Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/34352e3137322e3231302e302f32342d3234203d3e20323634313030.roa
File:                     34352e3137322e3231302e302f32342d3234203d3e20323634313030.roa (raw, json)
Hash identifier:          +Hfv9L3HROb91aCTgWdWdjvEkJJbGAWmhm1CJGKNSsg=
Subject key identifier:   15:FB:4F:D8:B1:08:D3:38:E3:AF:72:84:70:C2:A5:53:47:12:E4:1D
Certificate issuer:       /CN=9C69433B8D6274966EFAB9F616C73F596D0026FA
Certificate serial:       768D20B1B252C1D28D12889A00965BCFEC3AA39A
Authority key identifier: 9C:69:43:3B:8D:62:74:96:6E:FA:B9:F6:16:C7:3F:59:6D:00:26:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C69433B8D6274966EFAB9F616C73F596D0026FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/34352e3137322e3231302e302f32342d3234203d3e20323634313030.roa
Signing time:             Mon 02 Dec 2024 12:06:58 +0000
ROA not before:           Mon 02 Dec 2024 12:01:58 +0000
ROA not after:            Mon 01 Dec 2025 12:06:58 +0000
asID:                     264100
IP address blocks:        45.172.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/9C69433B8D6274966EFAB9F616C73F596D0026FA.crl
                          rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/9C69433B8D6274966EFAB9F616C73F596D0026FA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C69433B8D6274966EFAB9F616C73F596D0026FA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 08:28:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:8d:20:b1:b2:52:c1:d2:8d:12:88:9a:00:96:5b:cf:ec:3a:a3:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C69433B8D6274966EFAB9F616C73F596D0026FA
        Validity
            Not Before: Dec  2 12:01:58 2024 GMT
            Not After : Dec  1 12:06:58 2025 GMT
        Subject: CN=15FB4FD8B108D338E3AF728470C2A5534712E41D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a2:d9:51:09:16:f9:34:68:c4:8c:45:a6:73:
                    31:d6:d8:19:ed:22:a1:61:93:5b:b9:06:b7:54:7d:
                    55:a5:5d:ab:f3:09:fe:a6:f1:2e:e0:33:dd:f6:be:
                    26:0a:85:9f:64:c4:4b:50:36:28:03:2e:8d:a9:e9:
                    9f:cf:f0:ee:67:ad:5a:39:72:ae:e7:fc:4c:f6:52:
                    a8:a4:1b:4d:d1:24:d3:d3:a5:58:d9:2d:24:46:4b:
                    77:20:10:bb:ea:af:c1:e0:95:91:a7:7b:4c:f8:0b:
                    b4:79:37:0a:0f:c6:af:dc:04:43:68:5f:bb:c5:18:
                    64:58:2e:c4:1d:d2:b8:94:8d:9a:db:e2:8b:78:c8:
                    52:2d:24:51:56:50:94:0e:de:d5:93:91:f5:93:f0:
                    ae:6b:3a:71:09:dc:9f:3b:2e:56:17:7a:fa:56:cb:
                    6d:c0:d9:82:c5:c9:93:b0:58:a5:a9:97:6b:b0:32:
                    10:6b:4a:5f:24:ba:7e:42:39:bb:ec:ec:18:d2:0e:
                    37:92:3b:bb:d9:40:a9:00:5d:17:f7:14:2e:a7:ad:
                    ff:31:ab:36:ba:c8:05:6b:0b:fc:26:cc:b3:16:90:
                    c4:19:3f:0c:ff:81:a2:16:03:aa:84:d2:52:70:26:
                    48:d5:13:3b:f1:06:ad:a6:cb:70:80:27:e3:d0:84:
                    ee:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:FB:4F:D8:B1:08:D3:38:E3:AF:72:84:70:C2:A5:53:47:12:E4:1D
            X509v3 Authority Key Identifier:
                keyid:9C:69:43:3B:8D:62:74:96:6E:FA:B9:F6:16:C7:3F:59:6D:00:26:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/9C69433B8D6274966EFAB9F616C73F596D0026FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C69433B8D6274966EFAB9F616C73F596D0026FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/34352e3137322e3231302e302f32342d3234203d3e20323634313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:33:eb:c1:15:53:67:03:b6:7a:09:dc:da:58:fd:17:b0:11:
         b7:db:a0:bb:bd:13:ae:18:be:fa:ec:40:cb:e4:0b:00:41:f1:
         19:f7:3d:24:aa:49:c6:1e:6c:b7:6a:83:08:6d:4e:be:9d:2c:
         e8:d9:19:93:d4:45:6e:1f:6b:44:68:ef:88:6a:4e:9d:b8:85:
         f5:32:63:fe:a6:30:fd:38:df:80:06:1b:01:13:7c:9b:0a:a9:
         1d:51:0c:08:77:6c:e5:36:58:20:75:d9:01:97:fc:b0:e1:03:
         82:6d:96:5b:8a:7f:8e:1d:82:27:96:5b:d7:0a:be:f8:da:ef:
         a4:51:d6:56:16:8c:23:db:16:af:78:6b:3f:56:30:52:20:b0:
         ed:75:19:c9:36:8d:46:56:b8:8c:d3:8b:0f:5e:15:cf:c0:b5:
         99:10:9a:b5:da:dc:0d:51:47:f0:fd:32:9b:65:42:1d:69:52:
         4c:a1:7f:db:55:47:6b:5f:cb:fa:3c:84:04:b0:fe:cc:1f:74:
         fc:67:f0:82:e4:27:36:a5:26:1a:7f:6f:3a:13:bc:81:b2:ac:
         8b:4e:d8:11:86:84:de:9e:4e:c2:29:e2:bf:90:78:06:6d:59:
         51:99:4e:85:be:0a:d7:09:75:b8:63:2e:5d:63:a9:f1:60:9e:
         e7:a9:d2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:42:08 2025 by rpki-client