Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/1/3137302e3234342e3133342e302f32342d3234203d3e20323633303738.roa
File:                     3137302e3234342e3133342e302f32342d3234203d3e20323633303738.roa (raw, json)
Hash identifier:          QVeOq51J7RoqGDYxybgAJUA6kYp5f3A+WWUBxF8bzm0=
Subject key identifier:   9D:69:C1:A1:9F:D3:ED:23:9C:B4:A2:06:3F:5C:E7:75:FE:B0:0E:2B
Certificate issuer:       /CN=6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB
Certificate serial:       1203D0B8E2E748A1E44566B16CE6EA7EA1A9E4C6
Authority key identifier: 6F:27:B1:96:7A:21:FD:A5:DE:37:AB:7C:FA:6D:85:CD:47:B0:A1:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/1/3137302e3234342e3133342e302f32342d3234203d3e20323633303738.roa
Signing time:             Thu 06 Mar 2025 18:50:28 +0000
ROA not before:           Thu 06 Mar 2025 18:45:28 +0000
ROA not after:            Thu 05 Mar 2026 18:50:28 +0000
asID:                     263078
IP address blocks:        170.244.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/1/6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB.crl
                          rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/1/6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 00:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:03:d0:b8:e2:e7:48:a1:e4:45:66:b1:6c:e6:ea:7e:a1:a9:e4:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB
        Validity
            Not Before: Mar  6 18:45:28 2025 GMT
            Not After : Mar  5 18:50:28 2026 GMT
        Subject: CN=9D69C1A19FD3ED239CB4A2063F5CE775FEB00E2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:18:3f:20:c6:56:1b:ac:68:58:18:f4:12:33:
                    a5:e6:59:2f:9d:03:b7:7c:1e:f4:3f:52:8a:83:54:
                    e9:5b:96:55:10:82:dc:8a:d9:1d:32:da:b2:21:7b:
                    1a:a9:26:07:a3:7f:48:de:2d:c4:3d:07:67:e6:0e:
                    9f:4f:a9:85:03:f1:dd:4a:e6:35:b6:fd:53:41:ac:
                    74:8e:1e:b1:53:c6:b4:63:30:3b:c2:53:37:56:88:
                    ca:26:7b:ab:dc:d6:e3:6d:bd:83:be:da:b4:86:95:
                    cf:fe:f0:17:81:84:12:75:30:84:2c:4c:41:89:01:
                    b6:52:e7:9f:9c:2b:ba:b9:9a:a0:a0:1d:e9:83:96:
                    b8:4f:c9:91:7e:5c:ec:a3:6a:84:9a:92:a5:6d:69:
                    83:44:f0:93:e4:c3:14:b6:ca:a5:bf:54:8c:3a:13:
                    3d:93:7e:42:54:af:16:f0:a9:0c:31:f6:23:f8:52:
                    d5:86:dc:d3:e9:49:41:e1:07:75:6e:fd:3a:6b:5a:
                    a5:00:9c:63:c4:a3:71:8b:05:0f:ea:1e:9d:7a:6c:
                    0c:83:53:e2:16:37:10:33:f5:cc:4a:79:4b:01:1d:
                    02:13:e8:6c:b0:ba:97:13:2a:fe:4c:a3:ff:15:c6:
                    c6:f0:a6:25:5a:6d:d3:a1:13:cd:2d:c5:ff:40:27:
                    71:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:69:C1:A1:9F:D3:ED:23:9C:B4:A2:06:3F:5C:E7:75:FE:B0:0E:2B
            X509v3 Authority Key Identifier:
                keyid:6F:27:B1:96:7A:21:FD:A5:DE:37:AB:7C:FA:6D:85:CD:47:B0:A1:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/1/6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/1/3137302e3234342e3133342e302f32342d3234203d3e20323633303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:c8:c4:b2:06:0e:45:27:7e:7a:5a:04:d3:1c:44:16:59:af:
         66:17:e6:b3:f6:e4:71:7b:93:e6:f9:53:ee:b4:d6:29:ef:9d:
         c2:04:a1:04:26:04:08:b0:67:fc:e0:1e:a9:5e:69:d4:4a:5f:
         b5:2d:99:20:64:c4:ef:14:79:76:3b:dc:4b:e3:39:39:bc:05:
         02:de:db:23:eb:80:d9:3a:6c:3f:6b:c3:70:46:cc:b2:12:c4:
         8d:77:23:5d:4f:92:87:31:3a:85:4d:2e:8f:ac:96:05:04:84:
         f1:26:b2:25:5f:52:fe:d8:38:52:ce:07:e9:3d:01:5a:ed:93:
         86:24:1b:ed:d8:9a:2a:e7:b6:4e:37:cc:6e:7f:6b:aa:35:a6:
         96:d1:50:39:c2:6d:d2:c2:44:f0:f8:2b:cd:13:10:75:77:0b:
         3b:64:a3:06:03:aa:da:bf:6c:bf:cd:c6:7f:71:8c:73:25:1a:
         de:27:f0:7b:fa:f3:b6:ba:7a:47:2f:ef:38:e8:f4:a6:0d:fe:
         d1:79:54:bc:6e:f1:b4:68:7a:c6:0b:3d:4c:d9:ff:cb:1f:e0:
         b2:4c:90:b8:5e:b1:82:c6:bb:a5:58:e6:2f:a7:c1:64:d0:f6:
         bc:e1:19:ec:38:b8:55:19:d7:1c:d2:54:b7:ca:fc:98:30:9a:
         0d:7d:2a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:26:34 2025 by rpki-client