Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/3137302e37382e39332e302f32342d3234203d3e20323635353030.roa
File:                     3137302e37382e39332e302f32342d3234203d3e20323635353030.roa (raw, json)
Hash identifier:          dXgKvHISlVNoR9XEuRM10rCcTggNY0fRtLYip5duNCo=
Subject key identifier:   CE:0B:3E:09:3C:5A:9B:84:9C:16:90:E3:A1:F3:55:D8:35:EF:60:76
Certificate issuer:       /CN=D40B256042895F431460325AC5DB0F0088D3437F
Certificate serial:       2D6A80492322F073B4449C4347D9DDEDB048A4E4
Authority key identifier: D4:0B:25:60:42:89:5F:43:14:60:32:5A:C5:DB:0F:00:88:D3:43:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40B256042895F431460325AC5DB0F0088D3437F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/3137302e37382e39332e302f32342d3234203d3e20323635353030.roa
Signing time:             Tue 26 Aug 2025 01:04:31 +0000
ROA not before:           Tue 26 Aug 2025 00:59:31 +0000
ROA not after:            Tue 25 Aug 2026 01:04:31 +0000
asID:                     265500
IP address blocks:        170.78.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/D40B256042895F431460325AC5DB0F0088D3437F.crl
                          rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/D40B256042895F431460325AC5DB0F0088D3437F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40B256042895F431460325AC5DB0F0088D3437F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 12:34:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:6a:80:49:23:22:f0:73:b4:44:9c:43:47:d9:dd:ed:b0:48:a4:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D40B256042895F431460325AC5DB0F0088D3437F
        Validity
            Not Before: Aug 26 00:59:31 2025 GMT
            Not After : Aug 25 01:04:31 2026 GMT
        Subject: CN=CE0B3E093C5A9B849C1690E3A1F355D835EF6076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:7e:d5:9d:e3:b2:b4:9c:80:6f:40:59:89:11:
                    b1:29:2a:77:10:61:2f:62:3a:ae:d1:72:85:ec:66:
                    90:00:06:78:75:00:c2:60:83:cd:91:12:b9:15:d2:
                    fa:19:6b:cc:50:63:20:22:d5:94:04:56:9e:f4:bf:
                    cc:fa:c2:f5:2e:de:7a:a3:1a:ac:4d:fb:3c:e6:aa:
                    aa:77:a1:5e:d0:b5:44:db:9a:00:e7:d5:bc:b2:22:
                    26:90:7b:99:3b:5a:de:7e:57:1f:01:78:d4:63:4c:
                    2f:00:bb:f3:9d:40:6d:54:3c:8d:43:e2:ef:ff:24:
                    2f:32:ea:a1:c0:64:35:a2:be:e7:2f:4c:2e:56:79:
                    82:56:04:56:b8:c8:c5:8e:d6:20:66:70:d8:20:7a:
                    19:cf:0f:c1:5c:d5:7d:25:b9:fa:c0:e7:89:c9:67:
                    b9:24:e5:be:08:7f:8c:9f:e1:cd:0e:5d:ad:7b:2e:
                    57:bf:17:45:c2:fc:42:11:e4:61:6b:b3:20:92:e8:
                    74:ff:64:e3:ad:f2:fd:1a:f0:5e:d5:62:ea:c7:61:
                    0c:27:1a:5e:4b:14:10:91:ed:5f:21:35:80:fc:a2:
                    b2:68:b0:d6:b8:cf:24:99:c4:1b:00:4c:37:4a:f2:
                    0a:27:ec:22:c0:ee:39:ef:47:9c:1f:90:a9:a6:11:
                    14:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:0B:3E:09:3C:5A:9B:84:9C:16:90:E3:A1:F3:55:D8:35:EF:60:76
            X509v3 Authority Key Identifier:
