Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3137302e37382e3233322e302f32322d3332203d3e203232333831.roa
File:                     3137302e37382e3233322e302f32322d3332203d3e203232333831.roa (raw, json)
Hash identifier:          6rSXjp01yr3LW10uruhW43vdIVm10wsljO40GrpSOAo=
Subject key identifier:   6A:15:7C:0F:54:3A:56:84:41:B2:FC:C7:7A:5B:96:AB:82:02:73:52
Certificate issuer:       /CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
Certificate serial:       2B20F0F5A3331339D0559D860EC292EE4EEC59FD
Authority key identifier: 19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3137302e37382e3233322e302f32322d3332203d3e203232333831.roa
Signing time:             Fri 07 Mar 2025 19:10:19 +0000
ROA not before:           Fri 07 Mar 2025 19:05:19 +0000
ROA not after:            Fri 06 Mar 2026 19:10:19 +0000
asID:                     22381
IP address blocks:        170.78.232.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.crl
                          rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 10:53:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:20:f0:f5:a3:33:13:39:d0:55:9d:86:0e:c2:92:ee:4e:ec:59:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
        Validity
            Not Before: Mar  7 19:05:19 2025 GMT
            Not After : Mar  6 19:10:19 2026 GMT
        Subject: CN=6A157C0F543A568441B2FCC77A5B96AB82027352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:05:d8:17:8b:66:3d:06:02:b8:39:76:93:7c:
                    77:47:5d:f0:87:c3:79:15:24:d7:be:d0:00:37:f1:
                    9b:2b:7b:6a:f3:9f:9b:bc:01:2e:5e:50:5e:ee:8a:
                    fb:c0:e5:a0:45:1d:64:5e:c8:c8:ae:47:ca:f4:b6:
                    f4:ec:24:66:b6:6e:b0:6b:54:5e:1b:67:15:46:a2:
                    c2:a1:cd:41:69:7c:1a:01:09:34:37:a8:c8:48:6e:
                    f1:71:73:70:14:90:0d:f3:33:63:28:f7:f7:31:af:
                    e4:53:aa:d6:fc:05:02:3e:91:1b:93:dd:fb:ca:57:
                    e0:c7:cb:46:cf:2b:f3:cc:04:23:ce:fd:4d:34:56:
                    5c:9a:4d:3d:2d:92:c9:a4:ee:a9:ce:eb:8b:29:e8:
                    f5:8a:82:f2:3d:12:af:1a:c7:5c:33:f1:00:2c:51:
                    c1:1d:28:54:df:13:65:a1:85:d8:da:5b:4b:bb:45:
                    58:7a:53:57:4b:ff:92:ec:a0:ca:63:74:c6:6b:78:
                    15:8d:46:f6:5f:bc:a6:cf:e3:32:d4:12:c6:26:14:
                    d3:9c:cb:a4:1e:df:62:a0:9e:4e:48:02:f1:4d:60:
                    f8:66:2f:c4:6b:59:29:b5:2a:f5:2d:d2:f8:cf:94:
                    30:af:dd:a2:9a:e9:6b:aa:47:b3:ff:1b:67:b7:df:
                    3c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:15:7C:0F:54:3A:56:84:41:B2:FC:C7:7A:5B:96:AB:82:02:73:52
            X509v3 Authority Key Identifier:
                keyid:19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3137302e37382e3233322e302f32322d3332203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:8a:b1:20:5a:bb:26:bd:a9:04:01:6c:29:74:85:16:e1:36:
         cb:af:4c:d4:fa:11:23:0d:36:3b:ac:54:3d:6f:f2:58:b7:c8:
         20:8f:2e:1f:42:8e:96:16:bc:3b:f7:d1:c3:98:41:00:af:20:
         57:2d:6d:80:d6:a7:34:7d:a4:e5:78:d0:21:a5:e3:15:fa:43:
         e0:f8:89:d2:65:b5:c8:7a:4a:28:2b:1f:43:20:3b:d8:74:b3:
         a5:97:d2:6f:09:7a:b9:ac:bd:9f:e5:46:7c:61:f1:1c:9a:eb:
         33:fb:68:67:71:5e:21:bb:2e:7a:90:5a:4b:90:08:c8:64:c3:
         9e:e9:8b:d0:e4:8d:3f:61:9c:0b:d2:25:06:a9:ad:ba:77:55:
         bc:6d:01:7e:91:3a:3a:97:d3:b6:2d:a5:4f:ce:cd:72:3b:b2:
         63:ed:58:fe:bb:f8:e6:19:27:c9:80:04:a9:32:4f:9e:a1:c4:
         ea:ae:c3:b8:9c:aa:53:14:5e:8d:6d:ea:a0:56:e3:14:e3:a5:
         b8:6c:f2:ab:c0:e0:fe:e8:1a:88:af:3b:6d:3a:e1:0e:b6:0e:
         e6:55:56:3c:15:ac:5f:28:07:3e:0c:35:b2:f4:7f:49:7f:7e:
         a3:f7:4a:9d:68:7d:7c:5a:f4:8b:c8:6e:0c:5a:47:1a:3e:9b:
         54:72:7d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:41:44 2025 by rpki-client