Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/3137372e3135352e3138392e302f32342d3234203d3e20323634313030.roa
File:                     3137372e3135352e3138392e302f32342d3234203d3e20323634313030.roa (raw, json)
Hash identifier:          VvWQEVMblsgCyICavgt0QmtJneWJs1Gc+gxUoizrhQQ=
Subject key identifier:   A1:EC:B9:A9:DA:B1:73:32:60:B2:EC:AE:1F:D2:F1:A6:F6:CB:92:76
Certificate issuer:       /CN=9C69433B8D6274966EFAB9F616C73F596D0026FA
Certificate serial:       5B7A02D7977EAAB60A8C2453BBBE0E3CE0C05369
Authority key identifier: 9C:69:43:3B:8D:62:74:96:6E:FA:B9:F6:16:C7:3F:59:6D:00:26:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C69433B8D6274966EFAB9F616C73F596D0026FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/3137372e3135352e3138392e302f32342d3234203d3e20323634313030.roa
Signing time:             Mon 02 Dec 2024 12:08:16 +0000
ROA not before:           Mon 02 Dec 2024 12:03:16 +0000
ROA not after:            Mon 01 Dec 2025 12:08:16 +0000
asID:                     264100
IP address blocks:        177.155.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/9C69433B8D6274966EFAB9F616C73F596D0026FA.crl
                          rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/9C69433B8D6274966EFAB9F616C73F596D0026FA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C69433B8D6274966EFAB9F616C73F596D0026FA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 08:28:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:7a:02:d7:97:7e:aa:b6:0a:8c:24:53:bb:be:0e:3c:e0:c0:53:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C69433B8D6274966EFAB9F616C73F596D0026FA
        Validity
            Not Before: Dec  2 12:03:16 2024 GMT
            Not After : Dec  1 12:08:16 2025 GMT
        Subject: CN=A1ECB9A9DAB1733260B2ECAE1FD2F1A6F6CB9276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:69:21:f8:32:bf:56:c5:8c:94:c1:53:cf:ff:
                    a8:46:42:7d:1a:27:cb:e4:13:9b:f0:58:4b:ee:c5:
                    13:42:84:2f:56:ed:a7:96:5c:f8:05:67:c1:fb:59:
                    2b:84:0a:fc:1f:08:93:c0:92:56:14:6b:d9:3b:f1:
                    45:0d:a5:38:56:fe:ce:08:a7:8d:bd:0d:b1:ef:d9:
                    41:7d:68:88:da:fc:1d:d5:c2:78:6d:13:aa:1c:59:
                    a3:f5:52:4d:47:3e:46:26:18:cf:f2:3a:bc:18:97:
                    1b:2a:71:07:a7:2a:4d:26:34:4d:47:5e:39:3a:b5:
                    2c:a7:3c:50:fa:37:ae:46:b6:88:dd:1b:f1:87:e1:
                    e7:65:be:90:0f:de:c1:db:93:25:a1:79:c3:49:e9:
                    43:2b:bc:fd:0e:7f:b4:5b:e0:47:ef:8b:dd:70:46:
                    61:be:2a:99:3f:d4:43:f4:b0:42:b0:49:6c:4e:a4:
                    1f:c3:8c:4e:37:c0:61:47:69:d4:9c:5c:29:4a:b4:
                    2e:1d:e0:70:0c:48:ae:1c:2c:f5:91:61:a3:57:ee:
                    c9:e9:e6:23:37:ab:99:52:3b:77:90:98:b6:3f:98:
                    f7:16:f0:d7:fc:12:41:4a:1e:96:73:ab:b2:13:d2:
                    b4:cb:fe:b6:fb:70:99:4d:9d:18:74:dd:35:be:7a:
                    13:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:EC:B9:A9:DA:B1:73:32:60:B2:EC:AE:1F:D2:F1:A6:F6:CB:92:76
            X509v3 Authority Key Identifier:
                keyid:9C:69:43:3B:8D:62:74:96:6E:FA:B9:F6:16:C7:3F:59:6D:00:26:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/9C69433B8D6274966EFAB9F616C73F596D0026FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C69433B8D6274966EFAB9F616C73F596D0026FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/3137372e3135352e3138392e302f32342d3234203d3e20323634313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:b5:ae:7c:00:07:9e:dd:21:bd:7d:d6:32:ae:fd:99:d3:3e:
         8a:33:c8:a2:78:38:5a:10:f4:c5:d5:dc:ed:c7:84:e2:23:76:
         68:9a:8c:eb:02:84:da:4b:c5:17:d7:a1:d5:1c:1d:6c:bc:35:
         97:c6:97:e1:f4:a2:e9:fa:2b:a4:25:dd:4c:e6:dd:73:3b:d8:
         f4:18:c8:63:2b:24:aa:64:b0:6a:57:73:6a:a7:e3:91:dd:ed:
         d3:1b:3d:94:4a:6a:a3:57:f3:0b:01:49:45:86:d7:36:ec:19:
         c4:87:af:bb:d0:f1:6b:b5:98:c8:f7:33:32:14:b6:83:17:b1:
         93:49:d8:b8:09:a5:47:bd:5e:11:54:2f:c0:7e:61:39:8f:61:
         15:68:45:d4:6f:55:49:86:5a:8a:b7:39:ab:36:d5:72:2d:e7:
         54:56:57:d9:8b:96:5f:1c:39:c2:b5:8d:0a:bf:92:31:b6:46:
         ef:c2:cd:e1:80:d7:31:7a:65:94:24:3e:4a:b4:ce:8d:1c:db:
         61:01:48:3b:ff:d9:3c:77:90:2f:72:d5:a6:1d:2a:da:1e:a5:
         8f:e6:c6:96:29:2b:5b:8f:15:e7:26:26:c5:02:86:c8:54:0a:
         14:00:39:71:71:c2:06:11:f1:31:55:40:12:f8:d8:90:e6:6e:
         c7:8d:46:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:27:44 2025 by rpki-client