Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DLZXpu5mfvVCDExjb7LPV5ref5HFUPot8ZArPTvD8xKn/1/34352e3137382e3137302e302f32332d3233203d3e20323733343338.roa
File:                     34352e3137382e3137302e302f32332d3233203d3e20323733343338.roa (raw, json)
Hash identifier:          l8zfMSEexAle2kRVX/CqzaBYLQPu4F5wJoMzuWTSD4c=
Subject key identifier:   06:7E:AA:D5:23:95:5C:BB:C0:71:BA:90:BD:FE:F0:43:21:94:38:80
Certificate issuer:       /CN=78EEB73CE335838F80FE0D32902455D8BEBE7641
Certificate serial:       3887A8382C021CFA40A1006265CD16894AFEEA20
Authority key identifier: 78:EE:B7:3C:E3:35:83:8F:80:FE:0D:32:90:24:55:D8:BE:BE:76:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78EEB73CE335838F80FE0D32902455D8BEBE7641.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DLZXpu5mfvVCDExjb7LPV5ref5HFUPot8ZArPTvD8xKn/1/34352e3137382e3137302e302f32332d3233203d3e20323733343338.roa
Signing time:             Wed 27 Aug 2025 18:39:09 +0000
ROA not before:           Wed 27 Aug 2025 18:34:09 +0000
ROA not after:            Wed 26 Aug 2026 18:39:09 +0000
asID:                     273438
IP address blocks:        45.178.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DLZXpu5mfvVCDExjb7LPV5ref5HFUPot8ZArPTvD8xKn/1/78EEB73CE335838F80FE0D32902455D8BEBE7641.crl
                          rsync://rpki-repo.registro.br/repo/DLZXpu5mfvVCDExjb7LPV5ref5HFUPot8ZArPTvD8xKn/1/78EEB73CE335838F80FE0D32902455D8BEBE7641.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78EEB73CE335838F80FE0D32902455D8BEBE7641.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 05:11:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:87:a8:38:2c:02:1c:fa:40:a1:00:62:65:cd:16:89:4a:fe:ea:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78EEB73CE335838F80FE0D32902455D8BEBE7641
        Validity
            Not Before: Aug 27 18:34:09 2025 GMT
            Not After : Aug 26 18:39:09 2026 GMT
        Subject: CN=067EAAD523955CBBC071BA90BDFEF04321943880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:60:9d:78:d4:b4:df:6e:3c:30:a3:49:4e:05:
                    94:e6:ab:ed:08:be:57:67:16:1c:cd:28:17:e4:06:
                    7e:8d:d6:23:5b:82:b2:5a:b2:68:87:33:70:ea:f1:
                    82:05:5b:09:a4:b1:c6:86:ad:e1:2f:27:f0:31:2b:
                    56:ff:01:97:90:c8:83:94:91:79:98:2f:2e:ff:cf:
                    55:6b:43:8f:f7:bd:94:e0:a4:72:03:b5:0c:f7:a9:
                    8f:d1:28:3f:ae:02:e1:95:e7:13:d0:20:a2:6b:cb:
                    58:7f:0c:c5:64:50:6a:9e:79:0e:82:79:fa:f1:cb:
                    6c:39:e2:bd:96:45:25:10:8a:a6:43:5a:01:c7:80:
                    0d:8d:90:87:fe:ab:93:ed:d9:3b:eb:18:72:66:9e:
                    53:e0:14:af:1e:74:e0:a2:6f:c6:ad:2f:73:cc:99:
                    5e:46:45:5c:16:8b:90:a9:85:71:25:b6:a2:26:20:
                    54:87:e6:b8:44:ce:78:4f:64:8b:34:ed:0d:e9:39:
                    50:d3:d8:1c:3f:ef:15:9d:43:b3:45:0e:29:47:d9:
                    21:4d:ea:cf:e8:05:d1:e0:56:9e:f8:ef:84:ae:b5:
                    38:27:21:39:ed:1e:4f:9a:5c:36:f5:3c:3d:66:c6:
                    e9:b1:04:77:0a:fd:14:5f:0f:07:53:b8:dd:55:e4:
