Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/3137302e37382e302e302f32322d3332203d3e20323635343931.roa
File:                     3137302e37382e302e302f32322d3332203d3e20323635343931.roa (raw, json)
Hash identifier:          ChiOXPKilMHzZRgXLY8WhHSR7AS5lqw2xebMlC1pftY=
Subject key identifier:   03:F3:9E:FE:FB:57:4E:3D:B6:3F:85:03:7E:C5:24:41:06:3C:F7:F2
Certificate issuer:       /CN=C7C6B78C5511FBE3CD82900F0C9ABDE6A9E43C61
Certificate serial:       6A28D4B9ECC4A0E4422DB7820948ADED212D46A4
Authority key identifier: C7:C6:B7:8C:55:11:FB:E3:CD:82:90:0F:0C:9A:BD:E6:A9:E4:3C:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7C6B78C5511FBE3CD82900F0C9ABDE6A9E43C61.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/3137302e37382e302e302f32322d3332203d3e20323635343931.roa
Signing time:             Wed 11 Sep 2024 13:38:18 +0000
ROA not before:           Wed 11 Sep 2024 13:33:18 +0000
ROA not after:            Wed 10 Sep 2025 13:38:18 +0000
asID:                     265491
IP address blocks:        170.78.0.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/C7C6B78C5511FBE3CD82900F0C9ABDE6A9E43C61.crl
                          rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/C7C6B78C5511FBE3CD82900F0C9ABDE6A9E43C61.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7C6B78C5511FBE3CD82900F0C9ABDE6A9E43C61.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 04:42:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:28:d4:b9:ec:c4:a0:e4:42:2d:b7:82:09:48:ad:ed:21:2d:46:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7C6B78C5511FBE3CD82900F0C9ABDE6A9E43C61
        Validity
            Not Before: Sep 11 13:33:18 2024 GMT
            Not After : Sep 10 13:38:18 2025 GMT
        Subject: CN=03F39EFEFB574E3DB63F85037EC52441063CF7F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b9:b9:ae:52:07:28:9e:c3:61:07:cf:be:c0:
                    a6:0f:7b:02:01:be:9e:eb:ab:8e:b7:aa:cd:12:da:
                    58:c6:f4:ba:6e:53:31:be:9c:bf:0f:78:73:7c:d0:
                    55:4c:32:d3:f4:74:8c:ea:58:59:5f:41:27:a1:70:
                    5d:d0:3d:f4:e8:7b:b1:f6:b6:99:07:91:13:7f:4e:
                    c2:65:9d:41:3e:3d:c6:18:d5:40:9a:a2:ff:27:ea:
                    a3:5d:85:98:26:cd:55:7b:ba:2b:57:2b:36:40:3e:
                    6e:bb:7d:92:8e:3c:88:6c:e7:02:91:53:ac:61:1e:
                    50:5d:9f:d8:0e:31:50:ca:ad:34:9d:2f:59:1e:cf:
                    e3:3a:b6:be:cb:b7:50:1a:06:48:9a:8a:b4:8d:94:
                    e5:30:3e:87:27:4c:5a:b9:b4:b2:3b:f1:06:b2:f1:
                    96:0a:7f:10:a3:c7:aa:70:01:db:d4:e4:ea:21:75:
                    cd:20:4b:45:1b:e9:17:52:e7:95:9e:68:cb:54:f1:
                    2d:e1:e0:f1:3f:e2:4f:4f:fd:3f:c2:d9:fe:47:8c:
                    22:8f:07:22:80:13:32:74:71:94:3a:7b:fd:df:91:
                    79:18:31:c6:d2:e1:aa:16:38:77:dc:7b:e7:96:b0:
                    8d:ee:8c:b4:55:63:02:38:75:14:00:15:43:3b:97:
                    77:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F3:9E:FE:FB:57:4E:3D:B6:3F:85:03:7E:C5:24:41:06:3C:F7:F2
            X509v3 Authority Key Identifier:
