Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/3137302e3234362e3138392e302f32342d3234203d3e20323634303031.roa
File:                     3137302e3234362e3138392e302f32342d3234203d3e20323634303031.roa (raw, json)
Hash identifier:          gmjlGrOWTYzWdjsCNPHMsjrsZVsElPjU7ipxCGhhjO0=
Subject key identifier:   69:F8:F4:A0:8E:DA:43:EC:2D:6E:25:70:EC:77:E6:EE:B2:6E:3A:86
Certificate issuer:       /CN=E4E679E110DA011F952FB409E81E8EC81BAE43EF
Certificate serial:       71FC22BD857EC5D455A4280C660806C487D80508
Authority key identifier: E4:E6:79:E1:10:DA:01:1F:95:2F:B4:09:E8:1E:8E:C8:1B:AE:43:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/3137302e3234362e3138392e302f32342d3234203d3e20323634303031.roa
Signing time:             Thu 06 Mar 2025 11:17:52 +0000
ROA not before:           Thu 06 Mar 2025 11:12:52 +0000
ROA not after:            Thu 05 Mar 2026 11:17:52 +0000
asID:                     264001
IP address blocks:        170.246.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.crl
                          rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 12:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:fc:22:bd:85:7e:c5:d4:55:a4:28:0c:66:08:06:c4:87:d8:05:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4E679E110DA011F952FB409E81E8EC81BAE43EF
        Validity
            Not Before: Mar  6 11:12:52 2025 GMT
            Not After : Mar  5 11:17:52 2026 GMT
        Subject: CN=69F8F4A08EDA43EC2D6E2570EC77E6EEB26E3A86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:38:e5:66:ab:18:bc:f4:e4:16:ce:30:7a:a8:
                    6f:ec:33:8e:42:2f:37:4f:bc:95:07:01:45:bb:f5:
                    68:c7:fd:5c:ea:39:ac:92:79:f2:62:25:c4:84:bb:
                    e4:b9:20:67:2b:fc:80:df:7c:e0:02:f5:3e:27:87:
                    15:71:1c:18:77:fc:3d:a4:4c:aa:1a:ad:05:08:3a:
                    3d:4b:e0:cf:92:e9:da:55:41:01:df:6f:18:6a:bf:
                    54:9a:d7:85:43:5c:96:68:21:3c:8e:d2:42:70:b7:
                    ac:70:ae:ef:8a:56:3a:cf:27:9b:93:ce:47:51:10:
                    fc:ab:1d:60:0d:e3:fa:1a:78:4b:b2:5c:c9:ab:b2:
                    61:ad:9e:cf:88:eb:67:a9:25:d0:ed:81:96:66:65:
                    c7:d3:77:d3:20:3d:ea:4f:47:d9:e5:c5:22:88:66:
                    22:91:b7:b7:11:39:b6:ad:53:f9:87:bd:27:4d:df:
                    8e:ed:47:c1:5c:8f:99:f5:c7:4b:f6:3f:43:12:00:
                    f4:47:64:a8:d3:cd:17:f6:02:2a:91:82:d0:c9:8c:
                    4a:f6:f6:d7:45:5b:c3:6e:13:e3:3b:75:2a:9d:4b:
                    2f:d6:58:b7:92:8c:b6:20:2b:e7:8b:5a:d0:5d:2d:
                    6c:08:b7:5a:ff:cb:59:30:55:ae:34:13:e7:25:5c:
                    18:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:F8:F4:A0:8E:DA:43:EC:2D:6E:25:70:EC:77:E6:EE:B2:6E:3A:86
            X509v3 Authority Key Identifier:
                keyid:E4:E6:79:E1:10:DA:01:1F:95:2F:B4:09:E8:1E:8E:C8:1B:AE:43:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/3137302e3234362e3138392e302f32342d3234203d3e20323634303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:ff:5d:25:ee:15:94:c1:1e:1b:7a:d1:07:02:b4:b0:d0:bb:
         d9:1e:58:14:3e:8e:f2:eb:dd:cd:87:a2:4a:39:99:e7:d7:7d:
         00:39:9f:65:16:93:95:e3:25:3c:53:22:20:25:35:0a:71:1f:
         1b:28:32:58:f4:87:4c:f0:71:b7:8d:e4:7e:bc:e9:0d:ad:39:
         92:77:0d:cc:b6:61:fe:d5:59:7a:82:22:bd:1d:66:9f:65:fd:
         66:2d:be:58:31:86:44:65:70:74:26:67:6e:af:c7:16:65:bf:
         49:58:4f:93:a3:3e:29:63:87:90:a7:7e:05:dc:a9:19:fa:9a:
         c1:d2:46:3b:30:97:9d:11:22:04:9b:16:10:e2:19:0a:2c:93:
         d3:be:87:c6:32:a7:bf:86:a6:d1:8b:d1:82:11:29:54:d5:a9:
         3d:4a:22:11:08:71:a2:de:18:c9:49:6e:80:20:c3:6c:f5:ae:
         d9:9d:d8:20:15:39:06:67:23:98:16:5f:78:9d:ba:4e:ad:3c:
         73:3d:c6:b4:f7:2d:18:dc:2b:12:33:07:ca:11:11:43:1f:64:
         f1:9a:d1:87:dd:01:9d:fd:ec:b5:c1:af:8d:09:c5:ec:71:30:
         ce:80:9d:97:fb:59:10:8f:d0:90:1b:ca:38:c8:99:8f:cd:b1:
         ef:a5:70:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:33:30 2025 by rpki-client