Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/3136342e3136332e3130382e302f32342d3234203d3e20323635393530.roa
File:                     3136342e3136332e3130382e302f32342d3234203d3e20323635393530.roa (raw, json)
Hash identifier:          XChCnWbRzFdS4Rr/fBE3heBNEnXDeCT9a/yZdSUw3M4=
Subject key identifier:   FE:FF:2E:D8:34:0D:99:1C:84:40:17:2B:38:7F:8E:C4:0D:91:69:7C
Certificate issuer:       /CN=C6D32F231785FEA26541B55E3CF768D365266570
Certificate serial:       77C57B4CF12F228A7A9D9EF64B43A039C5163EA1
Authority key identifier: C6:D3:2F:23:17:85:FE:A2:65:41:B5:5E:3C:F7:68:D3:65:26:65:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6D32F231785FEA26541B55E3CF768D365266570.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/3136342e3136332e3130382e302f32342d3234203d3e20323635393530.roa
Signing time:             Sat 04 Jan 2025 12:06:25 +0000
ROA not before:           Sat 04 Jan 2025 12:01:25 +0000
ROA not after:            Sat 03 Jan 2026 12:06:25 +0000
asID:                     265950
IP address blocks:        164.163.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/C6D32F231785FEA26541B55E3CF768D365266570.crl
                          rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/C6D32F231785FEA26541B55E3CF768D365266570.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6D32F231785FEA26541B55E3CF768D365266570.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 04:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:c5:7b:4c:f1:2f:22:8a:7a:9d:9e:f6:4b:43:a0:39:c5:16:3e:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6D32F231785FEA26541B55E3CF768D365266570
        Validity
            Not Before: Jan  4 12:01:25 2025 GMT
            Not After : Jan  3 12:06:25 2026 GMT
        Subject: CN=FEFF2ED8340D991C8440172B387F8EC40D91697C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c5:11:83:15:2e:ec:ea:fd:01:4e:a3:67:26:
                    bd:b7:e3:13:87:6a:4b:35:89:8a:da:9c:cb:9b:da:
                    44:0a:c7:cd:d6:94:f1:ca:27:8a:e8:d5:b6:47:b5:
                    80:29:82:02:44:1a:7c:88:10:f9:eb:31:24:7d:32:
                    5a:41:22:ae:38:5c:af:98:3a:1b:d6:25:32:9f:5b:
                    3e:37:9c:ed:71:f4:84:bc:34:3a:08:b7:b5:3c:e1:
                    45:e4:80:8e:24:dd:ed:04:56:64:67:56:e8:56:76:
                    f2:31:ae:f8:48:93:50:61:1c:12:4f:ed:98:2f:21:
                    ec:bc:b5:01:60:a9:c4:73:79:44:08:a0:05:02:b2:
                    22:89:7e:4c:61:25:a4:cf:01:2a:7b:67:8a:87:ee:
                    82:89:1b:60:27:89:62:51:96:36:ac:f7:48:f5:b6:
                    ce:6b:9c:b7:6e:4b:9c:44:04:60:0b:87:a8:09:32:
                    b1:c1:f2:a1:f6:9e:22:c7:cb:4d:17:56:fe:08:f4:
                    aa:c8:23:c1:63:d5:09:10:35:71:dd:35:0e:7a:1e:
                    39:b6:df:94:b0:36:8b:7e:9c:9a:50:1c:9c:87:2a:
                    60:d9:c2:f7:c0:e1:03:b9:45:c1:a5:4b:54:74:55:
                    5f:d2:bb:cd:dc:74:54:b4:91:7e:95:d2:7b:4d:20:
                    8a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:FF:2E:D8:34:0D:99:1C:84:40:17:2B:38:7F:8E:C4:0D:91:69:7C
            X509v3 Authority Key Identifier:
