Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/3137302e37382e39322e302f32342d3234203d3e20323635353030.roa
File:                     3137302e37382e39322e302f32342d3234203d3e20323635353030.roa (raw, json)
Hash identifier:          ByHGitGkAcVK55mWGPyjzGePLkzPoJta+gcMZ84knVY=
Subject key identifier:   33:24:81:14:C3:CC:1F:FE:C6:1F:D3:09:68:F5:86:6D:8F:44:81:C8
Certificate issuer:       /CN=A1E125638591A773701BFD72EE9FA738B6EAA454
Certificate serial:       5BBFD7A162F086EC6305363080091E6B14B4B402
Authority key identifier: A1:E1:25:63:85:91:A7:73:70:1B:FD:72:EE:9F:A7:38:B6:EA:A4:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E125638591A773701BFD72EE9FA738B6EAA454.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/3137302e37382e39322e302f32342d3234203d3e20323635353030.roa
Signing time:             Thu 26 Dec 2024 15:00:17 +0000
ROA not before:           Thu 26 Dec 2024 14:55:17 +0000
ROA not after:            Thu 25 Dec 2025 15:00:17 +0000
asID:                     265500
IP address blocks:        170.78.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/A1E125638591A773701BFD72EE9FA738B6EAA454.crl
                          rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/A1E125638591A773701BFD72EE9FA738B6EAA454.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E125638591A773701BFD72EE9FA738B6EAA454.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 15:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:bf:d7:a1:62:f0:86:ec:63:05:36:30:80:09:1e:6b:14:b4:b4:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1E125638591A773701BFD72EE9FA738B6EAA454
        Validity
            Not Before: Dec 26 14:55:17 2024 GMT
            Not After : Dec 25 15:00:17 2025 GMT
        Subject: CN=33248114C3CC1FFEC61FD30968F5866D8F4481C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4b:53:6a:f2:6b:a4:20:7b:cb:47:67:0f:d5:
                    6a:91:b1:2f:48:3e:38:07:d1:ee:e1:ca:8f:3c:67:
                    14:5d:5e:cd:be:8a:4d:e2:ff:3c:8c:66:86:35:24:
                    eb:8c:c8:79:1f:e7:0d:7b:02:20:ec:4d:8b:87:09:
                    b3:8d:7b:56:6d:b1:19:19:80:fe:00:fa:8e:47:94:
                    2c:f6:fe:4f:60:4f:90:36:55:9d:ac:26:0c:ed:f0:
                    70:54:c8:9d:51:37:e3:62:50:d6:be:9c:6a:1b:17:
                    16:9b:97:9d:d8:bf:08:38:74:52:5d:85:cb:9d:1a:
                    cd:8b:fe:33:df:88:83:80:8c:c2:db:42:77:df:29:
                    8d:d3:4e:66:cc:9a:e6:d8:e8:7b:29:33:4f:a5:47:
                    54:7a:b2:df:10:a8:f3:e0:71:2d:44:f4:f8:49:35:
                    3c:62:48:2b:cf:fb:3a:a7:b4:bf:38:e8:0e:b9:8c:
                    51:de:28:a3:8d:f6:50:37:1a:18:dd:49:95:b2:d3:
                    25:5d:bd:79:e7:1e:53:d6:66:c3:5f:5c:77:02:e4:
                    fa:04:c5:50:a3:88:2c:d6:e5:22:7f:0b:ba:f7:10:
                    d1:f8:20:c5:0a:12:fc:90:9f:33:71:18:54:74:e4:
                    b6:4a:d2:8f:c8:94:28:e8:65:6a:61:6d:be:67:b5:
                    8a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:24:81:14:C3:CC:1F:FE:C6:1F:D3:09:68:F5:86:6D:8F:44:81:C8
            X509v3 Authority Key Identifier:
                keyid:A1:E1:25:63:85:91:A7:73:70:1B:FD:72:EE:9F:A7:38:B6:EA:A4:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/A1E125638591A773701BFD72EE9FA738B6EAA454.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E125638591A773701BFD72EE9FA738B6EAA454.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/3137302e37382e39322e302f32342d3234203d3e20323635353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:62:c6:b9:36:eb:87:d6:e0:29:bf:66:2a:74:66:0e:5e:be:
         a2:07:c8:3f:4f:02:65:c9:27:2a:67:19:5d:67:6e:18:a7:a8:
         4c:f5:92:19:ce:e1:7a:ff:e6:14:73:77:7e:e4:b6:79:25:04:
         49:42:ab:5a:5b:0e:05:04:3b:21:d3:00:df:83:73:53:28:01:
         d5:45:a4:cb:24:0a:7e:fb:a5:d7:dd:50:3f:39:bf:f9:0e:17:
         b1:8f:34:bd:d7:26:88:af:dc:75:75:61:0d:5a:65:ab:6c:8d:
         da:a4:53:95:38:5b:d6:0e:d5:0e:b8:6c:5c:40:34:84:22:5c:
         15:c5:3e:05:8a:57:9c:ba:33:f8:ce:d4:86:ea:7a:63:0f:dc:
         fd:87:ef:af:d8:cc:0b:29:b7:75:66:ac:f7:7a:0a:63:1d:80:
         ee:5f:ed:db:e4:0f:0c:94:98:59:0d:31:50:e8:ee:a2:c7:5d:
         fa:94:c2:1d:a1:42:dc:0c:1f:d0:7b:b8:c8:ef:af:0c:fb:a4:
         c7:0b:08:b7:ea:d4:7f:83:6b:bc:86:a5:8d:98:10:3a:ad:46:
         a6:81:75:ef:ea:3b:30:97:e0:b5:e2:af:b7:05:e2:32:5f:68:
         93:7b:b1:51:dd:f5:65:ce:2a:82:26:16:80:8d:96:06:09:07:
         66:ea:fc:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:47 2025 by rpki-client