Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/3137302e37382e39322e302f32322d3232203d3e20323635353030.roa
File:                     3137302e37382e39322e302f32322d3232203d3e20323635353030.roa (raw, json)
Hash identifier:          xYR2Mr6R/NpwBG70lqF5/X5z+i87P1GFE1v7o9KawmY=
Subject key identifier:   CF:31:3E:A9:2A:43:AB:51:36:8A:E5:9A:64:EA:F6:18:DD:28:13:83
Certificate issuer:       /CN=A6E612C2DD45C08462EFC083F0378E57A6996EE6
Certificate serial:       45D658BFA888C647498CC1A34059AA423B3CFBF6
Authority key identifier: A6:E6:12:C2:DD:45:C0:84:62:EF:C0:83:F0:37:8E:57:A6:99:6E:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6E612C2DD45C08462EFC083F0378E57A6996EE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/3137302e37382e39322e302f32322d3232203d3e20323635353030.roa
Signing time:             Wed 05 Mar 2025 13:43:42 +0000
ROA not before:           Wed 05 Mar 2025 13:38:42 +0000
ROA not after:            Wed 04 Mar 2026 13:43:42 +0000
asID:                     265500
IP address blocks:        170.78.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/A6E612C2DD45C08462EFC083F0378E57A6996EE6.crl
                          rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/A6E612C2DD45C08462EFC083F0378E57A6996EE6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6E612C2DD45C08462EFC083F0378E57A6996EE6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 16 Apr 2025 17:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:d6:58:bf:a8:88:c6:47:49:8c:c1:a3:40:59:aa:42:3b:3c:fb:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6E612C2DD45C08462EFC083F0378E57A6996EE6
        Validity
            Not Before: Mar  5 13:38:42 2025 GMT
            Not After : Mar  4 13:43:42 2026 GMT
        Subject: CN=CF313EA92A43AB51368AE59A64EAF618DD281383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f5:f5:c0:db:4f:68:d8:31:8a:64:ad:f5:72:
                    cd:62:7c:65:5a:6c:85:69:8b:1c:9e:e3:3c:20:a3:
                    82:c5:aa:4e:11:b2:00:c9:4b:e5:fb:3a:b5:a0:72:
                    07:ba:13:0a:cd:5e:79:22:09:10:b6:8a:34:b5:fe:
                    5c:1c:f7:9c:22:cf:93:1a:5f:98:19:5a:c1:dc:61:
                    9c:2d:fe:c3:76:16:e5:42:cb:ca:2d:64:23:84:05:
                    99:b7:6a:f0:6e:40:5b:4a:95:35:14:02:cd:23:70:
                    c2:ae:44:e7:fe:62:b0:cf:16:6d:bd:37:b3:ff:19:
                    ef:1f:81:89:61:56:62:e2:fd:7b:cb:46:21:3a:0d:
                    6b:3f:dc:80:ef:11:66:37:40:10:bb:6d:9c:fd:75:
                    eb:25:e0:b1:1c:61:12:2e:07:ba:ed:b0:16:97:4a:
                    4a:3b:cd:64:20:62:d4:c7:1a:58:89:7f:ec:ce:6c:
                    60:48:ba:03:d4:2b:a1:d8:dc:39:38:7f:0c:7a:aa:
                    f5:d7:35:bd:71:c1:ac:4a:ca:5c:f2:f7:6e:9c:fb:
                    ea:8f:b8:89:eb:f4:52:19:bd:41:95:42:c1:b1:80:
                    7e:2c:d0:58:91:b1:2e:b6:c7:86:71:42:50:62:e0:
                    2c:2a:b6:b5:a3:04:07:df:e3:ee:58:59:0e:4c:1b:
                    4d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:31:3E:A9:2A:43:AB:51:36:8A:E5:9A:64:EA:F6:18:DD:28:13:83
            X509v3 Authority Key Identifier:
                keyid:A6:E6:12:C2:DD:45:C0:84:62:EF:C0:83:F0:37:8E:57:A6:99:6E:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/A6E612C2DD45C08462EFC083F0378E57A6996EE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6E612C2DD45C08462EFC083F0378E57A6996EE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/3137302e37382e39322e302f32322d3232203d3e20323635353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:d6:fb:ba:65:71:29:7a:a1:ee:d5:e0:7b:b7:3b:f0:d9:e5:
         18:4f:cc:64:8a:cf:0b:88:fc:d6:dc:a1:1c:02:30:50:22:8e:
         fe:f6:40:29:12:06:22:1e:f5:e8:1e:ee:9c:e4:16:21:f9:5d:
         3f:5e:81:05:0b:62:eb:81:35:41:e6:a7:07:4d:d7:a0:3c:c8:
         66:d3:8d:17:7c:1c:0e:f8:23:db:98:9a:2c:66:58:79:7f:fb:
         b2:0b:31:02:07:9b:68:79:12:e0:62:6c:de:b3:d4:68:3f:6e:
         a6:ba:47:1b:7e:48:ff:83:e8:be:8c:45:d5:8d:88:43:0f:1f:
         0d:bf:32:1d:9b:9d:1c:89:65:7a:6e:82:7d:2f:18:08:2d:8a:
         1b:35:66:65:3c:b9:8b:e1:4d:ff:bf:1f:39:62:87:75:2d:42:
         1a:c6:4b:cd:75:c4:76:54:81:c7:41:95:cc:7a:f5:2e:2e:ad:
         66:08:42:31:e2:90:b4:03:55:62:50:7d:d7:15:ed:c1:3c:ec:
         a3:b0:5b:5e:03:71:7d:20:b1:f5:ee:12:72:8f:3b:39:c5:1c:
         b2:8e:02:b4:44:53:61:17:05:b7:94:79:aa:d6:f5:ab:e3:49:
         81:81:b3:e7:f4:6f:6a:25:1a:b2:5d:d9:e7:ac:be:11:d9:06:
         6a:4a:88:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:43:46 2025 by rpki-client