Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3137302e37382e3136322e302f32342d3234203d3e20323633383931.roa
File:                     3137302e37382e3136322e302f32342d3234203d3e20323633383931.roa (raw, json)
Hash identifier:          HDx54wdTXW76T09og51BV5Z57Cx2GSP0rNDysCobcg4=
Subject key identifier:   06:6B:A0:03:C9:2A:2F:E4:18:BC:3B:30:35:0C:B0:77:CC:DD:ED:8C
Certificate issuer:       /CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
Certificate serial:       7AD3BB4F13DA4EA11D661580B6226A7D619475E6
Authority key identifier: 21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3137302e37382e3136322e302f32342d3234203d3e20323633383931.roa
Signing time:             Thu 20 Feb 2025 11:43:52 +0000
ROA not before:           Thu 20 Feb 2025 11:38:52 +0000
ROA not after:            Thu 19 Feb 2026 11:43:52 +0000
asID:                     263891
IP address blocks:        170.78.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl
                          rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 22:11:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:d3:bb:4f:13:da:4e:a1:1d:66:15:80:b6:22:6a:7d:61:94:75:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
        Validity
            Not Before: Feb 20 11:38:52 2025 GMT
            Not After : Feb 19 11:43:52 2026 GMT
        Subject: CN=066BA003C92A2FE418BC3B30350CB077CCDDED8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:01:88:a8:39:f4:71:f8:e3:ad:7c:dd:1f:9f:
                    86:b5:21:d6:98:e4:0c:1c:ad:58:08:04:68:0a:6e:
                    72:39:bc:e1:4e:44:f3:f6:b0:a6:3a:ac:e4:de:85:
                    b6:61:61:62:2c:b5:0c:09:16:ca:71:ab:29:dc:a5:
                    99:2b:ce:e9:ee:40:70:a9:ee:ca:30:ca:4f:39:3f:
                    d4:f2:ff:e9:9a:a6:a5:5e:e7:7d:38:cd:42:33:1b:
                    78:e9:88:78:1e:f2:ed:9c:a6:3e:0b:1e:03:4d:48:
                    5c:1c:cb:d4:d3:21:72:7a:71:6f:4a:b2:f0:92:a1:
                    90:8a:87:13:56:22:f9:95:7f:6f:9b:cd:fc:cf:2b:
                    df:33:e3:b5:67:1d:33:b9:dd:11:1e:56:56:31:6a:
                    ea:92:b9:b5:84:39:fe:b3:24:92:43:68:64:97:4b:
                    df:30:a4:e6:39:e8:01:a4:98:ba:18:ec:af:10:f6:
                    6a:d6:e0:50:83:a3:03:81:50:cf:53:3f:47:82:26:
                    f5:f9:91:18:bf:90:df:53:fa:5f:a2:8a:ce:03:10:
                    51:ff:7a:ce:80:5f:af:94:13:55:da:ec:7c:f7:a2:
                    d8:ff:11:8b:26:80:e3:e2:0e:0b:44:40:17:33:3a:
                    a6:9f:08:bd:cc:a2:02:ca:64:a1:97:45:90:bc:54:
                    eb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:6B:A0:03:C9:2A:2F:E4:18:BC:3B:30:35:0C:B0:77:CC:DD:ED:8C
            X509v3 Authority Key Identifier:
                keyid:21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3137302e37382e3136322e302f32342d3234203d3e20323633383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:7e:0e:7c:db:08:da:5f:d8:3f:55:16:1c:01:3c:82:7e:a3:
         c4:cf:fe:8f:00:6b:17:4a:eb:f1:7e:ee:ba:a1:c2:73:4a:9f:
         bf:be:2d:5c:e9:29:f7:97:72:a0:88:62:76:f6:9e:21:df:32:
         23:27:2e:c5:36:c3:3b:ad:20:7e:f1:55:48:45:69:a7:a3:d5:
         18:59:d9:77:af:8a:90:c2:46:0c:54:c1:30:7f:d1:fc:32:bd:
         cb:c0:10:bf:27:ef:4a:eb:e6:57:bd:ae:97:32:d2:c0:a7:1f:
         58:6a:18:1e:26:ef:05:05:29:26:84:ca:18:33:60:cd:5f:5b:
         6c:30:1c:61:03:22:e8:c0:e9:1e:9c:f8:0f:f8:17:cf:76:e5:
         11:32:e4:0c:15:c2:34:1b:6a:69:e2:23:b0:be:ed:a6:55:3f:
         aa:93:87:82:b1:3b:45:ff:ef:e5:65:07:32:55:fc:b2:93:37:
         f8:91:b1:70:c0:59:4a:0b:fb:4d:af:0c:d0:67:74:2a:bf:a1:
         fb:86:af:d8:bc:a7:4d:8f:41:b1:8a:04:76:59:bf:81:94:75:
         aa:24:e5:1f:01:a1:40:7f:d4:0f:38:47:8f:c2:fb:c2:79:b8:
         5d:70:1c:c3:52:ae:1b:7b:ae:d8:a0:b9:cc:ba:b6:48:42:ab:
         7a:ae:83:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:00:11 2025 by rpki-client