Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/3137372e3135352e3138342e302f32312d3231203d3e20323634313030.roa
File:                     3137372e3135352e3138342e302f32312d3231203d3e20323634313030.roa (raw, json)
Hash identifier:          AgCXbK+AfVeSP2RvQCDsr9dFgYFiIAtJvp+glsM0qr0=
Subject key identifier:   E4:D7:24:8E:A0:C9:54:54:1C:AF:A3:63:AA:37:E1:24:30:A0:51:31
Certificate issuer:       /CN=9C69433B8D6274966EFAB9F616C73F596D0026FA
Certificate serial:       104CA7663676BAB9A5682BF463B4F94C0F8DBFE3
Authority key identifier: 9C:69:43:3B:8D:62:74:96:6E:FA:B9:F6:16:C7:3F:59:6D:00:26:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C69433B8D6274966EFAB9F616C73F596D0026FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/3137372e3135352e3138342e302f32312d3231203d3e20323634313030.roa
Signing time:             Mon 02 Dec 2024 12:08:35 +0000
ROA not before:           Mon 02 Dec 2024 12:03:35 +0000
ROA not after:            Mon 01 Dec 2025 12:08:35 +0000
asID:                     264100
IP address blocks:        177.155.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/9C69433B8D6274966EFAB9F616C73F596D0026FA.crl
                          rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/9C69433B8D6274966EFAB9F616C73F596D0026FA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C69433B8D6274966EFAB9F616C73F596D0026FA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 08:28:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:4c:a7:66:36:76:ba:b9:a5:68:2b:f4:63:b4:f9:4c:0f:8d:bf:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C69433B8D6274966EFAB9F616C73F596D0026FA
        Validity
            Not Before: Dec  2 12:03:35 2024 GMT
            Not After : Dec  1 12:08:35 2025 GMT
        Subject: CN=E4D7248EA0C954541CAFA363AA37E12430A05131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4c:00:d5:7c:73:38:48:fc:cf:01:75:9d:a1:
                    91:a3:4b:12:95:11:cb:d2:a2:68:af:e7:2d:a2:60:
                    8a:59:ff:d4:41:49:eb:55:de:0d:03:d5:7b:b1:10:
                    8f:17:b4:cc:56:a4:06:b2:23:bb:6a:2b:ad:53:6a:
                    92:ec:6c:b4:10:fd:9a:2d:c4:83:b4:0e:a5:a3:38:
                    08:86:df:fa:0b:1d:0a:15:88:bf:62:94:21:48:bc:
                    1c:24:53:df:2d:a8:ce:70:92:ca:c6:04:4a:34:8b:
                    0c:12:55:f4:4d:f8:74:86:27:27:0c:f8:a7:32:88:
                    bf:eb:f3:3e:3c:16:c0:bf:57:d6:59:52:4c:5c:c3:
                    74:f8:4f:71:83:d6:a7:d1:e5:7b:14:6e:70:ab:47:
                    d9:6f:25:9f:9c:67:23:3e:f7:37:fb:07:c1:1e:64:
                    c4:8c:69:b8:57:d1:b0:15:e7:2a:97:f2:ac:ff:14:
                    ae:75:e4:00:af:d8:b4:c6:a1:b5:0a:b6:48:97:0c:
                    19:9f:d1:68:c2:84:79:78:2a:a1:cc:c3:f3:a6:6a:
                    56:79:2c:63:21:cf:ab:fb:66:cb:5c:7f:b0:09:96:
                    56:50:25:c9:f6:5c:97:44:11:19:db:f2:49:d1:95:
                    27:34:65:db:7f:f7:2e:ec:4a:53:2e:ea:16:30:e6:
                    5a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D7:24:8E:A0:C9:54:54:1C:AF:A3:63:AA:37:E1:24:30:A0:51:31
            X509v3 Authority Key Identifier:
                keyid:9C:69:43:3B:8D:62:74:96:6E:FA:B9:F6:16:C7:3F:59:6D:00:26:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/9C69433B8D6274966EFAB9F616C73F596D0026FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C69433B8D6274966EFAB9F616C73F596D0026FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/3137372e3135352e3138342e302f32312d3231203d3e20323634313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         41:31:ed:d3:47:34:bc:e2:e9:c9:6d:ac:45:3d:29:dd:4e:c5:
         de:98:d2:df:8c:b4:4a:13:43:ae:61:b8:49:09:38:47:f0:7c:
         b5:78:07:28:2e:a2:53:00:74:9e:3e:d9:7c:0c:5a:a8:ca:18:
         1b:0c:d2:6f:42:c9:89:fd:1c:fa:48:fc:1b:86:b0:2d:84:84:
         fc:f5:e1:7f:29:37:e0:98:13:1e:bd:8b:c0:f6:de:d3:25:3f:
         3e:da:a6:de:10:67:24:15:fd:d4:d8:40:55:6b:0f:f0:ab:91:
         c1:30:b2:9c:c6:79:e5:7a:5f:ea:74:48:d0:f2:df:d6:52:09:
         66:73:cd:11:8d:30:2c:eb:3c:48:12:17:94:15:fc:d2:27:89:
         4d:7e:d4:16:fc:2d:7e:a3:1d:4d:88:d8:49:aa:dc:65:d2:5c:
         47:c1:3d:8e:8a:54:eb:9e:75:6e:88:22:43:2c:f9:5d:fd:c1:
         65:7b:af:5c:bb:e2:fb:be:df:64:20:ab:a6:75:b3:2a:15:a5:
         23:9e:f6:e5:19:32:a7:76:5f:78:0d:8e:6c:35:75:69:04:ec:
         92:d4:72:9b:78:6d:56:60:d1:4b:1f:66:7d:76:29:3f:a1:17:
         e7:ba:9a:0c:e3:16:65:31:3e:39:d5:a7:23:83:ab:c4:6c:6f:
         cf:b5:9d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:22:55 2025 by rpki-client