Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/3137372e3135352e3139302e302f32342d3234203d3e20323634313030.roa
File:                     3137372e3135352e3139302e302f32342d3234203d3e20323634313030.roa (raw, json)
Hash identifier:          6QN2B2f5m+sZu9OklfKR/QJeJ6q3bgFQwiQRvzqN0rc=
Subject key identifier:   35:8D:31:CA:0B:2E:66:00:B9:8D:CF:99:38:A9:AB:95:9C:1E:FB:58
Certificate issuer:       /CN=9C69433B8D6274966EFAB9F616C73F596D0026FA
Certificate serial:       53B25798D718B274FC2B7FD747446ABC239BB4A4
Authority key identifier: 9C:69:43:3B:8D:62:74:96:6E:FA:B9:F6:16:C7:3F:59:6D:00:26:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C69433B8D6274966EFAB9F616C73F596D0026FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/3137372e3135352e3139302e302f32342d3234203d3e20323634313030.roa
Signing time:             Mon 02 Dec 2024 12:08:11 +0000
ROA not before:           Mon 02 Dec 2024 12:03:11 +0000
ROA not after:            Mon 01 Dec 2025 12:08:11 +0000
asID:                     264100
IP address blocks:        177.155.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/9C69433B8D6274966EFAB9F616C73F596D0026FA.crl
                          rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/9C69433B8D6274966EFAB9F616C73F596D0026FA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C69433B8D6274966EFAB9F616C73F596D0026FA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 08:28:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:b2:57:98:d7:18:b2:74:fc:2b:7f:d7:47:44:6a:bc:23:9b:b4:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C69433B8D6274966EFAB9F616C73F596D0026FA
        Validity
            Not Before: Dec  2 12:03:11 2024 GMT
            Not After : Dec  1 12:08:11 2025 GMT
        Subject: CN=358D31CA0B2E6600B98DCF9938A9AB959C1EFB58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:77:03:3a:c2:31:94:58:17:a2:bc:74:2d:11:
                    60:ac:78:a7:36:ae:30:b5:2d:91:c6:e2:fc:b0:08:
                    9e:84:1a:1b:b1:cc:0f:4a:36:f1:1c:a1:c3:cc:38:
                    ac:58:62:1a:00:8d:53:1f:7b:02:a4:bf:18:58:2a:
                    f6:e5:ab:51:78:04:6c:94:7e:1f:db:e9:fb:d2:da:
                    32:7b:02:1b:5c:38:64:2a:66:68:68:65:ad:7b:56:
                    ed:12:0c:03:5c:25:6d:54:3b:43:d8:d6:0d:fa:bd:
                    30:24:ad:07:64:ed:5a:4c:0d:9b:63:4b:79:19:47:
                    6b:2c:ad:cb:75:fa:f5:bf:84:66:c1:3a:4d:8f:a2:
                    1b:03:69:15:99:52:24:55:95:87:0b:3c:6c:45:74:
                    fd:e8:a0:b1:48:b8:4f:3e:da:f2:34:25:9c:e3:61:
                    83:67:fd:49:32:eb:ec:32:b8:c6:1a:47:fa:47:29:
                    d5:40:cb:a2:23:7e:0b:d3:14:3a:23:46:2e:e4:8f:
                    a2:3c:99:35:fa:88:e2:73:27:81:33:4c:ac:59:75:
                    95:5e:8e:17:43:c4:ee:c2:99:10:6a:5f:2a:e7:a0:
                    b0:41:4a:7f:06:4b:c8:07:95:44:21:a7:34:34:9d:
                    d3:11:4c:b2:ef:c2:59:cf:27:63:7d:1b:e9:b9:cc:
                    53:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:8D:31:CA:0B:2E:66:00:B9:8D:CF:99:38:A9:AB:95:9C:1E:FB:58
            X509v3 Authority Key Identifier:
                keyid:9C:69:43:3B:8D:62:74:96:6E:FA:B9:F6:16:C7:3F:59:6D:00:26:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/9C69433B8D6274966EFAB9F616C73F596D0026FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C69433B8D6274966EFAB9F616C73F596D0026FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/3137372e3135352e3139302e302f32342d3234203d3e20323634313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         dd:6a:41:53:38:fc:2a:3a:44:8a:31:de:c1:4c:c0:ba:5d:22:
         52:f5:c7:b7:48:6b:f4:25:15:58:c1:29:c9:52:bb:5d:19:d0:
         03:0e:f1:88:89:d6:61:ca:93:b5:c0:0c:70:a5:47:8d:53:89:
         e9:a7:0d:a3:b8:43:fd:2a:4e:30:8d:1a:60:22:cc:b2:b5:56:
         0f:50:66:59:2a:2e:6f:eb:a4:78:0e:61:bf:b6:85:84:38:6c:
         8f:bb:4f:51:95:ce:c3:86:17:eb:19:50:2c:90:01:5a:04:fc:
         23:18:d3:9f:f6:5c:20:83:b2:90:67:d0:de:5c:d6:ea:3a:0c:
         fa:13:e5:4a:ab:39:d9:13:73:17:9d:f8:30:a1:78:ef:73:3c:
         93:6c:a4:3b:6e:fb:1e:b4:b7:74:b5:7f:53:33:ab:d5:56:3a:
         a5:39:6e:98:d4:e7:82:f2:f5:b9:ed:16:2f:e1:ce:16:fa:8e:
         a0:f1:56:c6:c0:87:49:e9:53:65:7a:14:d8:9c:02:1f:e8:9b:
         ed:3c:bd:f6:dc:ab:51:04:b4:85:91:91:b2:ed:de:4b:8e:be:
         47:01:5f:f1:33:1a:b1:3a:08:9a:bc:c3:5b:9d:dd:88:af:24:
         bd:61:34:d4:14:08:7b:4f:97:a0:49:44:01:17:20:28:d3:6a:
         dd:db:2f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:42:15 2025 by rpki-client