Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/3137302e37382e39322e302f32342d3234203d3e20323635353030.roa
File:                     3137302e37382e39322e302f32342d3234203d3e20323635353030.roa (raw, json)
Hash identifier:          S4iqR2C5NNl03juUYjyENI0LYUgymPHJvRPDNmvCc2M=
Subject key identifier:   6B:01:1D:1A:83:73:E9:43:FB:F2:91:B1:07:7C:D2:72:C7:3A:99:28
Certificate issuer:       /CN=D40B256042895F431460325AC5DB0F0088D3437F
Certificate serial:       38766F74B6B2E1FD2652A28A2F1E22EE56C64A39
Authority key identifier: D4:0B:25:60:42:89:5F:43:14:60:32:5A:C5:DB:0F:00:88:D3:43:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40B256042895F431460325AC5DB0F0088D3437F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/3137302e37382e39322e302f32342d3234203d3e20323635353030.roa
Signing time:             Tue 26 Aug 2025 01:03:52 +0000
ROA not before:           Tue 26 Aug 2025 00:58:52 +0000
ROA not after:            Tue 25 Aug 2026 01:03:52 +0000
asID:                     265500
IP address blocks:        170.78.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/D40B256042895F431460325AC5DB0F0088D3437F.crl
                          rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/D40B256042895F431460325AC5DB0F0088D3437F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40B256042895F431460325AC5DB0F0088D3437F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 11:46:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:76:6f:74:b6:b2:e1:fd:26:52:a2:8a:2f:1e:22:ee:56:c6:4a:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D40B256042895F431460325AC5DB0F0088D3437F
        Validity
            Not Before: Aug 26 00:58:52 2025 GMT
            Not After : Aug 25 01:03:52 2026 GMT
        Subject: CN=6B011D1A8373E943FBF291B1077CD272C73A9928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0c:96:6a:b9:d0:7d:69:51:f0:2d:ea:31:f4:
                    dc:b1:4a:f4:d3:23:5d:b1:60:01:6a:ec:ad:14:56:
                    4e:90:ff:26:20:15:e6:9a:0e:eb:0e:c3:ab:8b:3b:
                    d5:0f:0e:b1:3a:c1:5b:15:f7:92:9c:60:89:9d:47:
                    e0:65:9d:df:ca:bb:f4:00:91:eb:43:86:80:31:a1:
                    3f:93:8b:21:e3:9b:67:0f:75:d5:04:ee:d5:c7:81:
                    8b:6a:ab:77:95:2f:a2:80:e6:88:34:ac:5f:c7:0a:
                    74:a1:46:8a:dd:f0:02:0d:e9:fc:44:12:e5:9b:cf:
                    9d:59:06:ef:f4:b9:06:09:62:a7:51:aa:17:de:89:
                    85:b5:39:1d:c2:3e:12:fa:89:60:cb:3d:bc:68:f9:
                    ca:b5:0e:f3:ad:26:d7:a2:50:73:a9:02:e8:3a:9e:
                    e4:45:de:c5:8e:50:5a:be:43:68:62:bf:b9:17:e0:
                    68:38:cb:6f:bf:c4:00:df:7a:1d:c4:54:da:ce:0c:
                    9f:1c:82:0d:36:44:c3:ce:98:60:b3:0d:c9:3c:24:
                    4c:78:aa:73:ba:ac:8f:d6:88:47:48:f6:bf:e3:13:
                    b5:e3:2d:a9:22:19:75:43:7d:e0:09:5f:a1:4a:87:
                    23:86:f7:59:ee:15:78:19:99:fa:67:71:58:46:ed:
                    29:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:01:1D:1A:83:73:E9:43:FB:F2:91:B1:07:7C:D2:72:C7:3A:99:28
            X509v3 Authority Key Identifier:
