Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/3137302e37382e39352e302f32342d3234203d3e20323635353030.roa
File:                     3137302e37382e39352e302f32342d3234203d3e20323635353030.roa (raw, json)
Hash identifier:          BDPRROC2CZj5zwucceaYK+igW7ptmsp8MKt9oU+Au5s=
Subject key identifier:   A5:72:3B:EC:83:F5:F5:43:BD:0C:39:57:94:19:FE:CC:51:26:AA:E7
Certificate issuer:       /CN=D40B256042895F431460325AC5DB0F0088D3437F
Certificate serial:       7A4103A4B8A306DEC2042A712D6ECED33B51095C
Authority key identifier: D4:0B:25:60:42:89:5F:43:14:60:32:5A:C5:DB:0F:00:88:D3:43:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40B256042895F431460325AC5DB0F0088D3437F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/3137302e37382e39352e302f32342d3234203d3e20323635353030.roa
Signing time:             Tue 26 Aug 2025 01:04:26 +0000
ROA not before:           Tue 26 Aug 2025 00:59:26 +0000
ROA not after:            Tue 25 Aug 2026 01:04:26 +0000
asID:                     265500
IP address blocks:        170.78.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/D40B256042895F431460325AC5DB0F0088D3437F.crl
                          rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/D40B256042895F431460325AC5DB0F0088D3437F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40B256042895F431460325AC5DB0F0088D3437F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 12:34:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:41:03:a4:b8:a3:06:de:c2:04:2a:71:2d:6e:ce:d3:3b:51:09:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D40B256042895F431460325AC5DB0F0088D3437F
        Validity
            Not Before: Aug 26 00:59:26 2025 GMT
            Not After : Aug 25 01:04:26 2026 GMT
        Subject: CN=A5723BEC83F5F543BD0C39579419FECC5126AAE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d9:b6:8e:46:45:ac:46:e3:88:f9:7c:cb:67:
                    02:57:b0:ad:ba:2e:fb:f2:22:ab:f9:15:eb:e4:cc:
                    c1:70:14:9a:a3:d1:0e:2c:21:db:a0:e1:24:f1:a9:
                    20:5c:59:f3:95:df:99:f4:1b:e2:7c:9b:c6:49:f1:
                    bf:d8:fc:a5:30:b3:95:54:ed:a6:f3:75:ff:27:74:
                    0f:07:98:96:51:c1:83:34:5f:f1:cb:1f:75:91:a0:
                    0e:6c:64:b7:ab:92:9c:29:8a:16:38:f5:2f:2a:0b:
                    79:da:85:71:2c:ef:15:70:ea:c9:88:42:ad:24:26:
                    83:5c:f5:5c:ab:52:58:84:0b:03:75:20:fb:c2:e5:
                    60:c8:b6:f5:59:17:01:4b:5a:24:a6:f3:0f:53:3d:
                    87:5e:5d:db:66:27:94:d6:a1:74:62:66:6c:24:f5:
                    86:3f:8d:e5:55:fc:2e:15:bd:28:ce:a9:c9:e9:eb:
                    3d:95:de:22:ce:b7:2f:44:eb:0f:e0:fa:47:b3:de:
                    9b:d8:95:ea:cf:37:e9:c2:c2:2d:66:1b:92:57:01:
                    60:c1:c4:3d:8b:fa:55:cc:5f:07:63:bd:ca:75:e2:
                    10:de:0c:fc:b7:76:9f:3a:75:5e:94:a1:f2:e5:f3:
                    e0:38:4b:c0:5c:2f:6d:91:69:cd:f3:0a:0e:fa:cf:
                    2f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:72:3B:EC:83:F5:F5:43:BD:0C:39:57:94:19:FE:CC:51:26:AA:E7
            X509v3 Authority Key Identifier:
                keyid:D4:0B:25:60:42:89:5F:43:14:60:32:5A:C5:DB:0F:00:88:D3:43:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/D40B256042895F431460325AC5DB0F0088D3437F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40B256042895F431460325AC5DB0F0088D3437F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/3137302e37382e39352e302f32342d3234203d3e20323635353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:94:b8:53:c7:10:85:6f:31:6b:d0:bc:af:e6:a9:a9:38:e1:
         3e:4e:af:5a:fd:b5:72:64:fa:03:32:15:5b:ab:1f:53:97:57:
         f5:de:aa:3c:7f:2b:03:1b:72:60:11:e7:f3:ed:d3:13:9c:12:
         d6:7a:07:50:1c:0c:23:a7:e5:f9:cb:7f:ad:2e:ba:e9:9e:97:
         fa:90:47:fe:6a:f1:f9:06:d7:f3:61:af:ad:20:7f:d5:23:2f:
         d7:16:4f:c6:d4:25:61:12:53:0f:f6:0e:bd:ae:8d:0f:89:1c:
         76:b3:98:4f:50:ec:99:08:fc:13:cb:9f:72:a4:18:a0:6f:15:
         95:1e:be:0c:e3:bb:40:30:37:af:53:81:5e:80:9b:4c:25:86:
         5f:e4:0d:39:14:0b:31:8b:a6:e2:03:fc:22:7a:43:7e:73:fd:
         70:ba:80:60:41:7f:f3:0c:6d:7c:f2:55:9d:70:be:d2:c2:3e:
         63:c9:70:0f:2f:c8:c6:e6:b6:61:5b:ab:56:7d:6c:c7:8d:5b:
         d8:3c:1e:69:d9:d4:d6:05:5e:40:5f:78:d4:bc:7c:e3:9b:19:
         00:51:80:8c:01:86:00:09:2c:c5:8a:46:3c:6c:34:99:3d:5b:
         ab:70:63:eb:f5:4f:ad:8d:5a:88:5c:a3:4c:2c:03:af:06:c8:
         52:78:72:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 02:40:00 2025 by rpki-client