Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/3137302e37382e39322e302f32322d3232203d3e20323635353030.roa
File:                     3137302e37382e39322e302f32322d3232203d3e20323635353030.roa (raw, json)
Hash identifier:          oD73uiQXnrHszpKxAnfrkgyinMm6hIKofzgZEq5Ni5o=
Subject key identifier:   1C:88:1F:7C:50:CD:EF:BC:3A:6F:2F:8E:84:B6:AA:A6:7E:14:C5:92
Certificate issuer:       /CN=D40B256042895F431460325AC5DB0F0088D3437F
Certificate serial:       33D6C0A7E15BAA48160FD46FAF14D943473CF2D4
Authority key identifier: D4:0B:25:60:42:89:5F:43:14:60:32:5A:C5:DB:0F:00:88:D3:43:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40B256042895F431460325AC5DB0F0088D3437F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/3137302e37382e39322e302f32322d3232203d3e20323635353030.roa
Signing time:             Tue 26 Aug 2025 01:04:24 +0000
ROA not before:           Tue 26 Aug 2025 00:59:24 +0000
ROA not after:            Tue 25 Aug 2026 01:04:24 +0000
asID:                     265500
IP address blocks:        170.78.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/D40B256042895F431460325AC5DB0F0088D3437F.crl
                          rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/D40B256042895F431460325AC5DB0F0088D3437F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40B256042895F431460325AC5DB0F0088D3437F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 12:34:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:d6:c0:a7:e1:5b:aa:48:16:0f:d4:6f:af:14:d9:43:47:3c:f2:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D40B256042895F431460325AC5DB0F0088D3437F
        Validity
            Not Before: Aug 26 00:59:24 2025 GMT
            Not After : Aug 25 01:04:24 2026 GMT
        Subject: CN=1C881F7C50CDEFBC3A6F2F8E84B6AAA67E14C592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b9:d1:56:0f:41:f6:12:87:30:4a:9d:bb:58:
                    67:5f:2c:fd:ef:9c:09:23:44:ff:15:1b:40:a1:03:
                    18:d8:cd:94:28:2c:3c:e2:2f:e4:b3:49:0f:b3:4c:
                    ee:f9:e9:e7:c6:ce:b2:55:c6:df:1a:95:f2:cc:3c:
                    d2:40:be:98:33:5e:44:34:1a:8a:ba:6f:c1:bb:b6:
                    08:20:e8:02:eb:8d:d1:59:ff:f0:0a:57:71:14:a9:
                    ee:ae:af:38:cf:cd:2e:a1:9a:35:bb:56:3d:f6:5e:
                    91:20:91:81:5f:99:1d:12:1e:9e:76:fd:81:71:0b:
                    84:4d:15:16:2e:e0:da:5e:e7:80:f1:5f:74:ea:d3:
                    81:80:dc:23:fb:a6:18:45:80:0d:18:cc:e6:70:df:
                    22:cd:29:e0:08:db:f7:0e:13:b3:01:3e:6b:a0:2b:
                    e6:31:a5:f4:26:05:9c:ed:07:68:5c:c1:f4:a0:86:
                    d0:09:cb:eb:ef:12:d9:85:52:02:a9:92:97:f4:4b:
                    29:3d:3a:80:1a:e9:88:9a:be:eb:e5:e6:30:a9:0b:
                    ef:f2:b2:ae:7e:2c:10:d2:85:7c:a9:69:21:42:2d:
                    77:41:3c:46:51:4b:c5:dd:ec:9c:26:0e:c4:d7:27:
                    d5:43:5a:5e:88:01:9f:aa:4a:33:9e:6a:a9:50:a3:
                    00:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:88:1F:7C:50:CD:EF:BC:3A:6F:2F:8E:84:B6:AA:A6:7E:14:C5:92
            X509v3 Authority Key Identifier:
