Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/34352e3137342e32382e302f32322d3332203d3e20323638383336.roa
File:                     34352e3137342e32382e302f32322d3332203d3e20323638383336.roa (raw, json)
Hash identifier:          QWwj/khsAVt/TMAvKxQt7dGK4qFkqgl4U/ydEBZJPcA=
Subject key identifier:   6D:62:4D:E2:C7:86:20:63:7D:A2:7F:35:F6:25:67:1F:CD:50:98:C1
Certificate issuer:       /CN=60AB403170A672D3B6135E0C4A876F7657048DF0
Certificate serial:       19ACB29A639753BA26683636F88B568143B920FA
Authority key identifier: 60:AB:40:31:70:A6:72:D3:B6:13:5E:0C:4A:87:6F:76:57:04:8D:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60AB403170A672D3B6135E0C4A876F7657048DF0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/34352e3137342e32382e302f32322d3332203d3e20323638383336.roa
Signing time:             Thu 20 Mar 2025 20:39:23 +0000
ROA not before:           Thu 20 Mar 2025 20:34:23 +0000
ROA not after:            Thu 19 Mar 2026 20:39:23 +0000
asID:                     268836
IP address blocks:        45.174.28.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/60AB403170A672D3B6135E0C4A876F7657048DF0.crl
                          rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/60AB403170A672D3B6135E0C4A876F7657048DF0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60AB403170A672D3B6135E0C4A876F7657048DF0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 16:33:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:ac:b2:9a:63:97:53:ba:26:68:36:36:f8:8b:56:81:43:b9:20:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60AB403170A672D3B6135E0C4A876F7657048DF0
        Validity
            Not Before: Mar 20 20:34:23 2025 GMT
            Not After : Mar 19 20:39:23 2026 GMT
        Subject: CN=6D624DE2C78620637DA27F35F625671FCD5098C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4a:79:d2:b6:b9:b0:bc:27:1f:e7:d3:a4:90:
                    c1:1f:e2:49:21:05:86:30:51:9e:db:c2:1d:dc:d7:
                    f9:d3:27:73:65:45:bb:94:08:32:66:5c:cc:24:fb:
                    85:bf:24:f3:e6:2a:4c:0a:9f:c0:d2:70:f5:9b:0f:
                    46:d5:f1:ba:62:71:cf:d5:fd:57:de:7c:7e:a9:b0:
                    8f:40:44:74:e1:0a:14:ff:af:20:f6:12:29:e7:c1:
                    8d:d7:ee:f9:c5:29:85:6c:7d:5c:10:47:bb:c0:4b:
                    97:da:54:7f:1a:d7:6a:b1:70:a9:3b:4e:2a:63:98:
                    a6:16:7f:b0:c9:20:f3:3f:58:3d:41:9b:62:e7:6b:
                    d1:92:23:ae:6b:84:01:42:4b:0e:39:99:1e:a7:d2:
                    ff:0b:7f:c3:a2:e2:db:e3:e1:c3:f7:94:0e:9f:bf:
                    7a:32:2a:bb:5f:cb:49:e3:6a:2e:b8:04:b4:da:b8:
                    48:c7:fa:9a:a1:be:28:1a:c6:be:bd:ce:ce:7f:eb:
                    c9:e4:33:06:b3:1e:2a:de:e1:40:c3:a0:d2:84:de:
                    6d:9a:fb:95:5d:da:ef:ac:71:fe:9b:5c:ab:0b:8c:
                    50:77:44:22:61:52:e4:7c:49:c8:4e:11:12:a3:8b:
                    6c:3e:c1:d4:9b:dc:a6:2c:da:41:d3:1f:a5:33:01:
                    c6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:62:4D:E2:C7:86:20:63:7D:A2:7F:35:F6:25:67:1F:CD:50:98:C1
            X509v3 Authority Key Identifier:
