Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3137302e37382e3131362e302f32322d3332203d3e203532373833.roa
File:                     3137302e37382e3131362e302f32322d3332203d3e203532373833.roa (raw, json)
Hash identifier:          jv8kapc/ph/YpbHwtC/joiWEGc3ILUjuNy+hAFyt7EM=
Subject key identifier:   E0:36:3E:BB:3E:CB:A4:98:04:F4:96:CD:95:2B:9A:53:55:40:D6:DB
Certificate issuer:       /CN=3DDE2C96A736983C4145E6A74FA601EF275DE118
Certificate serial:       45CEA97B220429E05C791D9A9547F08FA83BBFAD
Authority key identifier: 3D:DE:2C:96:A7:36:98:3C:41:45:E6:A7:4F:A6:01:EF:27:5D:E1:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3137302e37382e3131362e302f32322d3332203d3e203532373833.roa
Signing time:             Thu 06 Mar 2025 22:51:15 +0000
ROA not before:           Thu 06 Mar 2025 22:46:15 +0000
ROA not after:            Thu 05 Mar 2026 22:51:15 +0000
asID:                     52783
IP address blocks:        170.78.116.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.crl
                          rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 24 Apr 2025 03:24:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:ce:a9:7b:22:04:29:e0:5c:79:1d:9a:95:47:f0:8f:a8:3b:bf:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DDE2C96A736983C4145E6A74FA601EF275DE118
        Validity
            Not Before: Mar  6 22:46:15 2025 GMT
            Not After : Mar  5 22:51:15 2026 GMT
        Subject: CN=E0363EBB3ECBA49804F496CD952B9A535540D6DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:99:44:36:ce:07:81:fc:7b:9a:b6:3d:00:78:
                    16:92:c0:98:42:a8:51:79:b7:06:c3:34:ee:42:e0:
                    12:ec:8c:19:6f:27:59:d2:89:82:75:c1:67:77:94:
                    f7:35:1a:86:ef:31:54:6e:00:af:e4:c5:3e:13:0b:
                    86:51:da:59:b5:81:96:1c:f8:52:36:1d:46:dd:4e:
                    32:b5:75:9a:5a:98:24:d8:03:9b:90:29:cb:83:a6:
                    ec:0f:d0:b6:d4:e2:c6:35:7a:89:5b:44:ec:65:c9:
                    5b:75:5e:ac:4b:e3:e1:a5:ca:a1:d5:d3:a1:41:f0:
                    15:51:cc:88:dc:00:b7:b8:f6:a6:fa:5d:a7:88:4f:
                    3c:57:ff:c5:c4:86:9d:b7:cf:cf:60:a7:10:f0:65:
                    ec:c2:68:12:d4:39:ae:b7:38:84:69:d3:fb:90:80:
                    5f:b2:86:cf:b9:c5:2f:65:d9:08:d0:a7:16:61:25:
                    66:b7:14:e3:f8:9e:d9:86:aa:f8:6c:43:df:5e:15:
                    82:08:12:a2:74:e9:9d:14:d7:11:de:1d:7f:e7:41:
                    d3:e5:c4:24:54:12:69:96:28:9d:1a:f5:50:7c:fa:
                    0b:0d:5d:e4:fd:60:0c:6a:10:70:78:bf:29:d7:1e:
                    da:a0:30:e7:3e:47:ac:05:1d:15:64:33:df:c7:2b:
                    81:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:36:3E:BB:3E:CB:A4:98:04:F4:96:CD:95:2B:9A:53:55:40:D6:DB
            X509v3 Authority Key Identifier:
                keyid:3D:DE:2C:96:A7:36:98:3C:41:45:E6:A7:4F:A6:01:EF:27:5D:E1:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3137302e37382e3131362e302f32322d3332203d3e203532373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:d8:46:42:85:10:e5:11:1e:00:91:a1:92:38:dc:4b:dc:7b:
         25:6a:09:9e:70:c4:69:79:8f:a6:39:af:2b:c5:db:c5:f3:6b:
         03:81:32:fd:07:e5:68:6f:47:e4:87:c6:a4:0b:dd:68:5c:97:
         8f:58:70:39:21:3f:8f:cb:3a:1d:96:e7:c6:ce:2d:ea:f1:a4:
         54:4e:25:2e:8f:99:60:85:f6:b5:8a:b7:cd:55:ba:0d:64:d6:
         74:e0:8c:96:03:84:05:ae:24:83:c2:e4:08:d4:28:b9:39:55:
         80:1c:b1:fa:e5:9a:79:c2:69:92:87:bf:cf:01:e6:ed:0b:2c:
         bb:d1:9f:27:e1:c1:7b:c5:a2:03:02:d0:e1:f9:84:79:14:46:
         7f:18:08:b1:cc:7a:14:34:cb:e2:db:86:3d:46:36:2b:6a:36:
         ba:78:88:3b:ef:0a:dd:fa:2c:1a:d2:64:0f:42:d7:96:7f:4d:
         64:26:fe:ef:5e:0f:bb:ad:da:21:f6:40:e4:17:c7:86:6f:ca:
         b3:12:67:c4:7e:0e:6e:e8:2f:0e:b0:2e:54:9e:38:52:47:3a:
         b8:f5:02:5f:e4:1f:f6:1c:a9:47:75:19:86:97:89:07:e7:97:
         66:e2:70:00:e0:7d:53:80:d0:9a:90:3b:5e:6b:31:b1:a7:a1:
         b9:3f:b8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 11:12:01 2025 by rpki-client