                keyid:D4:0B:25:60:42:89:5F:43:14:60:32:5A:C5:DB:0F:00:88:D3:43:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/D40B256042895F431460325AC5DB0F0088D3437F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40B256042895F431460325AC5DB0F0088D3437F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/3137302e37382e39322e302f32322d3232203d3e20323635353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:b4:89:dc:5d:84:58:3f:f2:95:59:3b:e7:1a:27:0a:8a:fe:
         17:93:79:a2:12:6f:fa:3c:6b:f4:d6:a4:4f:8e:83:03:56:68:
         7e:38:e9:ca:19:4b:4a:a3:28:68:52:9c:10:ea:2b:eb:97:5a:
         d2:cf:2a:1f:31:cb:96:0c:96:ff:da:c3:cd:c8:4d:c1:88:b6:
         7e:5c:ed:43:22:b0:0f:22:08:5e:ce:a0:7b:ac:5f:59:68:28:
         9d:75:02:6a:23:95:69:6f:3c:08:fe:04:cb:e0:b6:d2:cb:ba:
         15:b4:19:1f:30:89:84:78:c1:a4:4a:5a:f7:b2:ea:a9:07:1b:
         0d:91:6b:3b:a5:3a:65:f1:72:00:4b:ea:31:c2:e6:75:65:e0:
         45:71:70:86:4d:42:cf:67:b0:22:1f:d1:88:bd:f6:5e:21:40:
         6f:e8:a8:58:2b:38:86:ad:4b:42:b2:68:a4:e8:22:73:58:7c:
         83:07:ac:f9:4a:9f:7f:23:27:27:2c:08:14:4c:2c:20:3c:ba:
         e4:77:5e:e7:c5:2a:30:2b:21:09:eb:4e:a7:e3:0f:a3:c0:1c:
         cd:59:3b:0c:79:e9:b4:bd:cb:a4:73:a4:33:9e:71:d0:a4:6c:
         bb:b6:29:1b:6d:b8:5c:4f:ff:6e:7a:fa:36:c4:30:f3:a0:9d:
         36:6e:2a:cf
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUM9bAp+FbqkgWD9RvrxTZQ0c88tQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQwQjI1NjA0Mjg5NUY0MzE0NjAzMjVBQzVEQjBGMDA4
OEQzNDM3RjAeFw0yNTA4MjYwMDU5MjRaFw0yNjA4MjUwMTA0MjRaMDMxMTAvBgNV
BAMTKDFDODgxRjdDNTBDREVGQkMzQTZGMkY4RTg0QjZBQUE2N0UxNEM1OTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaudFWD0H2EocwSp27WGdfLP3v
nAkjRP8VG0ChAxjYzZQoLDziL+SzSQ+zTO756efGzrJVxt8alfLMPNJAvpgzXkQ0
Goq6b8G7tggg6ALrjdFZ//AKV3EUqe6urzjPzS6hmjW7Vj32XpEgkYFfmR0SHp52
/YFxC4RNFRYu4Npe54DxX3Tq04GA3CP7phhFgA0YzOZw3yLNKeAI2/cOE7MBPmug
K+YxpfQmBZztB2hcwfSghtAJy+vvEtmFUgKpkpf0Syk9OoAa6Yiavuvl5jCpC+/y
sq5+LBDShXypaSFCLXdBPEZRS8Xd7JwmDsTXJ9VDWl6IAZ+qSjOeaqlQowBbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUHIgffFDN77w6by+OhLaqpn4UxZIwHwYDVR0j
BBgwFoAU1AslYEKJX0MUYDJaxdsPAIjTQ38wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1FBZGs3ZnplMWM3amgzZ29CNlZvcENTOHRqUVZOMUpmTlhCWmFoWFZj
eGovMC9ENDBCMjU2MDQyODk1RjQzMTQ2MDMyNUFDNURCMEYwMDg4RDM0MzdGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0MEIyNTYwNDI4OTVGNDMx
NDYwMzI1QUM1REIwRjAwODhEMzQzN0YuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NRQWRrN2Z6ZTFjN2poM2dvQjZWb3BDUzh0alFWTjFKZk5YQlphaFhWY3hqLzAv
MzEzNzMwMmUzNzM4MmUzOTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM1
MzUzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqk5cMA0GCSqGSIb3DQEBCwUAA4IBAQC6tIncXYRY
P/KVWTvnGicKiv4Xk3miEm/6PGv01qRPjoMDVmh+OOnKGUtKoyhoUpwQ6ivrl1rS
zyofMcuWDJb/2sPNyE3BiLZ+XO1DIrAPIghezqB7rF9ZaCiddQJqI5VpbzwI/gTL
4LbSy7oVtBkfMImEeMGkSlr3suqpBxsNkWs7pTpl8XIAS+oxwuZ1ZeBFcXCGTULP
Z7AiH9GIvfZeIUBv6KhYKziGrUtCsmik6CJzWHyDB6z5Sp9/IycnLAgUTCwgPLrk
d17nxSowKyEJ606n4w+jwBzNWTsMeem0vcukc6QznnHQpGy7tikbbbhcT/9uevo2
xDDzoJ02birP
-----END CERTIFICATE-----
Generated at Fri Sep 19 13:17:22 2025 by rpki-client