Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/3137302e37382e39342e302f32342d3234203d3e20323635353030.roa
File:                     3137302e37382e39342e302f32342d3234203d3e20323635353030.roa (raw, json)
Hash identifier:          6BFHOE3bEDGBC9TnxubnVi7ml5m8La86Q6EhlVmR1Vs=
Subject key identifier:   D7:5D:80:63:F4:4B:E3:0B:09:B6:B2:EB:46:F1:6E:AC:20:75:61:43
Certificate issuer:       /CN=A6E612C2DD45C08462EFC083F0378E57A6996EE6
Certificate serial:       40746BBCD1F8C27515C7B5EBFD111FD2CC692FA6
Authority key identifier: A6:E6:12:C2:DD:45:C0:84:62:EF:C0:83:F0:37:8E:57:A6:99:6E:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6E612C2DD45C08462EFC083F0378E57A6996EE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/3137302e37382e39342e302f32342d3234203d3e20323635353030.roa
Signing time:             Wed 05 Mar 2025 13:43:55 +0000
ROA not before:           Wed 05 Mar 2025 13:38:55 +0000
ROA not after:            Wed 04 Mar 2026 13:43:55 +0000
asID:                     265500
IP address blocks:        170.78.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/A6E612C2DD45C08462EFC083F0378E57A6996EE6.crl
                          rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/A6E612C2DD45C08462EFC083F0378E57A6996EE6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6E612C2DD45C08462EFC083F0378E57A6996EE6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 16 Apr 2025 17:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:74:6b:bc:d1:f8:c2:75:15:c7:b5:eb:fd:11:1f:d2:cc:69:2f:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6E612C2DD45C08462EFC083F0378E57A6996EE6
        Validity
            Not Before: Mar  5 13:38:55 2025 GMT
            Not After : Mar  4 13:43:55 2026 GMT
        Subject: CN=D75D8063F44BE30B09B6B2EB46F16EAC20756143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e9:01:55:76:c7:91:b0:cb:c3:70:7c:c4:39:
                    79:d7:b1:83:99:ce:83:e0:07:12:37:16:71:a0:11:
                    90:27:3b:b3:dd:06:2c:2f:88:bf:26:f2:4d:a1:c7:
                    f3:a2:e2:02:48:5e:89:26:8b:0d:a1:75:66:24:bd:
                    a8:e1:41:3b:9a:d3:4c:30:50:c3:19:80:99:89:9c:
                    7b:c2:88:27:0b:d1:8f:4d:58:b1:1a:1f:68:54:72:
                    14:8f:f2:f3:d7:f3:e8:ff:d7:31:dc:47:2e:70:54:
                    90:df:7d:aa:c0:0d:0e:99:22:03:4f:b2:08:14:16:
                    38:7e:fa:b8:c2:39:d7:cb:6f:c7:88:1c:d3:15:39:
                    05:93:bb:80:b3:6f:89:d9:2d:30:21:08:7d:28:10:
                    b3:10:cf:06:f1:a3:34:37:a6:8b:eb:7d:65:00:3f:
                    38:1e:2a:c7:fd:44:1d:e8:ab:97:22:f3:4d:09:b0:
                    cf:47:b0:e8:2b:59:23:c7:44:f3:e8:cd:8c:7f:0f:
                    3d:95:fe:eb:37:a0:89:09:5e:15:f0:ce:43:52:90:
                    36:bd:0f:f7:44:16:4d:ca:d1:3f:35:69:98:7b:f2:
                    5b:d0:9f:f7:4b:fe:b6:ed:ed:a7:db:7e:55:b2:9d:
                    81:e6:be:4c:7d:93:56:09:2d:f3:5d:1b:f3:90:a4:
                    9b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:5D:80:63:F4:4B:E3:0B:09:B6:B2:EB:46:F1:6E:AC:20:75:61:43
            X509v3 Authority Key Identifier:
                keyid:A6:E6:12:C2:DD:45:C0:84:62:EF:C0:83:F0:37:8E:57:A6:99:6E:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/A6E612C2DD45C08462EFC083F0378E57A6996EE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6E612C2DD45C08462EFC083F0378E57A6996EE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/3137302e37382e39342e302f32342d3234203d3e20323635353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:63:79:e5:f6:0a:25:28:d1:0f:03:6f:bd:1b:e6:1f:5a:d5:
         d3:10:f4:c8:41:41:bc:56:19:23:b4:a1:91:07:7f:9a:05:28:
         60:85:37:bd:62:35:bf:0e:ba:e6:3d:51:02:27:ec:78:38:c0:
         3f:1a:06:fb:85:81:b5:73:c0:1f:ca:e2:02:42:23:69:a9:03:
         3b:1d:cd:5b:57:c6:44:f5:5f:c8:69:ae:48:a9:56:1c:0f:83:
         8a:f9:78:ca:0c:d7:5b:65:ce:00:2d:7e:7a:4b:5d:4e:22:36:
         55:1e:3e:60:ad:54:7f:8d:e8:d1:71:cf:01:ea:63:0c:cf:a7:
         6d:77:5f:68:36:02:a7:59:7b:7e:9e:c6:84:46:81:d1:9a:98:
         82:96:43:44:1e:32:e3:ee:9b:c6:bd:29:22:61:2f:de:00:40:
         05:af:d6:aa:95:8c:6a:91:98:72:38:65:f7:85:a6:c8:ea:54:
         56:27:ec:ba:0c:bc:22:83:46:a6:e3:b8:b3:be:bd:fe:a7:62:
         45:31:92:e3:02:f6:80:ef:b6:91:3a:dc:1e:4c:99:a5:5f:21:
         de:87:70:44:c3:bb:4f:36:9e:e7:c8:9b:81:0f:d9:f5:59:fb:
         ef:13:73:c6:f6:e3:95:30:80:36:1d:77:e2:22:bb:d2:3c:5f:
         bc:95:0c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:43:48 2025 by rpki-client