                keyid:C6:D3:2F:23:17:85:FE:A2:65:41:B5:5E:3C:F7:68:D3:65:26:65:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/C6D32F231785FEA26541B55E3CF768D365266570.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6D32F231785FEA26541B55E3CF768D365266570.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/3136342e3136332e3130382e302f32342d3234203d3e20323635393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:56:a4:c8:18:25:5a:39:26:d4:e5:45:cb:8d:56:78:3f:da:
         cb:d4:53:e1:d7:7b:ed:29:dc:07:81:c9:18:a4:c9:c6:28:48:
         2d:24:56:d0:4e:8c:01:e7:3f:f7:9b:99:49:3e:90:fc:7f:42:
         cc:42:cf:21:f4:9f:af:df:48:ba:f6:38:a4:ea:00:75:78:61:
         bd:5a:89:47:86:d2:76:83:0f:d4:02:b3:2c:4f:bf:f2:cb:91:
         66:17:1d:e9:3d:be:ff:04:91:57:38:92:19:66:22:4d:af:d3:
         48:dd:32:18:80:1d:00:53:2f:98:45:de:b9:6f:ff:6d:1e:f9:
         7e:0a:20:a4:f5:42:10:6d:2b:58:00:e7:0a:ad:75:cd:b6:7a:
         8e:8a:02:77:1e:e0:73:74:ab:70:35:7c:ee:bd:48:12:93:a1:
         62:c9:51:64:6c:6f:6c:50:43:e9:f9:57:d0:d0:61:07:97:e4:
         2b:06:e6:ad:31:f9:ad:0e:f6:28:35:c3:06:cf:4d:47:15:62:
         f5:86:6d:bc:aa:f9:74:57:02:52:ea:6e:6f:0d:c9:7c:ac:83:
         cf:fb:e8:b6:cf:99:ee:63:24:ad:2e:df:4c:a8:ba:9e:6c:43:
         89:93:17:7c:8c:19:4e:9d:6d:ba:1e:79:f9:0c:5a:a9:49:0d:
         44:0f:a5:d9
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUd8V7TPEvIop6nZ72S0OgOcUWPqEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzZEMzJGMjMxNzg1RkVBMjY1NDFCNTVFM0NGNzY4RDM2
NTI2NjU3MDAeFw0yNTAxMDQxMjAxMjVaFw0yNjAxMDMxMjA2MjVaMDMxMTAvBgNV
BAMTKEZFRkYyRUQ4MzQwRDk5MUM4NDQwMTcyQjM4N0Y4RUM0MEQ5MTY5N0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChxRGDFS7s6v0BTqNnJr234xOH
aks1iYranMub2kQKx83WlPHKJ4ro1bZHtYApggJEGnyIEPnrMSR9MlpBIq44XK+Y
OhvWJTKfWz43nO1x9IS8NDoIt7U84UXkgI4k3e0EVmRnVuhWdvIxrvhIk1BhHBJP
7ZgvIey8tQFgqcRzeUQIoAUCsiKJfkxhJaTPASp7Z4qH7oKJG2AniWJRljas90j1
ts5rnLduS5xEBGALh6gJMrHB8qH2niLHy00XVv4I9KrII8Fj1QkQNXHdNQ56Hjm2
35SwNot+nJpQHJyHKmDZwvfA4QO5RcGlS1R0VV/Su83cdFS0kX6V0ntNIIr1AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU/v8u2DQNmRyEQBcrOH+OxA2RaXwwHwYDVR0j
BBgwFoAUxtMvIxeF/qJlQbVePPdo02UmZXAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnk1UTlDOUx3ZnJlU0xrSzhYc01GN3hBanc1aDlLcWp5Ym1OVnZQd2c0
dUMvMC9DNkQzMkYyMzE3ODVGRUEyNjU0MUI1NUUzQ0Y3NjhEMzY1MjY2NTcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M2RDMyRjIzMTc4NUZFQTI2
NTQxQjU1RTNDRjc2OEQzNjUyNjY1NzAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ5NVE5QzlMd2ZyZVNMa0s4WHNNRjd4QWp3NWg5S3FqeWJtTlZ2UHdnNHVDLzAv
MzEzNjM0MmUzMTM2MzMyZTMxMzAzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTM5MzUzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKSjbDANBgkqhkiG9w0BAQsFAAOCAQEAtlak
yBglWjkm1OVFy41WeD/ay9RT4dd77SncB4HJGKTJxihILSRW0E6MAec/95uZST6Q
/H9CzELPIfSfr99IuvY4pOoAdXhhvVqJR4bSdoMP1AKzLE+/8suRZhcd6T2+/wSR
VziSGWYiTa/TSN0yGIAdAFMvmEXeuW//bR75fgogpPVCEG0rWADnCq11zbZ6jooC
dx7gc3SrcDV87r1IEpOhYslRZGxvbFBD6flX0NBhB5fkKwbmrTH5rQ72KDXDBs9N
RxVi9YZtvKr5dFcCUupubw3JfKyDz/vots+Z7mMkrS7fTKi6nmxDiZMXfIwZTp1t
uh55+QxaqUkNRA+l2Q==
-----END CERTIFICATE-----
Generated at Sun Apr 13 15:58:43 2025 by rpki-client