Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/3137302e37382e3137362e302f32322d3234203d3e20323634333831.roa
File:                     3137302e37382e3137362e302f32322d3234203d3e20323634333831.roa (raw, json)
Hash identifier:          u48EbEQ/lSCeYe04IU/NtV4JNvW+Yne091vq6QJOja0=
Subject key identifier:   26:4E:91:47:0F:FD:5C:70:5A:99:7D:CD:0F:79:72:66:AE:0F:A0:61
Certificate issuer:       /CN=91C18D88BD49D07FD42CF259DD3F33070A6BE869
Certificate serial:       5884EBFAFEF9D250BDB3ABA66F85CEB477DC56FC
Authority key identifier: 91:C1:8D:88:BD:49:D0:7F:D4:2C:F2:59:DD:3F:33:07:0A:6B:E8:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/3137302e37382e3137362e302f32322d3234203d3e20323634333831.roa
Signing time:             Thu 06 Mar 2025 13:45:54 +0000
ROA not before:           Thu 06 Mar 2025 13:40:54 +0000
ROA not after:            Thu 05 Mar 2026 13:45:54 +0000
asID:                     264381
IP address blocks:        170.78.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.crl
                          rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 19:29:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:84:eb:fa:fe:f9:d2:50:bd:b3:ab:a6:6f:85:ce:b4:77:dc:56:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C18D88BD49D07FD42CF259DD3F33070A6BE869
        Validity
            Not Before: Mar  6 13:40:54 2025 GMT
            Not After : Mar  5 13:45:54 2026 GMT
        Subject: CN=264E91470FFD5C705A997DCD0F797266AE0FA061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:fb:a0:da:69:33:fe:f3:f4:29:94:07:a6:62:
                    f8:f7:94:1c:79:1c:b4:2a:74:29:9c:2e:8b:35:28:
                    2f:59:28:f7:b0:91:9e:86:c9:a6:70:7f:19:48:bd:
                    c4:fd:d7:fa:a0:2d:a6:e3:ca:91:e1:98:93:50:f2:
                    8c:77:df:cc:9f:91:aa:c8:77:1c:ec:11:ea:1f:df:
                    55:10:b7:e8:93:bb:e3:1b:6d:b4:e4:3b:8c:7e:15:
                    31:28:2a:f9:f0:8c:d7:61:d1:58:b9:e2:6e:9e:f1:
                    84:75:27:a0:a9:e2:49:e6:52:6d:c1:fe:50:2d:43:
                    c7:93:39:42:c5:72:93:e9:9c:c2:fb:50:3b:8d:bd:
                    da:e9:d1:aa:39:b6:7e:03:1d:d1:eb:b6:5d:fa:49:
                    76:3e:97:30:ff:25:b4:bd:9c:92:ad:f8:48:59:9b:
                    a5:ab:15:7a:e5:08:05:86:af:2c:9f:31:c0:53:f6:
                    1c:ed:26:c3:03:a0:da:0e:4c:ba:4c:02:fe:08:a0:
                    63:70:8f:cd:6c:2c:49:9b:d1:52:f7:8a:82:cd:cf:
                    4f:9b:3d:e2:2d:14:07:24:5d:11:0c:c6:78:7a:a5:
                    12:f5:13:be:6d:fe:a2:8f:7c:d7:a7:1d:58:31:ed:
                    1c:d1:4b:d2:92:16:6a:b4:fb:a3:59:fd:29:02:a4:
                    04:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:4E:91:47:0F:FD:5C:70:5A:99:7D:CD:0F:79:72:66:AE:0F:A0:61
            X509v3 Authority Key Identifier:
                keyid:91:C1:8D:88:BD:49:D0:7F:D4:2C:F2:59:DD:3F:33:07:0A:6B:E8:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/3137302e37382e3137362e302f32322d3234203d3e20323634333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:77:7b:d9:ec:7b:bd:34:1a:f5:8b:8f:0d:6d:c8:de:5f:f0:
         8a:e3:1c:63:87:24:ef:d0:b1:40:59:26:bb:5e:73:32:25:28:
         53:f8:38:08:f8:94:71:6c:9d:f1:9e:e1:6a:bb:b3:10:9f:d2:
         04:fa:4a:f7:79:61:c9:e8:61:9b:6c:3f:35:51:ba:5e:63:6d:
         a1:0f:7d:1f:16:b5:54:68:cc:46:e9:64:30:82:98:76:55:f2:
         02:24:24:6b:d9:52:2f:55:55:45:3e:89:a3:11:88:c4:dd:1e:
         5d:5e:c6:ef:e2:1b:af:f9:8a:96:82:8b:cd:10:1e:db:92:d3:
         8f:ec:e5:55:02:af:60:22:69:3c:15:42:d4:a6:ad:a8:02:68:
         33:83:b0:46:ef:29:c8:ff:3a:c1:74:28:69:d7:e3:1e:e2:38:
         e6:fd:02:e8:36:f4:45:45:cc:e7:9c:43:1f:46:f2:5a:6a:18:
         f1:d6:b2:77:3c:00:da:1d:99:f7:c2:f2:0f:77:2b:5f:1f:a8:
         b3:1c:3c:dc:15:4a:cb:32:f3:b2:fb:d5:3c:65:59:f4:13:d6:
         4f:c4:85:85:71:90:bd:26:30:17:aa:b7:07:d1:ba:f7:1f:05:
         67:21:b2:22:41:0a:8d:54:e6:65:84:dd:13:20:e3:8e:77:1f:
         3b:7c:b9:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 04:24:29 2025 by rpki-client