Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3137302e37382e3136332e302f32342d3234203d3e20323633383931.roa
File:                     3137302e37382e3136332e302f32342d3234203d3e20323633383931.roa (raw, json)
Hash identifier:          7xYxxrOSzrS8k5y97eIDahGvI9CFe6PC4Z6wgywaHcA=
Subject key identifier:   05:5A:54:50:D5:DA:BC:7E:FC:B8:83:5C:70:22:2D:27:17:87:DD:C7
Certificate issuer:       /CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
Certificate serial:       6C29F75FC7524288237827091D281E0A30DF7B4D
Authority key identifier: 21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3137302e37382e3136332e302f32342d3234203d3e20323633383931.roa
Signing time:             Thu 20 Feb 2025 11:43:53 +0000
ROA not before:           Thu 20 Feb 2025 11:38:53 +0000
ROA not after:            Thu 19 Feb 2026 11:43:53 +0000
asID:                     263891
IP address blocks:        170.78.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl
                          rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 22:11:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:29:f7:5f:c7:52:42:88:23:78:27:09:1d:28:1e:0a:30:df:7b:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
        Validity
            Not Before: Feb 20 11:38:53 2025 GMT
            Not After : Feb 19 11:43:53 2026 GMT
        Subject: CN=055A5450D5DABC7EFCB8835C70222D271787DDC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:be:f4:82:0f:b7:6a:84:e3:53:dc:b5:14:77:
                    45:b7:3c:25:18:8f:6d:54:a6:f2:a7:29:4b:63:e1:
                    0b:ca:d0:d4:96:9e:24:6d:73:d3:18:61:f8:16:b8:
                    c2:c5:ca:dd:24:b5:ac:d4:2c:57:e0:cf:3f:47:b2:
                    ae:57:e6:84:5b:23:75:75:88:82:f4:64:ca:bf:e7:
                    91:18:a3:4e:1a:bc:ae:13:9d:e5:94:fa:69:cf:7d:
                    2f:db:d0:dc:ca:e2:47:a0:cc:77:38:82:2f:36:53:
                    66:69:76:fa:c6:28:c1:42:79:8a:d8:b9:b1:b5:d6:
                    c5:0e:f6:83:6d:f5:27:79:4f:7d:1a:9a:6c:a6:fe:
                    79:35:3c:3c:e2:e7:d5:71:04:a7:c8:8e:34:26:a3:
                    cc:e4:9a:e0:81:5c:68:ec:6f:a6:78:19:78:c5:1e:
                    dd:32:3f:4a:1b:6e:21:8d:a0:55:f8:a3:f0:9a:24:
                    6d:2f:69:f1:65:ce:89:f7:28:b3:57:9c:90:e5:06:
                    ce:6a:e9:2b:d7:68:e6:2c:6e:99:e9:3a:48:7a:a3:
                    37:7b:15:66:59:a7:9a:0c:a2:30:ad:b0:65:d1:41:
                    ff:c1:37:35:94:51:fc:b4:a2:7f:d8:59:59:04:10:
                    c1:4d:21:4f:1a:ed:99:83:82:50:0c:f3:e9:da:09:
                    41:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:5A:54:50:D5:DA:BC:7E:FC:B8:83:5C:70:22:2D:27:17:87:DD:C7
            X509v3 Authority Key Identifier:
                keyid:21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3137302e37382e3136332e302f32342d3234203d3e20323633383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:0b:0a:43:0f:2e:73:df:cd:3a:9b:a4:74:c2:43:8f:d8:1b:
         42:78:1a:22:b3:d5:09:ca:2c:2b:0d:5e:51:2e:c7:41:df:9b:
         55:53:b3:c1:74:31:a2:9f:57:37:ce:30:71:7c:7a:08:d6:70:
         2e:0f:6c:ce:4b:d6:3e:ea:a5:42:08:df:43:55:91:ca:36:94:
         79:26:37:cf:94:cf:48:24:a6:aa:3a:93:e9:af:3c:70:81:49:
         14:02:aa:96:85:f7:c1:83:6b:4b:16:cb:55:54:a4:9d:4d:08:
         26:e6:d3:c4:27:d4:d6:56:c7:1a:9d:a4:5a:f4:c3:58:b9:ea:
         9e:af:ea:de:77:22:14:a0:ef:60:b3:a5:6e:a8:04:ea:28:5e:
         3b:31:0c:8f:d6:2f:70:af:0b:fd:b7:43:1c:2c:d2:05:2a:db:
         be:62:c5:c0:84:c1:2a:18:dd:d0:42:09:eb:70:b6:68:84:94:
         b6:2b:b8:8e:37:49:e9:d2:1e:48:56:f9:ca:1a:de:85:f8:10:
         f8:6b:ac:64:d4:74:8a:08:01:36:1c:1f:94:b8:74:52:41:52:
         99:d2:46:ca:ae:34:df:f1:c3:50:f5:a6:a7:f6:ee:34:07:c8:
         79:e4:49:f5:e2:3c:20:a0:24:de:37:e1:52:52:c9:c9:ce:3e:
         25:5c:fc:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:43:08 2025 by rpki-client