Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fqq3ejmpdjV8Vs4zjGBZHEgqVGijvyy2kXgHiwXunfWQ/0/34352e3233392e3233392e302f32342d3234203d3e20323638333930.roa
File:                     34352e3233392e3233392e302f32342d3234203d3e20323638333930.roa (raw, json)
Hash identifier:          YDwSsNcpb0SwGyfXoINQ6HeL6yOJsN3+oE25NwIXkvg=
Subject key identifier:   37:56:C0:54:AF:30:19:3D:95:AC:DC:E1:5E:CA:8F:51:9F:C3:51:71
Certificate issuer:       /CN=98C2536481F88290C749C7A40FF5C23C6A4B2B29
Certificate serial:       3D3BC0DED862153B0EF3E93CE3D40483AE86C71E
Authority key identifier: 98:C2:53:64:81:F8:82:90:C7:49:C7:A4:0F:F5:C2:3C:6A:4B:2B:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98C2536481F88290C749C7A40FF5C23C6A4B2B29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fqq3ejmpdjV8Vs4zjGBZHEgqVGijvyy2kXgHiwXunfWQ/0/34352e3233392e3233392e302f32342d3234203d3e20323638333930.roa
Signing time:             Mon 03 Feb 2025 14:29:21 +0000
ROA not before:           Mon 03 Feb 2025 14:24:21 +0000
ROA not after:            Mon 02 Feb 2026 14:29:21 +0000
asID:                     268390
IP address blocks:        45.239.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fqq3ejmpdjV8Vs4zjGBZHEgqVGijvyy2kXgHiwXunfWQ/0/98C2536481F88290C749C7A40FF5C23C6A4B2B29.crl
                          rsync://rpki-repo.registro.br/repo/Fqq3ejmpdjV8Vs4zjGBZHEgqVGijvyy2kXgHiwXunfWQ/0/98C2536481F88290C749C7A40FF5C23C6A4B2B29.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98C2536481F88290C749C7A40FF5C23C6A4B2B29.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 22 Feb 2025 01:06:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:3b:c0:de:d8:62:15:3b:0e:f3:e9:3c:e3:d4:04:83:ae:86:c7:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98C2536481F88290C749C7A40FF5C23C6A4B2B29
        Validity
            Not Before: Feb  3 14:24:21 2025 GMT
            Not After : Feb  2 14:29:21 2026 GMT
        Subject: CN=3756C054AF30193D95ACDCE15ECA8F519FC35171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:69:a1:9c:75:34:92:fb:fe:12:da:69:ee:23:
                    95:32:e5:e2:97:77:8a:ea:74:33:29:22:8a:e5:24:
                    1c:1d:c1:65:83:c5:60:6f:f3:74:58:a7:e4:e3:2a:
                    04:55:22:c1:3c:5a:54:c7:a9:98:50:8e:5b:bf:49:
                    88:f4:d9:d7:d5:da:30:80:2c:45:b8:e6:ce:b4:2e:
                    ad:a4:5e:52:25:0e:28:57:8e:f1:1c:6b:69:4c:cc:
                    91:eb:2e:78:96:b7:c4:92:4e:04:c9:b7:52:af:2b:
                    59:a7:b9:29:dd:34:05:8e:79:b1:80:05:7b:8b:67:
                    58:91:e2:50:92:13:82:31:cf:03:5a:0c:87:bc:cb:
                    99:66:42:b7:97:8b:b7:b5:45:42:7a:73:7d:98:9c:
                    0c:6e:7b:c9:b8:38:e4:b2:33:6a:92:5e:29:a8:fa:
                    da:5c:1e:1a:13:28:14:8a:ac:41:7d:7c:05:6e:eb:
                    62:b1:82:f7:e9:32:27:ac:81:eb:3b:fc:08:1a:46:
                    cc:33:57:21:3d:c7:6b:e4:5e:19:ee:75:20:54:81:
                    b1:41:4d:1e:82:7c:9d:28:e8:00:b0:8d:fd:3a:88:
                    f2:87:49:1f:5c:ee:ec:f6:67:50:4a:db:23:a0:10:
                    e4:c7:6c:c0:c1:8d:b7:85:ae:6b:91:a1:3a:b1:85:
                    b0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:56:C0:54:AF:30:19:3D:95:AC:DC:E1:5E:CA:8F:51:9F:C3:51:71
            X509v3 Authority Key Identifier:
                keyid:98:C2:53:64:81:F8:82:90:C7:49:C7:A4:0F:F5:C2:3C:6A:4B:2B:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fqq3ejmpdjV8Vs4zjGBZHEgqVGijvyy2kXgHiwXunfWQ/0/98C2536481F88290C749C7A40FF5C23C6A4B2B29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98C2536481F88290C749C7A40FF5C23C6A4B2B29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fqq3ejmpdjV8Vs4zjGBZHEgqVGijvyy2kXgHiwXunfWQ/0/34352e3233392e3233392e302f32342d3234203d3e20323638333930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:6c:b6:2f:3d:7f:f8:e7:b7:a1:9c:79:b6:79:6e:fe:5e:ae:
         33:c0:f7:12:38:45:f0:9d:18:ad:e6:9b:65:78:40:f7:17:a5:
         7f:ee:0f:ed:80:bb:8a:f9:c1:4b:16:81:e3:dd:bc:d7:1f:2e:
         b4:d5:bd:1e:cd:3d:e2:7e:40:80:a1:49:e5:05:6c:d4:5f:a2:
         c8:e1:46:a9:8a:53:e3:9c:93:b9:a1:0a:fa:a4:fc:b0:21:5d:
         62:22:5a:fa:2f:27:bb:2c:e6:d2:ec:0b:c5:ba:db:a0:fc:55:
         f9:1e:d2:f7:e0:25:e4:23:78:9c:15:a7:6c:b7:6c:0e:84:4a:
         49:c8:a0:bc:bb:c5:77:1c:b6:66:3d:b3:8e:ae:56:a9:e9:9e:
         e3:b7:1e:23:bc:65:92:c2:1b:96:9e:dc:04:e9:1d:ed:42:0a:
         c7:12:ec:d2:37:eb:d6:40:61:40:33:9e:d1:68:8a:4d:15:a4:
         b5:81:3b:7c:89:66:a8:90:da:24:2d:b4:75:28:79:4c:5b:8d:
         19:07:70:83:e5:1c:3a:79:5d:10:96:b7:99:e8:88:ad:1d:4d:
         36:28:ad:c9:9d:e0:da:61:a2:1b:a8:44:d1:74:7c:d4:e7:f6:
         57:5d:85:88:0d:6e:4d:4a:22:1a:0e:f3:81:5d:5f:46:39:80:
         4a:dd:82:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:16:50 2025 by rpki-client