Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/3137372e3135352e3138302e302f32322d3232203d3e20323634313030.roa
File:                     3137372e3135352e3138302e302f32322d3232203d3e20323634313030.roa (raw, json)
Hash identifier:          MKE9/UXJlHNDw6JgmiRkLQddwxmzrKjSm4AqUKh9DDo=
Subject key identifier:   06:BA:FD:FB:00:37:C7:17:A3:96:81:05:4E:E3:81:EA:E8:41:4D:A8
Certificate issuer:       /CN=9C69433B8D6274966EFAB9F616C73F596D0026FA
Certificate serial:       250C3FEEF978C8A8C9DEB1C9EA410AA615CEEB16
Authority key identifier: 9C:69:43:3B:8D:62:74:96:6E:FA:B9:F6:16:C7:3F:59:6D:00:26:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C69433B8D6274966EFAB9F616C73F596D0026FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/3137372e3135352e3138302e302f32322d3232203d3e20323634313030.roa
Signing time:             Mon 02 Dec 2024 12:08:53 +0000
ROA not before:           Mon 02 Dec 2024 12:03:53 +0000
ROA not after:            Mon 01 Dec 2025 12:08:53 +0000
asID:                     264100
IP address blocks:        177.155.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/9C69433B8D6274966EFAB9F616C73F596D0026FA.crl
                          rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/9C69433B8D6274966EFAB9F616C73F596D0026FA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C69433B8D6274966EFAB9F616C73F596D0026FA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 08:28:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:0c:3f:ee:f9:78:c8:a8:c9:de:b1:c9:ea:41:0a:a6:15:ce:eb:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C69433B8D6274966EFAB9F616C73F596D0026FA
        Validity
            Not Before: Dec  2 12:03:53 2024 GMT
            Not After : Dec  1 12:08:53 2025 GMT
        Subject: CN=06BAFDFB0037C717A39681054EE381EAE8414DA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b8:9c:d8:ef:f6:2b:9f:05:90:2e:60:53:7b:
                    74:44:c9:f8:d9:1d:3f:0c:e7:d9:89:b7:87:4e:47:
                    a5:3e:2c:79:e5:f1:63:ec:c6:b0:6c:86:bd:af:3d:
                    bf:df:ad:85:e4:89:f3:4e:a3:c8:fe:93:8f:85:27:
                    43:22:02:45:97:9e:62:f7:1d:79:17:77:3b:fb:55:
                    18:3a:c3:f2:7d:a6:f2:2a:21:87:6b:6c:aa:46:2a:
                    96:c7:ce:7e:af:f4:30:96:dc:6b:18:44:3f:12:13:
                    0c:7d:33:a5:e8:a8:8e:08:f3:c3:8d:d3:9e:86:56:
                    5b:55:4d:7f:f8:b0:70:2a:6d:f2:60:c8:3d:f2:bd:
                    6b:ed:74:03:23:b4:60:e1:c2:da:13:c0:6b:54:8c:
                    57:17:b7:b1:88:51:58:7f:c8:88:14:91:c6:20:ff:
                    e6:f3:36:40:29:52:57:04:5c:6f:fa:20:ce:eb:18:
                    eb:54:5d:ba:e3:d3:76:b4:ea:65:9a:25:dc:d6:65:
                    81:78:dd:16:3b:55:f2:31:5a:24:c0:da:f4:e0:f4:
                    84:96:ab:6d:b2:53:6a:46:be:ba:fb:ac:ab:c7:30:
                    13:ea:fd:b3:04:68:d4:23:d4:0e:70:ba:9b:8a:5b:
                    c8:08:63:84:b3:bf:9c:5b:55:06:23:36:5c:61:a2:
                    1c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:BA:FD:FB:00:37:C7:17:A3:96:81:05:4E:E3:81:EA:E8:41:4D:A8
            X509v3 Authority Key Identifier:
                keyid:9C:69:43:3B:8D:62:74:96:6E:FA:B9:F6:16:C7:3F:59:6D:00:26:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/9C69433B8D6274966EFAB9F616C73F596D0026FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C69433B8D6274966EFAB9F616C73F596D0026FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/3137372e3135352e3138302e302f32322d3232203d3e20323634313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:40:5f:71:91:57:cf:55:2e:21:81:fc:71:e2:6e:8c:c3:92:
         04:1a:b7:2e:44:b4:16:e6:37:9c:00:5e:ee:d0:59:dc:19:15:
         11:4e:11:a0:9b:1d:85:40:81:0a:ce:57:4c:4b:de:90:5c:b4:
         9e:44:57:e5:f2:91:6c:87:aa:cf:25:bf:a4:dd:3d:ea:92:0f:
         7f:52:a9:ea:cf:a1:0a:cb:d6:84:01:91:7b:88:47:35:45:5b:
         f4:b3:5d:da:fd:3b:5d:39:e2:8f:79:fa:45:ff:14:39:b8:1b:
         f5:db:3e:3a:ef:1f:b5:39:4e:ee:1c:0e:73:cd:06:ed:78:70:
         2a:6c:ff:53:1d:6f:10:fe:d3:a0:9b:3e:c6:58:6d:8d:18:47:
         e5:cd:36:7e:f9:a9:df:9f:67:64:27:be:38:45:25:7e:17:4b:
         c1:a0:3b:58:33:11:71:1c:24:21:74:b3:4d:37:71:f5:7e:54:
         b8:d6:eb:b4:ec:ef:e4:06:26:31:53:c8:ca:cc:40:65:06:cf:
         3a:7c:f3:33:44:52:3e:9d:4e:9b:00:2b:5c:63:81:f6:1c:af:
         2b:fe:f6:49:7b:2b:08:e0:63:ef:6e:72:69:c2:6e:91:d5:47:
         3c:cb:5c:7c:27:81:f4:31:bf:0e:13:02:9b:30:9b:3c:cc:91:
         ee:3a:92:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:22:49 2025 by rpki-client