Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/34352e3137392e3130362e302f32332d3234203d3e20323731303234.roa
File:                     34352e3137392e3130362e302f32332d3234203d3e20323731303234.roa (raw, json)
Hash identifier:          5EjfMf4KxyWlNsMGlJvu26qX/Qos07VTS7AOE6/ZL6E=
Subject key identifier:   6B:1A:D9:07:0D:5F:6A:70:76:77:7E:B9:58:27:1A:D9:3C:3F:DF:C1
Certificate issuer:       /CN=66FDB876CBA2E3E1C1208045E990B39BD097EBCF
Certificate serial:       70A11806FA08854CD43D0A0E34ADC173C231F46B
Authority key identifier: 66:FD:B8:76:CB:A2:E3:E1:C1:20:80:45:E9:90:B3:9B:D0:97:EB:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/34352e3137392e3130362e302f32332d3234203d3e20323731303234.roa
Signing time:             Thu 24 Jul 2025 14:06:39 +0000
ROA not before:           Thu 24 Jul 2025 14:01:39 +0000
ROA not after:            Thu 23 Jul 2026 14:06:39 +0000
asID:                     271024
IP address blocks:        45.179.106.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.crl
                          rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 11:41:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:a1:18:06:fa:08:85:4c:d4:3d:0a:0e:34:ad:c1:73:c2:31:f4:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66FDB876CBA2E3E1C1208045E990B39BD097EBCF
        Validity
            Not Before: Jul 24 14:01:39 2025 GMT
            Not After : Jul 23 14:06:39 2026 GMT
        Subject: CN=6B1AD9070D5F6A7076777EB958271AD93C3FDFC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:65:ac:d9:b1:3d:60:ba:0f:f5:47:e8:95:60:
                    1f:d3:49:c8:68:ef:aa:a0:50:d3:b2:3a:91:ee:f3:
                    95:86:92:52:5c:d3:9e:81:17:a7:a4:be:b4:83:2f:
                    c9:4c:0d:3d:ff:68:9f:cf:06:2a:82:d9:44:60:a0:
                    db:69:45:c9:b2:95:e3:8b:29:02:17:e3:53:06:ea:
                    09:3a:df:20:df:dc:15:09:cb:b9:ff:bc:71:c7:7e:
                    a6:47:4b:8d:66:6f:82:8e:c6:a1:fd:50:a2:d7:6f:
                    a7:ba:02:dd:c5:0e:ff:4c:d0:76:70:77:31:c4:70:
                    6e:b3:7f:31:e2:c4:34:08:4c:7c:ba:f9:c8:bd:61:
                    a4:0e:8a:a1:67:33:8d:01:e5:1e:25:a8:81:ed:7f:
                    d0:e1:36:83:4e:d2:61:24:97:f0:da:88:95:9b:e4:
                    1c:49:9b:e3:7a:d1:b9:fc:59:d7:b6:06:e1:f4:d7:
                    43:1e:5c:10:1e:37:1e:d9:41:9a:5d:da:53:b3:23:
                    a8:0a:f2:1f:5a:f7:91:7d:a1:06:ae:17:a0:c4:5c:
                    8a:fe:6f:2b:0f:47:f7:ff:cf:8d:c2:66:a1:92:fd:
                    51:fd:cd:5e:95:e2:62:9c:e3:7e:2a:bf:ce:95:34:
                    cf:ae:7b:4f:28:96:15:a8:a6:e7:88:bf:d8:06:4d:
                    ae:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:1A:D9:07:0D:5F:6A:70:76:77:7E:B9:58:27:1A:D9:3C:3F:DF:C1
            X509v3 Authority Key Identifier:
