Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/34352e3233382e34362e302f32332d3233203d3e20323638333132.roa
File:                     34352e3233382e34362e302f32332d3233203d3e20323638333132.roa (raw, json)
Hash identifier:          QJH4fYHcsHbgYb/UclILf3opV353t9z08DRHEej1kLQ=
Subject key identifier:   B8:20:09:D7:69:01:75:99:62:31:AC:17:2D:39:37:C0:12:E6:19:0B
Certificate issuer:       /CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C
Certificate serial:       3A99A556A68D7E112A33CCB92424C40AF9C4D598
Authority key identifier: F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/34352e3233382e34362e302f32332d3233203d3e20323638333132.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     268312
IP address blocks:        45.238.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl
                          rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 04:27:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:99:a5:56:a6:8d:7e:11:2a:33:cc:b9:24:24:c4:0a:f9:c4:d5:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject: CN=B82009D7690175996231AC172D3937C012E6190B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6d:c0:23:ce:f3:29:e5:32:5c:de:93:97:da:
                    5e:52:ff:fe:73:ba:66:02:64:cd:f8:f0:6f:cb:00:
                    ba:05:c5:02:6a:74:00:b2:e7:5d:24:4f:a0:5c:04:
                    de:6f:09:00:19:dd:1a:11:c0:3e:ee:0e:88:74:8c:
                    e1:96:41:b1:2c:2b:a8:a4:fe:6a:ad:a0:a3:00:1a:
                    83:65:60:7f:88:3e:7e:eb:a1:8c:69:3a:4a:ed:74:
                    07:0f:0a:95:22:b8:00:01:af:5c:16:2c:e5:f9:75:
                    c8:a2:74:0d:bc:c5:eb:71:47:f9:db:83:eb:04:34:
                    02:c0:d5:a1:d3:49:ac:ea:66:f9:3d:d5:c0:1a:e5:
                    8c:82:4a:2b:b0:c5:a5:c1:eb:fb:46:26:e9:af:50:
                    ee:12:86:1d:aa:08:b8:47:17:08:9b:6e:6d:ad:e6:
                    f8:e9:fb:e0:89:ae:d5:1c:0f:76:b1:5b:ca:0c:bd:
                    28:bc:57:46:2e:b6:82:dc:7d:27:a1:10:2f:63:e2:
                    4f:44:b0:43:b9:70:a7:2c:7c:41:8b:d4:31:15:59:
                    7d:f6:be:9e:c4:d8:9c:ae:f0:29:cc:a1:9b:ec:38:
                    2d:ee:e5:b9:1f:aa:ba:15:8e:91:7b:2c:e1:85:80:
                    ab:20:dc:cb:3a:39:6b:a6:40:82:cd:0f:39:b7:b8:
                    4d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:20:09:D7:69:01:75:99:62:31:AC:17:2D:39:37:C0:12:E6:19:0B
            X509v3 Authority Key Identifier:
                keyid:F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/34352e3233382e34362e302f32332d3233203d3e20323638333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:7c:b0:30:cf:f5:87:25:b4:89:23:bd:8c:02:35:b9:d7:43:
         73:e7:00:40:c2:50:1d:9c:91:ad:e3:8c:65:a4:9b:b6:66:6f:
         dc:90:cb:b1:1b:2c:c3:59:e9:be:32:f3:a0:65:75:2e:5c:52:
         86:d9:53:ec:25:5e:12:a5:9b:8b:8c:b7:a0:00:3d:a2:ac:9b:
         17:63:70:32:d8:e9:ac:af:59:5f:7f:e9:c9:ca:6f:45:84:d9:
         88:c4:c2:62:5d:65:c5:d0:d8:a5:56:d3:d0:db:78:ac:15:e2:
         08:b9:50:0f:c6:38:e9:46:a3:b8:ea:07:be:57:82:cb:98:08:
         8f:8f:a3:18:dc:16:53:f0:2c:b0:a7:7b:a3:bb:98:b5:bf:41:
         68:86:7d:1f:eb:73:b1:0f:b9:22:f3:84:f8:26:c4:dd:97:36:
         ae:94:49:ee:1b:fb:3b:69:96:d8:87:e7:12:a8:d3:20:77:70:
         0d:e8:32:9e:6e:02:9c:cc:61:a7:df:14:87:ed:9b:be:ff:36:
         0c:12:5a:b9:cd:63:15:1c:1e:3c:aa:34:b5:37:d5:57:f2:3a:
         ca:49:93:5c:3c:e4:79:95:a1:0c:f2:8c:f5:8e:b0:14:ad:1d:
         36:0e:d1:6c:4c:90:39:e2:fc:ce:e5:01:a4:11:e1:93:6b:a7:
         0a:15:91:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:49:01 2025 by rpki-client