Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/34352e3233332e38322e302f32332d3234203d3e20323638313932.roa
File:                     34352e3233332e38322e302f32332d3234203d3e20323638313932.roa (raw, json)
Hash identifier:          rbm+nGaO1C44SR1jUP7bBg9xi6ETMNOx32ruaBHegrs=
Subject key identifier:   91:E7:44:47:E7:99:A2:D8:71:5D:B4:98:4C:E0:E9:DB:52:80:9B:C6
Certificate issuer:       /CN=A955D3EDFAB3E2590F766F0D4CF5D8B31C713836
Certificate serial:       2A4D805410B5BB650FDD87A48727621C8152EB9A
Authority key identifier: A9:55:D3:ED:FA:B3:E2:59:0F:76:6F:0D:4C:F5:D8:B3:1C:71:38:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A955D3EDFAB3E2590F766F0D4CF5D8B31C713836.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/34352e3233332e38322e302f32332d3234203d3e20323638313932.roa
Signing time:             Thu 20 Mar 2025 20:21:20 +0000
ROA not before:           Thu 20 Mar 2025 20:16:20 +0000
ROA not after:            Thu 19 Mar 2026 20:21:20 +0000
asID:                     268192
IP address blocks:        45.233.82.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/A955D3EDFAB3E2590F766F0D4CF5D8B31C713836.crl
                          rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/A955D3EDFAB3E2590F766F0D4CF5D8B31C713836.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A955D3EDFAB3E2590F766F0D4CF5D8B31C713836.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 04 May 2025 11:53:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:4d:80:54:10:b5:bb:65:0f:dd:87:a4:87:27:62:1c:81:52:eb:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A955D3EDFAB3E2590F766F0D4CF5D8B31C713836
        Validity
            Not Before: Mar 20 20:16:20 2025 GMT
            Not After : Mar 19 20:21:20 2026 GMT
        Subject: CN=91E74447E799A2D8715DB4984CE0E9DB52809BC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:26:6a:a9:a3:dc:b6:eb:5e:cc:1f:ae:ae:01:
                    5c:7d:fe:5f:b8:5f:a7:c0:63:32:ba:56:e3:0e:3e:
                    84:ce:bf:8d:b6:a0:b1:35:b5:b2:93:4e:16:99:31:
                    79:0e:b9:9f:75:51:ee:f9:79:e9:56:aa:0a:fe:20:
                    14:c4:db:fb:1f:bd:d3:59:d9:4a:23:9c:e5:0e:69:
                    a5:b5:69:14:83:37:13:78:ee:1f:81:bf:84:af:7b:
                    9a:4a:4e:16:3c:00:ee:d7:c9:77:83:21:e9:6f:4b:
                    e2:de:4c:d0:a8:76:7b:77:16:00:93:bb:e9:12:6e:
                    9a:ba:5d:30:88:77:bc:2c:2f:8e:b7:df:0a:18:d9:
                    db:19:17:cb:12:50:9f:c3:1f:df:ab:d9:c5:51:71:
                    f0:9b:f3:a5:7b:84:01:2b:34:bb:9f:d8:99:c5:f0:
                    9a:49:55:c9:b1:6f:0f:a1:12:29:a1:d4:78:ed:5f:
                    34:80:39:fc:fc:46:84:71:0f:dd:64:65:43:f5:e9:
                    f8:91:6d:53:9c:9c:29:57:ab:ba:1d:65:6a:40:7b:
                    72:e7:0b:03:a1:d0:87:66:9d:a3:76:fb:19:74:b8:
                    77:0d:d2:25:50:d9:8d:34:04:e8:f3:c0:d9:a5:b5:
                    99:fb:b1:01:ec:b8:b3:c9:de:03:aa:b4:a6:01:a3:
                    ec:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:E7:44:47:E7:99:A2:D8:71:5D:B4:98:4C:E0:E9:DB:52:80:9B:C6
            X509v3 Authority Key Identifier:
                keyid:A9:55:D3:ED:FA:B3:E2:59:0F:76:6F:0D:4C:F5:D8:B3:1C:71:38:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/A955D3EDFAB3E2590F766F0D4CF5D8B31C713836.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A955D3EDFAB3E2590F766F0D4CF5D8B31C713836.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/34352e3233332e38322e302f32332d3234203d3e20323638313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:c3:5b:96:33:ec:5f:1c:11:ec:24:7d:74:5a:2b:c8:b2:50:
         43:44:5c:91:cf:7f:3b:85:7b:b3:d5:9d:34:cd:7c:be:fc:86:
         a2:ad:07:67:ab:21:e6:1a:d7:4b:85:55:af:14:b6:e0:a6:71:
         0b:aa:d3:07:99:b1:9b:39:96:9a:b9:db:64:f8:08:8f:95:ab:
         30:36:39:a4:97:23:33:2e:e5:67:a7:4d:f7:08:d4:23:91:67:
         fb:05:f5:8e:b1:91:2e:fd:b9:2d:ca:e6:f8:4d:52:c6:2e:1b:
         07:71:77:8b:c3:6e:87:b5:8a:ac:87:77:cf:d3:38:93:b5:2f:
         4f:18:0a:2f:b2:e5:c2:59:64:70:79:50:31:c1:63:75:44:fa:
         c0:b8:82:04:40:00:94:df:04:f7:55:48:2f:a9:a9:a1:bc:1a:
         d0:8a:50:c7:40:ac:84:d3:eb:81:99:43:fe:fd:3a:39:58:59:
         c1:a3:4d:a6:56:27:a4:54:72:39:6d:2e:48:a7:ef:5f:68:4e:
         5a:ab:4e:a7:c0:95:29:59:3b:c5:5d:1a:26:d1:38:d0:4e:9c:
         e6:f4:10:31:4e:7e:43:d2:60:45:cb:51:e7:40:81:17:20:63:
         cd:c8:8d:3e:a8:be:02:58:8f:2f:e3:f0:e9:70:f5:b9:0e:2f:
         94:51:1e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 01:12:00 2025 by rpki-client