                keyid:D4:0B:25:60:42:89:5F:43:14:60:32:5A:C5:DB:0F:00:88:D3:43:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/D40B256042895F431460325AC5DB0F0088D3437F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40B256042895F431460325AC5DB0F0088D3437F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/3137302e37382e39332e302f32342d3234203d3e20323635353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:9c:72:88:22:69:93:78:d7:45:cd:f6:90:94:0d:b2:84:61:
         e3:97:e2:01:02:61:11:92:b4:00:5f:25:c8:14:b3:1d:49:7c:
         d3:1e:ef:d0:29:a6:f1:56:14:a9:19:eb:85:46:c5:03:c6:a0:
         37:8b:80:ec:e9:84:c3:8f:13:d0:83:e4:9f:9e:49:09:ce:d6:
         02:ff:c7:85:94:89:16:a3:85:16:94:cf:48:aa:36:59:cb:17:
         a5:32:42:aa:1c:86:a2:04:cc:0a:e3:9c:3a:3c:ec:32:03:4f:
         7b:e5:72:6f:e3:9c:65:69:5c:ae:5b:b1:84:54:d1:6a:9e:52:
         84:00:6d:1e:31:94:2a:80:2f:e4:b4:49:f7:78:88:27:a8:1f:
         67:de:62:10:fa:5e:95:39:38:c0:e5:df:69:6f:5c:c0:c5:0c:
         54:5c:e9:5b:62:05:d8:be:1c:57:ff:59:0d:42:2a:c3:70:70:
         84:85:c3:67:6c:b1:7b:af:f7:c8:1c:ff:9f:f6:a4:f1:92:74:
         b2:e8:d3:72:65:26:a4:fa:82:a5:05:ab:85:1c:0f:ac:72:57:
         b6:17:cc:e9:58:09:1f:d0:2f:71:d6:ed:bd:2c:63:4f:5d:ad:
         59:bf:99:7f:f2:68:ae:16:b0:b7:d4:82:3e:12:db:43:9e:13:
         28:0b:d1:45
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIULWqASSMi8HO0RJxDR9nd7bBIpOQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQwQjI1NjA0Mjg5NUY0MzE0NjAzMjVBQzVEQjBGMDA4
OEQzNDM3RjAeFw0yNTA4MjYwMDU5MzFaFw0yNjA4MjUwMTA0MzFaMDMxMTAvBgNV
BAMTKENFMEIzRTA5M0M1QTlCODQ5QzE2OTBFM0ExRjM1NUQ4MzVFRjYwNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmftWd47K0nIBvQFmJEbEpKncQ
YS9iOq7RcoXsZpAABnh1AMJgg82RErkV0voZa8xQYyAi1ZQEVp70v8z6wvUu3nqj
GqxN+zzmqqp3oV7QtUTbmgDn1byyIiaQe5k7Wt5+Vx8BeNRjTC8Au/OdQG1UPI1D
4u//JC8y6qHAZDWivucvTC5WeYJWBFa4yMWO1iBmcNggehnPD8Fc1X0lufrA54nJ
Z7kk5b4If4yf4c0OXa17Lle/F0XC/EIR5GFrsyCS6HT/ZOOt8v0a8F7VYurHYQwn
Gl5LFBCR7V8hNYD8orJosNa4zySZxBsATDdK8gon7CLA7jnvR5wfkKmmERTXAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUzgs+CTxam4ScFpDjofNV2DXvYHYwHwYDVR0j
BBgwFoAU1AslYEKJX0MUYDJaxdsPAIjTQ38wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1FBZGs3ZnplMWM3amgzZ29CNlZvcENTOHRqUVZOMUpmTlhCWmFoWFZj
eGovMC9ENDBCMjU2MDQyODk1RjQzMTQ2MDMyNUFDNURCMEYwMDg4RDM0MzdGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0MEIyNTYwNDI4OTVGNDMx
NDYwMzI1QUM1REIwRjAwODhEMzQzN0YuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NRQWRrN2Z6ZTFjN2poM2dvQjZWb3BDUzh0alFWTjFKZk5YQlphaFhWY3hqLzAv
MzEzNzMwMmUzNzM4MmUzOTMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1
MzUzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqk5dMA0GCSqGSIb3DQEBCwUAA4IBAQAonHKIImmT
eNdFzfaQlA2yhGHjl+IBAmERkrQAXyXIFLMdSXzTHu/QKabxVhSpGeuFRsUDxqA3
i4Ds6YTDjxPQg+SfnkkJztYC/8eFlIkWo4UWlM9IqjZZyxelMkKqHIaiBMwK45w6
POwyA0975XJv45xlaVyuW7GEVNFqnlKEAG0eMZQqgC/ktEn3eIgnqB9n3mIQ+l6V
OTjA5d9pb1zAxQxUXOlbYgXYvhxX/1kNQirDcHCEhcNnbLF7r/fIHP+f9qTxknSy
6NNyZSak+oKlBauFHA+scle2F8zpWAkf0C9x1u29LGNPXa1Zv5l/8miuFrC31II+
EttDnhMoC9FF
-----END CERTIFICATE-----
Generated at Fri Sep 19 14:49:43 2025 by rpki-client