                keyid:66:FD:B8:76:CB:A2:E3:E1:C1:20:80:45:E9:90:B3:9B:D0:97:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/34352e3137392e3130362e302f32332d3234203d3e20323731303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:01:06:05:12:2c:8d:63:36:ca:88:40:2f:9f:ca:b4:97:c9:
         16:47:a1:44:3a:e6:4a:6f:a6:af:01:40:76:49:30:38:4a:85:
         82:8f:17:d3:d7:a1:1f:91:4f:79:11:7b:4b:b6:a3:34:60:e9:
         b5:16:ab:bc:a5:62:f2:b3:19:25:8d:35:30:db:e2:00:be:b1:
         a3:0c:99:8e:bb:08:ba:f6:f6:95:91:7a:3c:04:5b:e2:be:97:
         98:52:c9:c7:2b:55:60:14:53:1c:95:d1:47:53:cf:85:35:38:
         81:47:a7:44:70:34:dc:73:e0:d6:1a:a8:e2:b9:88:16:21:35:
         4f:e8:d6:26:e7:86:f2:87:4e:90:2b:4b:6b:cb:82:83:47:1d:
         37:5e:9a:59:bf:14:85:3e:4a:5d:38:28:e7:78:f3:f8:ef:ab:
         e6:97:63:7e:de:3e:d5:85:1c:73:08:80:d0:c3:e5:7c:c9:ad:
         8b:52:8f:4c:6d:f8:e4:f2:1c:f4:82:5a:f7:6b:bf:00:81:cf:
         95:9a:df:7c:f3:05:29:7f:70:54:3f:0b:ef:9a:43:34:4e:4c:
         84:9d:68:00:5f:4f:89:7d:84:f5:55:40:6e:0d:47:f1:5f:88:
         a1:ed:e6:dd:b8:16:3a:ba:b6:9a:fc:97:0e:13:17:f4:3e:56:
         bc:50:97:ae
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcKEYBvoIhUzUPQoONK3Bc8Ix9GswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjZGREI4NzZDQkEyRTNFMUMxMjA4MDQ1RTk5MEIzOUJE
MDk3RUJDRjAeFw0yNTA3MjQxNDAxMzlaFw0yNjA3MjMxNDA2MzlaMDMxMTAvBgNV
BAMTKDZCMUFEOTA3MEQ1RjZBNzA3Njc3N0VCOTU4MjcxQUQ5M0MzRkRGQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcZazZsT1gug/1R+iVYB/TScho
76qgUNOyOpHu85WGklJc056BF6ekvrSDL8lMDT3/aJ/PBiqC2URgoNtpRcmyleOL
KQIX41MG6gk63yDf3BUJy7n/vHHHfqZHS41mb4KOxqH9UKLXb6e6At3FDv9M0HZw
dzHEcG6zfzHixDQITHy6+ci9YaQOiqFnM40B5R4lqIHtf9DhNoNO0mEkl/DaiJWb
5BxJm+N60bn8Wde2BuH010MeXBAeNx7ZQZpd2lOzI6gK8h9a95F9oQauF6DEXIr+
bysPR/f/z43CZqGS/VH9zV6V4mKc434qv86VNM+ue08olhWopueIv9gGTa4zAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUaxrZBw1fanB2d365WCca2Tw/38EwHwYDVR0j
BBgwFoAUZv24dsui4+HBIIBF6ZCzm9CX688wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmFSemFIcWo3RmI5NzFkQTdoY3BFdkxiVndDWXUyTkttOFZDVjZMdzE4
cHIvMC82NkZEQjg3NkNCQTJFM0UxQzEyMDgwNDVFOTkwQjM5QkQwOTdFQkNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY2RkRCODc2Q0JBMkUzRTFD
MTIwODA0NUU5OTBCMzlCRDA5N0VCQ0YuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZhUnphSHFqN0ZiOTcxZEE3aGNwRXZMYlZ3Q1l1Mk5LbThWQ1Y2THcxOHByLzAv
MzQzNTJlMzEzNzM5MmUzMTMwMzYyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM3
MzEzMDMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEts2owDQYJKoZIhvcNAQELBQADggEBAFQBBgUS
LI1jNsqIQC+fyrSXyRZHoUQ65kpvpq8BQHZJMDhKhYKPF9PXoR+RT3kRe0u2ozRg
6bUWq7ylYvKzGSWNNTDb4gC+saMMmY67CLr29pWRejwEW+K+l5hSyccrVWAUUxyV
0UdTz4U1OIFHp0RwNNxz4NYaqOK5iBYhNU/o1ibnhvKHTpArS2vLgoNHHTdemlm/
FIU+Sl04KOd48/jvq+aXY37ePtWFHHMIgNDD5XzJrYtSj0xt+OTyHPSCWvdrvwCB
z5Wa33zzBSl/cFQ/C++aQzROTISdaABfT4l9hPVVQG4NR/FfiKHt5t24Fjq6tpr8
lw4TF/Q+VrxQl64=
-----END CERTIFICATE-----
Generated at Sun Aug 10 18:22:30 2025 by rpki-client