                keyid:D4:0B:25:60:42:89:5F:43:14:60:32:5A:C5:DB:0F:00:88:D3:43:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/D40B256042895F431460325AC5DB0F0088D3437F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40B256042895F431460325AC5DB0F0088D3437F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/3137302e37382e39322e302f32342d3234203d3e20323635353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:e7:62:9c:4b:2f:98:d6:d2:fc:57:92:ce:81:82:f7:52:8d:
         e8:a4:e4:92:0e:a0:43:99:81:8e:7c:de:48:24:ce:56:5c:51:
         ac:ae:16:f5:81:b9:8a:8e:9a:52:e3:40:4d:6d:19:f4:e6:85:
         43:e7:b3:15:5a:38:89:3c:6e:b4:e4:53:bd:34:1c:6c:0a:da:
         58:6e:5a:b3:0b:74:56:50:20:64:b9:36:b3:8f:39:a7:61:d7:
         1a:61:62:d9:d4:ee:a3:55:43:cb:50:27:33:15:24:21:55:cf:
         3d:15:53:d0:cd:68:7b:29:a9:5c:3e:8c:a4:f8:09:5d:7c:da:
         c8:ae:69:6a:cc:2e:52:9d:88:f9:a7:bd:c5:8b:52:07:ca:81:
         55:a9:05:25:03:5c:15:0a:01:e7:b3:92:37:b0:ea:60:3d:de:
         07:51:4e:06:50:e9:ff:7c:07:a3:df:cd:61:8b:bb:49:3f:10:
         17:da:0f:46:35:fe:df:b3:dd:b1:a0:25:05:db:0d:6f:f0:22:
         8e:86:ea:94:86:a2:bb:58:01:4b:eb:fa:e9:6d:d0:22:df:14:
         96:8c:25:25:14:86:1b:b8:47:12:44:24:d4:13:06:d3:bc:ba:
         e8:47:d8:9a:e7:2e:ed:45:da:de:e9:a1:d0:4f:e9:61:b6:65:
         0b:4d:50:4f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUOHZvdLay4f0mUqKKLx4i7lbGSjkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQwQjI1NjA0Mjg5NUY0MzE0NjAzMjVBQzVEQjBGMDA4
OEQzNDM3RjAeFw0yNTA4MjYwMDU4NTJaFw0yNjA4MjUwMTAzNTJaMDMxMTAvBgNV
BAMTKDZCMDExRDFBODM3M0U5NDNGQkYyOTFCMTA3N0NEMjcyQzczQTk5MjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbDJZqudB9aVHwLeox9NyxSvTT
I12xYAFq7K0UVk6Q/yYgFeaaDusOw6uLO9UPDrE6wVsV95KcYImdR+Blnd/Ku/QA
ketDhoAxoT+TiyHjm2cPddUE7tXHgYtqq3eVL6KA5og0rF/HCnShRord8AIN6fxE
EuWbz51ZBu/0uQYJYqdRqhfeiYW1OR3CPhL6iWDLPbxo+cq1DvOtJteiUHOpAug6
nuRF3sWOUFq+Q2hiv7kX4Gg4y2+/xADfeh3EVNrODJ8cgg02RMPOmGCzDck8JEx4
qnO6rI/WiEdI9r/jE7XjLakiGXVDfeAJX6FKhyOG91nuFXgZmfpncVhG7SnrAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUawEdGoNz6UP78pGxB3zScsc6mSgwHwYDVR0j
BBgwFoAU1AslYEKJX0MUYDJaxdsPAIjTQ38wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1FBZGs3ZnplMWM3amgzZ29CNlZvcENTOHRqUVZOMUpmTlhCWmFoWFZj
eGovMC9ENDBCMjU2MDQyODk1RjQzMTQ2MDMyNUFDNURCMEYwMDg4RDM0MzdGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0MEIyNTYwNDI4OTVGNDMx
NDYwMzI1QUM1REIwRjAwODhEMzQzN0YuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NRQWRrN2Z6ZTFjN2poM2dvQjZWb3BDUzh0alFWTjFKZk5YQlphaFhWY3hqLzAv
MzEzNzMwMmUzNzM4MmUzOTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1
MzUzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqk5cMA0GCSqGSIb3DQEBCwUAA4IBAQBg52KcSy+Y
1tL8V5LOgYL3Uo3opOSSDqBDmYGOfN5IJM5WXFGsrhb1gbmKjppS40BNbRn05oVD
57MVWjiJPG605FO9NBxsCtpYblqzC3RWUCBkuTazjzmnYdcaYWLZ1O6jVUPLUCcz
FSQhVc89FVPQzWh7KalcPoyk+AldfNrIrmlqzC5SnYj5p73Fi1IHyoFVqQUlA1wV
CgHns5I3sOpgPd4HUU4GUOn/fAej381hi7tJPxAX2g9GNf7fs92xoCUF2w1v8CKO
huqUhqK7WAFL6/rpbdAi3xSWjCUlFIYbuEcSRCTUEwbTvLroR9ia5y7tRdre6aHQ
T+lhtmULTVBP
-----END CERTIFICATE-----
Generated at Fri Sep 19 11:44:47 2025 by rpki-client