Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/3137302e38312e3137332e302f32342d3234203d3e20323634313030.roa
File:                     3137302e38312e3137332e302f32342d3234203d3e20323634313030.roa (raw, json)
Hash identifier:          pkp/imtJUSUGbqv8/UvHKGwH4OlRTCzK7lSG4evRMrc=
Subject key identifier:   B9:A9:BE:FF:D3:CA:4F:AE:C6:B1:A5:26:CE:21:1B:0C:9F:FB:CC:C2
Certificate issuer:       /CN=9C69433B8D6274966EFAB9F616C73F596D0026FA
Certificate serial:       65664944B08C3D366CC307D16CE834A1D862767D
Authority key identifier: 9C:69:43:3B:8D:62:74:96:6E:FA:B9:F6:16:C7:3F:59:6D:00:26:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C69433B8D6274966EFAB9F616C73F596D0026FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/3137302e38312e3137332e302f32342d3234203d3e20323634313030.roa
Signing time:             Mon 02 Dec 2024 12:07:26 +0000
ROA not before:           Mon 02 Dec 2024 12:02:26 +0000
ROA not after:            Mon 01 Dec 2025 12:07:26 +0000
asID:                     264100
IP address blocks:        170.81.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/9C69433B8D6274966EFAB9F616C73F596D0026FA.crl
                          rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/9C69433B8D6274966EFAB9F616C73F596D0026FA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C69433B8D6274966EFAB9F616C73F596D0026FA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 08:28:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:66:49:44:b0:8c:3d:36:6c:c3:07:d1:6c:e8:34:a1:d8:62:76:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C69433B8D6274966EFAB9F616C73F596D0026FA
        Validity
            Not Before: Dec  2 12:02:26 2024 GMT
            Not After : Dec  1 12:07:26 2025 GMT
        Subject: CN=B9A9BEFFD3CA4FAEC6B1A526CE211B0C9FFBCCC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:cc:84:35:7f:2f:56:eb:7f:70:15:59:80:10:
                    89:94:df:4c:f1:ac:b4:10:92:9f:ae:0a:63:35:b4:
                    2a:d5:36:a5:82:21:27:b3:ff:60:96:4c:fb:d6:81:
                    a9:12:4a:f3:89:07:31:24:53:4a:fe:c5:8c:08:9f:
                    94:5c:0c:8a:74:43:80:51:54:79:3a:e1:3b:8f:63:
                    5a:77:23:41:74:6d:35:85:0d:b6:79:b8:c0:40:fb:
                    4b:fc:22:5d:af:c8:86:da:57:fd:fc:ca:77:42:8d:
                    ec:84:f1:ff:0d:7e:79:1e:1a:78:4c:fb:1f:d0:1d:
                    d8:69:71:79:47:b3:66:66:d6:cc:56:3c:c6:20:92:
                    26:a0:58:7f:27:ba:00:f9:14:4e:30:57:e8:d5:f8:
                    90:32:1c:68:d6:4b:e1:77:b4:e5:8f:1d:f8:1e:9f:
                    2a:bc:05:d4:46:d5:26:c6:34:c6:6c:49:0b:ff:99:
                    20:50:9b:ab:d5:a0:9a:70:d1:dc:76:1a:1f:76:1d:
                    3b:41:ce:02:b5:ca:e0:f3:e1:17:a7:b4:f6:24:b0:
                    0c:fb:cb:b8:5a:19:5b:3e:ca:64:78:67:a3:b7:f1:
                    8f:ea:a8:a9:94:ed:71:20:e8:e1:f0:a5:33:a4:95:
                    0b:59:33:e8:12:3f:91:7c:7f:07:44:3a:2e:54:e9:
                    0b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A9:BE:FF:D3:CA:4F:AE:C6:B1:A5:26:CE:21:1B:0C:9F:FB:CC:C2
            X509v3 Authority Key Identifier:
