Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/3137372e3135352e3138372e302f32342d3234203d3e20323634313030.roa
File:                     3137372e3135352e3138372e302f32342d3234203d3e20323634313030.roa (raw, json)
Hash identifier:          ZBivPJmq46ippMpmF9xUknkalfRdp7mM8uV2irGL4g8=
Subject key identifier:   B6:C5:26:86:F4:0E:C6:D9:90:D2:F6:CC:C0:43:FE:5A:C2:33:DA:D1
Certificate issuer:       /CN=9C69433B8D6274966EFAB9F616C73F596D0026FA
Certificate serial:       0D647F711BFE1DB121479D6BAC68255611503809
Authority key identifier: 9C:69:43:3B:8D:62:74:96:6E:FA:B9:F6:16:C7:3F:59:6D:00:26:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C69433B8D6274966EFAB9F616C73F596D0026FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/3137372e3135352e3138372e302f32342d3234203d3e20323634313030.roa
Signing time:             Mon 02 Dec 2024 12:08:22 +0000
ROA not before:           Mon 02 Dec 2024 12:03:22 +0000
ROA not after:            Mon 01 Dec 2025 12:08:22 +0000
asID:                     264100
IP address blocks:        177.155.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/9C69433B8D6274966EFAB9F616C73F596D0026FA.crl
                          rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/9C69433B8D6274966EFAB9F616C73F596D0026FA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C69433B8D6274966EFAB9F616C73F596D0026FA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 08:28:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:64:7f:71:1b:fe:1d:b1:21:47:9d:6b:ac:68:25:56:11:50:38:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C69433B8D6274966EFAB9F616C73F596D0026FA
        Validity
            Not Before: Dec  2 12:03:22 2024 GMT
            Not After : Dec  1 12:08:22 2025 GMT
        Subject: CN=B6C52686F40EC6D990D2F6CCC043FE5AC233DAD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:bc:57:44:dc:78:a9:3e:f2:a0:2a:d6:50:cb:
                    e9:de:73:e5:56:dd:fa:d4:18:f9:e2:8b:e8:01:10:
                    2c:50:87:5f:2e:7f:48:c4:36:86:b0:33:0b:96:d9:
                    d3:2b:90:d2:b9:93:fa:1a:9e:1e:07:e5:cd:eb:24:
                    53:97:14:91:5f:d3:04:06:a4:ed:d8:c2:35:63:a2:
                    08:d0:f7:b9:b0:d9:f6:25:77:0b:77:71:a6:22:2b:
                    1a:8a:7c:71:98:f2:77:fb:06:ae:27:ec:1f:9e:0b:
                    f0:3c:dc:d7:95:41:d8:73:ee:a2:c6:d6:5a:f7:87:
                    fc:49:f2:a4:57:12:90:50:db:78:9e:c6:0c:79:25:
                    25:08:62:a8:1b:e2:c4:96:65:2e:1a:1d:24:44:c6:
                    43:02:a1:ed:98:ef:50:7e:e5:b0:b5:27:e2:58:f6:
                    7c:07:16:49:dd:06:f9:10:54:b3:ae:1e:ab:73:1d:
                    3e:49:cb:72:7d:17:f3:27:60:a8:7c:dc:40:cf:ef:
                    2c:26:50:ae:88:48:69:10:25:f8:f1:98:12:ea:a3:
                    eb:08:71:bb:ed:4a:27:f6:26:bf:20:35:47:b4:1e:
                    d7:f3:67:6a:bf:9e:0e:f3:d4:31:e3:74:e9:14:bd:
                    b9:9b:0d:f7:ee:56:55:be:c5:8d:d4:d0:54:cb:aa:
                    2d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C5:26:86:F4:0E:C6:D9:90:D2:F6:CC:C0:43:FE:5A:C2:33:DA:D1
            X509v3 Authority Key Identifier:
                keyid:9C:69:43:3B:8D:62:74:96:6E:FA:B9:F6:16:C7:3F:59:6D:00:26:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/9C69433B8D6274966EFAB9F616C73F596D0026FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C69433B8D6274966EFAB9F616C73F596D0026FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/3137372e3135352e3138372e302f32342d3234203d3e20323634313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:ab:08:10:ff:c9:7b:ca:ed:40:6a:66:14:39:10:6d:83:4e:
         1c:7e:24:eb:49:c2:4c:ee:3d:28:4a:e6:af:4e:23:7d:bb:e6:
         6c:e5:4d:9f:6f:55:56:db:30:be:28:1d:4a:ef:3a:02:3c:c8:
         7f:df:d0:64:16:b1:ac:19:c8:3a:ba:e3:7a:62:4a:87:eb:b5:
         fa:79:ae:58:7f:8d:b5:ae:86:de:c2:f8:82:05:24:60:17:38:
         47:ed:19:91:15:c1:a1:ca:04:fd:6b:f0:0c:21:e4:99:1f:0c:
         11:b4:d4:7d:5f:b3:f9:69:3e:70:cc:c1:90:35:59:fc:3c:23:
         3b:79:c9:fd:96:ee:34:17:26:f2:f3:8a:59:33:08:69:65:b0:
         33:bd:1d:0a:a9:55:ee:77:0a:f9:36:57:e8:79:a8:69:ae:c3:
         4c:07:b0:14:83:05:46:27:a9:03:df:38:7e:db:1e:67:a4:81:
         7b:f4:97:87:bd:31:17:f1:14:9a:88:b9:56:06:08:ea:5c:01:
         57:9b:00:fe:52:dc:d4:a3:b1:e0:26:1b:90:95:f5:19:13:25:
         18:61:36:9c:a2:9f:18:38:ad:58:ac:a5:77:7f:1f:42:a0:be:
         bb:f6:ea:23:f1:7a:da:9d:d6:55:aa:dd:ce:16:56:c7:a1:e7:
         fe:0f:7e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:25:16 2025 by rpki-client