                keyid:60:AB:40:31:70:A6:72:D3:B6:13:5E:0C:4A:87:6F:76:57:04:8D:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/60AB403170A672D3B6135E0C4A876F7657048DF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60AB403170A672D3B6135E0C4A876F7657048DF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6TsxLBwnwvNCX3iGGFMPgSjmwBZwXJmexgy6AZQeZwNm/0/34352e3137342e32382e302f32322d3332203d3e20323638383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:db:95:8c:c9:0d:81:8a:71:2c:b1:d7:ef:0f:14:95:4f:be:
         e2:db:00:0d:62:25:86:5d:9e:bc:e4:49:6e:dd:8a:dc:e1:46:
         d5:80:ab:5a:3f:08:c1:41:e9:17:57:11:88:e0:f7:28:cd:6a:
         e7:33:aa:b9:9f:73:ac:62:35:90:45:e6:c6:b0:e5:0c:95:ba:
         59:79:13:0f:22:68:35:ba:63:73:2c:2a:b7:91:f6:77:01:0a:
         06:12:e2:20:af:f2:75:e8:2b:aa:72:8e:7b:fa:c4:19:a6:ff:
         9d:db:26:5e:8b:22:f5:9d:eb:35:65:5b:69:c4:ad:e3:38:4d:
         c8:e9:79:f0:1f:2d:98:e8:1e:b6:3c:60:71:62:ca:ca:93:81:
         a7:24:cd:e2:44:db:5b:ac:78:dd:aa:bc:e2:84:e9:69:9d:5e:
         fe:33:62:08:17:86:74:85:f4:12:ab:7a:10:d3:57:e2:5d:ee:
         b6:13:a8:12:f4:15:28:6e:31:cd:ec:c0:dc:71:8a:43:fe:d1:
         7f:f7:e5:eb:68:9c:41:4e:a8:f7:3d:81:86:d2:b3:27:7d:9f:
         b6:ab:75:aa:9d:d7:12:32:8c:9b:ac:20:2b:c4:38:cb:cc:fe:
         4f:d8:9a:e4:5a:e6:6d:81:9e:bf:39:68:16:0c:9f:8d:27:a2:
         7c:e4:09:59
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUGayymmOXU7omaDY2+ItWgUO5IPowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjBBQjQwMzE3MEE2NzJEM0I2MTM1RTBDNEE4NzZGNzY1
NzA0OERGMDAeFw0yNTAzMjAyMDM0MjNaFw0yNjAzMTkyMDM5MjNaMDMxMTAvBgNV
BAMTKDZENjI0REUyQzc4NjIwNjM3REEyN0YzNUY2MjU2NzFGQ0Q1MDk4QzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+SnnStrmwvCcf59OkkMEf4kkh
BYYwUZ7bwh3c1/nTJ3NlRbuUCDJmXMwk+4W/JPPmKkwKn8DScPWbD0bV8bpicc/V
/VfefH6psI9ARHThChT/ryD2EinnwY3X7vnFKYVsfVwQR7vAS5faVH8a12qxcKk7
TipjmKYWf7DJIPM/WD1Bm2Lna9GSI65rhAFCSw45mR6n0v8Lf8Oi4tvj4cP3lA6f
v3oyKrtfy0njai64BLTauEjH+pqhvigaxr69zs5/68nkMwazHire4UDDoNKE3m2a
+5Vd2u+scf6bXKsLjFB3RCJhUuR8SchOERKji2w+wdSb3KYs2kHTH6UzAcZ5AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUbWJN4seGIGN9on819iVnH81QmMEwHwYDVR0j
BBgwFoAUYKtAMXCmctO2E14MSodvdlcEjfAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlRzeExCd253dk5DWDNpR0dGTVBnU2ptd0Jad1hKbWV4Z3k2QVpRZVp3
Tm0vMC82MEFCNDAzMTcwQTY3MkQzQjYxMzVFMEM0QTg3NkY3NjU3MDQ4REYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwQUI0MDMxNzBBNjcyRDNC
NjEzNUUwQzRBODc2Rjc2NTcwNDhERjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZUc3hMQndud3ZOQ1gzaUdHRk1QZ1NqbXdCWndYSm1leGd5NkFaUWVad05tLzAv
MzQzNTJlMzEzNzM0MmUzMjM4MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzgzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLa4cMA0GCSqGSIb3DQEBCwUAA4IBAQCE25WMyQ2B
inEssdfvDxSVT77i2wANYiWGXZ685Elu3Yrc4UbVgKtaPwjBQekXVxGI4PcozWrn
M6q5n3OsYjWQRebGsOUMlbpZeRMPImg1umNzLCq3kfZ3AQoGEuIgr/J16Cuqco57
+sQZpv+d2yZeiyL1nes1ZVtpxK3jOE3I6XnwHy2Y6B62PGBxYsrKk4GnJM3iRNtb
rHjdqrzihOlpnV7+M2IIF4Z0hfQSq3oQ01fiXe62E6gS9BUobjHN7MDccYpD/tF/
9+XraJxBTqj3PYGG0rMnfZ+2q3WqndcSMoybrCArxDjLzP5P2JrkWuZtgZ6/OWgW
DJ+NJ6J85AlZ
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:56:07 2025 by rpki-client