                keyid:9C:69:43:3B:8D:62:74:96:6E:FA:B9:F6:16:C7:3F:59:6D:00:26:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/9C69433B8D6274966EFAB9F616C73F596D0026FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C69433B8D6274966EFAB9F616C73F596D0026FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/3137302e38312e3137332e302f32342d3234203d3e20323634313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:f5:a4:e6:64:51:5c:37:a9:73:97:01:d5:a4:9f:6b:f3:f7:
         bc:88:f4:f8:36:00:11:f0:07:eb:00:9e:7b:17:77:cd:fa:5f:
         13:b6:00:67:46:31:46:4a:58:5d:c8:75:9f:67:2a:50:8b:46:
         f3:46:31:91:63:6d:25:a5:1c:02:65:f6:5e:a5:b9:df:7b:0e:
         c8:84:61:86:f3:c7:69:96:cd:10:11:a1:e7:1c:b4:c7:66:f9:
         5b:28:c2:48:d3:9e:71:d3:32:98:84:c0:64:38:46:99:c5:14:
         d0:61:be:51:06:8e:27:2c:5a:ee:ac:cc:31:6e:2d:32:46:91:
         01:92:23:7b:57:ae:f8:40:0d:6c:9b:ca:18:32:aa:5a:88:e5:
         91:5f:82:f0:fc:95:a9:fc:7f:c4:b0:d9:13:2c:5f:02:5d:52:
         5d:f4:9c:fd:53:e5:09:10:47:ae:f2:b9:90:92:f3:23:bc:62:
         e9:8e:30:37:e5:21:06:db:8f:7f:96:56:69:df:46:9c:6a:2f:
         9f:97:3a:6c:dd:28:87:8e:bc:f1:9b:3e:64:b8:c5:98:8a:83:
         34:0d:2a:70:e0:ea:de:99:9e:31:f8:43:72:53:ab:56:b5:2d:
         28:8c:18:ff:b9:af:98:f8:7b:07:26:5a:0d:44:45:ca:41:53:
         1b:8d:d4:b8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZWZJRLCMPTZswwfRbOg0odhidn0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUM2OTQzM0I4RDYyNzQ5NjZFRkFCOUY2MTZDNzNGNTk2
RDAwMjZGQTAeFw0yNDEyMDIxMjAyMjZaFw0yNTEyMDExMjA3MjZaMDMxMTAvBgNV
BAMTKEI5QTlCRUZGRDNDQTRGQUVDNkIxQTUyNkNFMjExQjBDOUZGQkNDQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDezIQ1fy9W639wFVmAEImU30zx
rLQQkp+uCmM1tCrVNqWCISez/2CWTPvWgakSSvOJBzEkU0r+xYwIn5RcDIp0Q4BR
VHk64TuPY1p3I0F0bTWFDbZ5uMBA+0v8Il2vyIbaV/38yndCjeyE8f8NfnkeGnhM
+x/QHdhpcXlHs2Zm1sxWPMYgkiagWH8nugD5FE4wV+jV+JAyHGjWS+F3tOWPHfge
nyq8BdRG1SbGNMZsSQv/mSBQm6vVoJpw0dx2Gh92HTtBzgK1yuDz4RentPYksAz7
y7haGVs+ymR4Z6O38Y/qqKmU7XEg6OHwpTOklQtZM+gSP5F8fwdEOi5U6Qt1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUuam+/9PKT67GsaUmziEbDJ/7zMIwHwYDVR0j
BBgwFoAUnGlDO41idJZu+rn2Fsc/WW0AJvowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmdRenJXQmdkNlhLeHhzWWRhMnhRZFRqUkQ3d3kxMkVtSHpIY1h0djdC
OWcvMC85QzY5NDMzQjhENjI3NDk2NkVGQUI5RjYxNkM3M0Y1OTZEMDAyNkZBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDNjk0MzNCOEQ2Mjc0OTY2
RUZBQjlGNjE2QzczRjU5NkQwMDI2RkEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZnUXpyV0JnZDZYS3h4c1lkYTJ4UWRUalJEN3d5MTJFbUh6SGNYdHY3QjlnLzAv
MzEzNzMwMmUzODMxMmUzMTM3MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzMTMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACqUa0wDQYJKoZIhvcNAQELBQADggEBABX1pOZk
UVw3qXOXAdWkn2vz97yI9Pg2ABHwB+sAnnsXd836XxO2AGdGMUZKWF3IdZ9nKlCL
RvNGMZFjbSWlHAJl9l6lud97DsiEYYbzx2mWzRARoecctMdm+VsowkjTnnHTMpiE
wGQ4RpnFFNBhvlEGjicsWu6szDFuLTJGkQGSI3tXrvhADWybyhgyqlqI5ZFfgvD8
lan8f8Sw2RMsXwJdUl30nP1T5QkQR67yuZCS8yO8YumOMDflIQbbj3+WVmnfRpxq
L5+XOmzdKIeOvPGbPmS4xZiKgzQNKnDg6t6ZnjH4Q3JTq1a1LSiMGP+5r5j4ewcm
Wg1ERcpBUxuN1Lg=
-----END CERTIFICATE-----
Generated at Sun Apr 6 15:25:28 2025 by rpki-client