                keyid:C7:C6:B7:8C:55:11:FB:E3:CD:82:90:0F:0C:9A:BD:E6:A9:E4:3C:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/C7C6B78C5511FBE3CD82900F0C9ABDE6A9E43C61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7C6B78C5511FBE3CD82900F0C9ABDE6A9E43C61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/3137302e37382e302e302f32322d3332203d3e20323635343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:2a:c5:87:98:24:14:0a:cc:60:e2:9f:ed:20:7e:ee:71:59:
         2c:1e:be:f4:a4:20:f9:b1:fe:70:34:86:30:43:28:ce:c3:fa:
         d5:94:5b:ef:8f:d0:59:1f:32:28:81:92:18:ee:a8:f0:b5:6e:
         29:32:39:37:d4:41:0d:64:f2:d0:97:22:15:51:50:86:23:22:
         a0:c6:25:81:0b:87:60:fc:db:27:9b:e1:c4:1f:0c:15:46:05:
         d2:8e:3d:5a:ca:e3:da:a5:0f:d7:30:86:37:1a:00:cf:aa:82:
         22:b3:61:0b:0d:34:a4:6a:c7:b0:93:4d:bd:c1:d1:5e:66:49:
         06:d4:b8:c9:d8:c1:38:e3:4c:83:e8:4e:3b:20:a3:8d:aa:bf:
         59:a6:24:49:3d:f6:5d:5a:d0:8e:e9:5d:2c:8a:e5:66:2f:c4:
         be:c0:99:aa:18:1e:62:59:50:4a:f0:24:a1:c3:48:b9:3f:06:
         f4:1d:e5:3f:0b:1e:09:a3:e3:70:77:a4:56:ec:ac:6d:a0:bf:
         72:18:79:c5:bb:ea:ae:f2:d6:b6:24:b9:8a:d2:00:18:96:65:
         1d:2e:9f:d6:5c:1d:ff:f9:3f:97:aa:2b:50:03:a7:6b:9a:ef:
         14:7e:6b:d4:f0:ae:f7:3a:43:a5:a1:8e:ed:43:33:b5:33:7d:
         38:4c:f5:54
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUaijUuezEoORCLbeCCUit7SEtRqQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzdDNkI3OEM1NTExRkJFM0NEODI5MDBGMEM5QUJERTZB
OUU0M0M2MTAeFw0yNDA5MTExMzMzMThaFw0yNTA5MTAxMzM4MThaMDMxMTAvBgNV
BAMTKDAzRjM5RUZFRkI1NzRFM0RCNjNGODUwMzdFQzUyNDQxMDYzQ0Y3RjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAubmuUgconsNhB8++wKYPewIB
vp7rq463qs0S2ljG9LpuUzG+nL8PeHN80FVMMtP0dIzqWFlfQSehcF3QPfToe7H2
tpkHkRN/TsJlnUE+PcYY1UCaov8n6qNdhZgmzVV7uitXKzZAPm67fZKOPIhs5wKR
U6xhHlBdn9gOMVDKrTSdL1kez+M6tr7Lt1AaBkiairSNlOUwPocnTFq5tLI78Qay
8ZYKfxCjx6pwAdvU5Oohdc0gS0Ub6RdS55WeaMtU8S3h4PE/4k9P/T/C2f5HjCKP
ByKAEzJ0cZQ6e/3fkXkYMcbS4aoWOHfce+eWsI3ujLRVYwI4dRQAFUM7l3dHAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUA/Oe/vtXTj22P4UDfsUkQQY89/IwHwYDVR0j
BBgwFoAUx8a3jFUR++PNgpAPDJq95qnkPGEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFF2UHg0UHpyTHRac1ZaYUo3RHBLM0Y4UkZWclNiUWpxY3FROXg3MjJl
dUQvMC9DN0M2Qjc4QzU1MTFGQkUzQ0Q4MjkwMEYwQzlBQkRFNkE5RTQzQzYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M3QzZCNzhDNTUxMUZCRTND
RDgyOTAwRjBDOUFCREU2QTlFNDNDNjEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhRdlB4NFB6ckx0WnNWWmFKN0RwSzNGOFJGVnJTYlFqcWNxUTl4NzIyZXVELzAv
MzEzNzMwMmUzNzM4MmUzMDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMyMzYzNTM0
MzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAqpOADANBgkqhkiG9w0BAQsFAAOCAQEAmirFh5gkFArM
YOKf7SB+7nFZLB6+9KQg+bH+cDSGMEMozsP61ZRb74/QWR8yKIGSGO6o8LVuKTI5
N9RBDWTy0JciFVFQhiMioMYlgQuHYPzbJ5vhxB8MFUYF0o49Wsrj2qUP1zCGNxoA
z6qCIrNhCw00pGrHsJNNvcHRXmZJBtS4ydjBOONMg+hOOyCjjaq/WaYkST32XVrQ
juldLIrlZi/EvsCZqhgeYllQSvAkocNIuT8G9B3lPwseCaPjcHekVuysbaC/chh5
xbvqrvLWtiS5itIAGJZlHS6f1lwd//k/l6orUAOna5rvFH5r1PCu9zpDpaGO7UMz
tTN9OEz1VA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:57 2024 by rpki-client on console-fra.rpki-client.org