:64:8d:8f:e8:d8:6b:b6:2d:82:b5:
         48:42:c3:f6:71:e5:a4:d0:ab:fa:8d:49:0c:1f:b7:e9:ec:7f:
         3f:b5:d3:59:ac:61:fd:98:68:fd:9f:c3:a0:36:1a:11:4c:d1:
         59:de:72:12:1d:d9:35:e8:6d:4b:aa:ea:e8:d6:c2:a5:08:fd:
         56:7c:52:9b:77:47:57:55:3a:43:a1:b1:ae:a1:62:ac:18:22:
         3c:06:a8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:53:46 2025 by rpki-client