Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/3137372e3135352e3138352e302f32342d3234203d3e20323634313030.roa
File:                     3137372e3135352e3138352e302f32342d3234203d3e20323634313030.roa (raw, json)
Hash identifier:          J/IK7CUPP2Mxl+b7Zvw82qZtT7KMTm9+tYIBkqle7DU=
Subject key identifier:   96:92:70:11:A9:15:85:D0:35:11:5F:4D:FB:1F:D5:04:A3:16:F2:5A
Certificate issuer:       /CN=9C69433B8D6274966EFAB9F616C73F596D0026FA
Certificate serial:       46D1A5537C9AF1BAD6F5C6A0684D1400C6CB5372
Authority key identifier: 9C:69:43:3B:8D:62:74:96:6E:FA:B9:F6:16:C7:3F:59:6D:00:26:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C69433B8D6274966EFAB9F616C73F596D0026FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/3137372e3135352e3138352e302f32342d3234203d3e20323634313030.roa
Signing time:             Mon 02 Dec 2024 12:08:27 +0000
ROA not before:           Mon 02 Dec 2024 12:03:27 +0000
ROA not after:            Mon 01 Dec 2025 12:08:27 +0000
asID:                     264100
IP address blocks:        177.155.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/9C69433B8D6274966EFAB9F616C73F596D0026FA.crl
                          rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/9C69433B8D6274966EFAB9F616C73F596D0026FA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C69433B8D6274966EFAB9F616C73F596D0026FA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 08:28:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:d1:a5:53:7c:9a:f1:ba:d6:f5:c6:a0:68:4d:14:00:c6:cb:53:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C69433B8D6274966EFAB9F616C73F596D0026FA
        Validity
            Not Before: Dec  2 12:03:27 2024 GMT
            Not After : Dec  1 12:08:27 2025 GMT
        Subject: CN=96927011A91585D035115F4DFB1FD504A316F25A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:31:a7:e4:5d:02:43:cf:8f:02:49:ca:73:63:
                    55:eb:7c:c7:a5:3a:d6:b1:0e:31:8a:03:fc:c6:6e:
                    27:65:89:88:2a:07:4c:95:cc:e3:92:83:73:17:1a:
                    8b:b1:3b:49:f4:ce:33:04:df:0b:17:6e:7e:22:54:
                    60:e2:2e:c0:a8:42:b1:8f:9f:34:c3:75:2f:55:7f:
                    33:4d:73:a9:3c:cc:b8:db:59:4a:b8:e3:6e:01:ba:
                    17:87:b7:b6:c6:9b:30:87:6e:1d:d1:f9:50:6a:8d:
                    20:4c:a8:1d:bf:b0:86:e2:c9:07:86:78:dd:fd:d7:
                    2f:49:a6:bc:c7:a0:5c:22:57:86:b0:a2:86:50:8f:
                    fd:2c:93:02:ee:82:8f:d8:32:b1:cb:4a:91:ab:95:
                    25:ec:20:58:2d:3b:34:c1:22:5d:d8:4e:e7:72:57:
                    43:d2:ac:87:c0:a3:c2:95:5f:b6:ac:3d:c8:49:f0:
                    f1:e0:af:ea:93:e0:fe:0f:1f:75:c6:61:4b:70:30:
                    a6:1f:f1:8d:d7:3b:69:8c:66:bd:fa:cd:03:b5:98:
                    70:02:49:89:d5:9e:bf:a3:c4:d4:0f:50:97:d4:4e:
                    b6:78:1e:1b:49:b7:78:52:3d:cd:a9:29:17:3e:0a:
                    e5:c1:0e:2e:ff:a7:65:d3:a8:cb:1e:66:49:a0:52:
                    81:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:92:70:11:A9:15:85:D0:35:11:5F:4D:FB:1F:D5:04:A3:16:F2:5A
            X509v3 Authority Key Identifier:
                keyid:9C:69:43:3B:8D:62:74:96:6E:FA:B9:F6:16:C7:3F:59:6D:00:26:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/9C69433B8D6274966EFAB9F616C73F596D0026FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C69433B8D6274966EFAB9F616C73F596D0026FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/3137372e3135352e3138352e302f32342d3234203d3e20323634313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:2d:35:d9:81:b0:e1:25:db:36:76:a6:72:fb:fa:24:a8:83:
         e2:6c:2a:00:41:f4:60:b6:4e:46:a7:a9:88:0a:44:9c:8d:cd:
         c4:7a:e1:5b:3a:11:40:66:a2:b5:53:9e:af:de:a1:09:26:1b:
         92:0b:92:a2:a8:ab:89:4d:6b:85:c1:46:d1:b8:42:9c:33:1f:
         56:f6:6a:69:60:79:31:3a:9a:be:38:c4:fe:56:30:aa:83:9a:
         fe:7a:b8:bb:dc:3a:40:3e:5f:d0:d7:0e:12:53:b1:28:b1:2c:
         1c:f7:3b:db:6b:14:d2:c3:16:ff:96:8b:3f:bb:32:42:cd:c4:
         32:8e:07:6b:5c:b7:a9:1f:81:e0:27:0f:d2:a7:d0:1a:37:dd:
         69:e2:2d:f8:f6:ee:9c:a9:99:b6:e7:6c:19:2d:e7:2a:37:52:
         c3:bc:16:10:70:3e:e2:1d:c3:4e:f4:3a:93:64:42:2a:78:03:
         b8:a2:a3:3e:1f:a7:01:d2:9e:23:f1:37:d8:0e:f8:0b:db:d6:
         6e:33:5e:a4:5a:a4:58:c4:01:29:76:64:b6:20:86:4e:70:3f:
         11:fa:a2:d2:61:a8:5b:64:57:97:4e:58:c6:c8:45:0d:87:0a:
         c3:51:6e:a7:42:eb:6b:b7:d6:23:12:2a:0c:e6:24:e1:7e:0f:
         c1:43:ea:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:27:42 2025 by rpki-client