Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fqq3ejmpdjV8Vs4zjGBZHEgqVGijvyy2kXgHiwXunfWQ/0/34352e3233392e3233362e302f32332d3234203d3e20323638333930.roa
File:                     34352e3233392e3233362e302f32332d3234203d3e20323638333930.roa (raw, json)
Hash identifier:          8QKvVA6aLf4KKxbu5W+qK8uzB5+fEEmuM12CHUif00Y=
Subject key identifier:   44:37:88:6E:AE:94:96:D0:46:A0:DA:4A:EB:69:10:4F:B1:7D:4E:34
Certificate issuer:       /CN=98C2536481F88290C749C7A40FF5C23C6A4B2B29
Certificate serial:       42E2496B5AAE94D2152E803732234BB820928C28
Authority key identifier: 98:C2:53:64:81:F8:82:90:C7:49:C7:A4:0F:F5:C2:3C:6A:4B:2B:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98C2536481F88290C749C7A40FF5C23C6A4B2B29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fqq3ejmpdjV8Vs4zjGBZHEgqVGijvyy2kXgHiwXunfWQ/0/34352e3233392e3233362e302f32332d3234203d3e20323638333930.roa
Signing time:             Mon 03 Feb 2025 14:29:46 +0000
ROA not before:           Mon 03 Feb 2025 14:24:46 +0000
ROA not after:            Mon 02 Feb 2026 14:29:46 +0000
asID:                     268390
IP address blocks:        45.239.236.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fqq3ejmpdjV8Vs4zjGBZHEgqVGijvyy2kXgHiwXunfWQ/0/98C2536481F88290C749C7A40FF5C23C6A4B2B29.crl
                          rsync://rpki-repo.registro.br/repo/Fqq3ejmpdjV8Vs4zjGBZHEgqVGijvyy2kXgHiwXunfWQ/0/98C2536481F88290C749C7A40FF5C23C6A4B2B29.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98C2536481F88290C749C7A40FF5C23C6A4B2B29.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 22 Feb 2025 01:06:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:e2:49:6b:5a:ae:94:d2:15:2e:80:37:32:23:4b:b8:20:92:8c:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98C2536481F88290C749C7A40FF5C23C6A4B2B29
        Validity
            Not Before: Feb  3 14:24:46 2025 GMT
            Not After : Feb  2 14:29:46 2026 GMT
        Subject: CN=4437886EAE9496D046A0DA4AEB69104FB17D4E34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5b:0a:16:0c:cd:ea:5c:95:e9:f8:55:f9:cd:
                    da:90:92:d4:8a:bf:15:b2:47:f5:97:07:ea:0b:16:
                    8d:90:f3:e8:83:90:15:87:88:70:c8:a3:31:29:ee:
                    9d:1b:91:b3:64:b4:59:3f:25:a5:ac:78:a8:10:44:
                    af:e0:22:e4:35:fe:eb:98:3d:8a:b3:bb:c4:ae:bb:
                    fb:57:8e:aa:cb:81:f0:ce:e3:8e:a3:88:38:e2:14:
                    40:67:a4:b1:70:c0:aa:58:ae:f9:aa:90:cb:52:e2:
                    21:a8:37:1c:1d:0b:7b:ca:c2:11:d0:6f:ee:4e:2c:
                    35:f9:ef:e7:1e:ce:6a:5b:dd:5e:b0:4d:bd:8e:77:
                    bf:3b:29:7a:92:eb:2c:33:b8:d6:af:3e:66:1f:d6:
                    05:9c:07:31:33:c0:bc:0f:42:60:7d:b9:0b:7b:ce:
                    da:d8:ed:d0:5d:c9:24:e8:2f:64:9a:6f:35:42:39:
                    f2:a8:4f:20:8c:34:25:ca:84:3f:50:38:91:c2:cd:
                    b9:97:3f:87:75:bd:d6:8c:2c:83:ba:74:8d:89:7c:
                    3e:1c:86:1c:5a:3e:c1:41:02:32:78:93:31:ea:c2:
                    7d:69:80:6d:e7:12:59:c9:f3:65:77:6c:dd:28:5a:
                    95:24:20:e3:f0:e4:9a:38:2d:d4:e8:ab:54:a5:db:
                    a8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:37:88:6E:AE:94:96:D0:46:A0:DA:4A:EB:69:10:4F:B1:7D:4E:34
            X509v3 Authority Key Identifier:
                keyid:98:C2:53:64:81:F8:82:90:C7:49:C7:A4:0F:F5:C2:3C:6A:4B:2B:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fqq3ejmpdjV8Vs4zjGBZHEgqVGijvyy2kXgHiwXunfWQ/0/98C2536481F88290C749C7A40FF5C23C6A4B2B29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98C2536481F88290C749C7A40FF5C23C6A4B2B29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fqq3ejmpdjV8Vs4zjGBZHEgqVGijvyy2kXgHiwXunfWQ/0/34352e3233392e3233362e302f32332d3234203d3e20323638333930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:63:71:ef:a0:5b:58:a8:1c:ab:9f:05:7f:c1:d6:e1:ea:69:
         1d:bd:86:1a:39:dd:f3:52:a4:d9:d1:5e:51:77:a9:90:f2:93:
         10:95:95:c4:d5:cd:04:fb:f5:68:42:f3:41:bd:7f:5c:dd:2c:
         6e:dd:c1:95:a6:ab:89:4b:8f:1c:51:08:92:93:c7:83:ef:e5:
         98:06:ae:0c:0b:3c:94:94:f8:e3:d4:6b:49:24:86:c9:83:d7:
         9d:8d:36:d6:c2:f3:78:28:f8:ff:aa:f4:58:f1:89:17:21:1d:
         ef:f0:a2:3d:a1:d3:8f:72:a5:86:b1:a6:f3:79:69:9e:3e:30:
         d6:5c:a7:96:50:6e:45:0e:10:72:2f:18:d3:91:00:a0:a1:8e:
         c2:c4:eb:d4:60:0f:04:31:21:9e:d8:3d:cd:5a:05:0d:c3:4f:
         45:c2:1e:df:dc:bd:2b:43:16:bb:fa:0a:b7:c6:3d:02:f8:32:
         23:6c:4e:b1:9d:8e:db:df:9b:ca:46:00:e4:f2:38:02:c1:4a:
         5e:7d:d4:ba:09:50:31:c7:65:91:ab:5f:9d:69:4a:90:43:b2:
         9b:0c:e6:45:b2:bd:28:87:fc:59:47:ec:fa:0a:fe:5c:ac:26:
         ec:e2:60:0b:96:fb:3e:37:7a:a3:1e:fa:5f:fb:20:07:65:76:
         51:82:f2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:10:51 2025 by rpki-client