                    88:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:7E:AA:D5:23:95:5C:BB:C0:71:BA:90:BD:FE:F0:43:21:94:38:80
            X509v3 Authority Key Identifier:
                keyid:78:EE:B7:3C:E3:35:83:8F:80:FE:0D:32:90:24:55:D8:BE:BE:76:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DLZXpu5mfvVCDExjb7LPV5ref5HFUPot8ZArPTvD8xKn/1/78EEB73CE335838F80FE0D32902455D8BEBE7641.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78EEB73CE335838F80FE0D32902455D8BEBE7641.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DLZXpu5mfvVCDExjb7LPV5ref5HFUPot8ZArPTvD8xKn/1/34352e3137382e3137302e302f32332d3233203d3e20323733343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:71:00:e9:5b:ed:f6:60:e5:f8:19:f9:6b:70:f8:b6:a8:00:
         fb:c8:89:52:f6:bc:9b:a3:68:71:fd:90:0f:84:04:87:1e:69:
         87:0a:41:d6:d1:a2:e5:4b:34:c7:49:ba:a5:9c:d5:77:14:df:
         ea:14:92:88:e8:2a:21:3c:84:8a:aa:f5:3e:33:3b:cd:9d:ca:
         2f:e1:7b:94:20:78:9a:ae:0f:ac:d4:da:bb:ef:2c:48:15:f0:
         38:60:95:f6:a5:8d:4c:f8:26:a3:df:39:db:d0:66:0c:8c:28:
         7c:cc:ab:bd:7e:62:d9:c4:b1:87:07:f9:08:c4:71:98:d5:07:
         9b:62:13:e4:b8:0a:99:31:d0:dd:a3:04:62:2e:8c:90:79:26:
         57:8a:86:3a:d3:77:ff:41:58:0e:52:e4:ba:5c:67:af:90:49:
         13:1f:e6:60:cc:d6:b4:58:69:15:01:e7:46:b0:3e:02:1f:6e:
         bd:5f:89:53:53:e9:f4:3d:63:14:8a:ef:d7:81:d5:31:cb:f9:
         e4:97:5e:2e:0d:0a:81:d1:f8:59:36:a1:9b:1c:2f:59:5b:85:
         bc:ec:4a:fd:a1:70:06:65:9b:2a:40:72:b9:99:49:aa:09:dd:
         4a:a7:b5:5b:e8:98:2a:26:55:a2:e3:47:c3:5b:42:e4:4d:17:
         ab:78:84:8b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOIeoOCwCHPpAoQBiZc0WiUr+6iAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzhFRUI3M0NFMzM1ODM4RjgwRkUwRDMyOTAyNDU1RDhC
RUJFNzY0MTAeFw0yNTA4MjcxODM0MDlaFw0yNjA4MjYxODM5MDlaMDMxMTAvBgNV
BAMTKDA2N0VBQUQ1MjM5NTVDQkJDMDcxQkE5MEJERkVGMDQzMjE5NDM4ODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIYJ141LTfbjwwo0lOBZTmq+0I
vldnFhzNKBfkBn6N1iNbgrJasmiHM3Dq8YIFWwmkscaGreEvJ/AxK1b/AZeQyIOU
kXmYLy7/z1VrQ4/3vZTgpHIDtQz3qY/RKD+uAuGV5xPQIKJry1h/DMVkUGqeeQ6C
efrxy2w54r2WRSUQiqZDWgHHgA2NkIf+q5Pt2TvrGHJmnlPgFK8edOCib8atL3PM
mV5GRVwWi5CphXEltqImIFSH5rhEznhPZIs07Q3pOVDT2Bw/7xWdQ7NFDilH2SFN
6s/oBdHgVp7474SutTgnITntHk+aXDb1PD1mxumxBHcK/RRfDwdTuN1V5IifAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUBn6q1SOVXLvAcbqQvf7wQyGUOIAwHwYDVR0j
BBgwFoAUeO63POM1g4+A/g0ykCRV2L6+dkEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRExaWHB1NW1mdlZDREV4amI3TFBWNXJlZjVIRlVQb3Q4WkFyUFR2RDh4
S24vMS83OEVFQjczQ0UzMzU4MzhGODBGRTBEMzI5MDI0NTVEOEJFQkU3NjQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc4RUVCNzNDRTMzNTgzOEY4
MEZFMEQzMjkwMjQ1NUQ4QkVCRTc2NDEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RMWlhwdTVtZnZWQ0RFeGpiN0xQVjVyZWY1SEZVUG90OFpBclBUdkQ4eEtuLzEv
MzQzNTJlMzEzNzM4MmUzMTM3MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM3
MzMzNDMzMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtsqowDQYJKoZIhvcNAQELBQADggEBAHVxAOlb
7fZg5fgZ+Wtw+LaoAPvIiVL2vJujaHH9kA+EBIceaYcKQdbRouVLNMdJuqWc1XcU
3+oUkojoKiE8hIqq9T4zO82dyi/he5QgeJquD6zU2rvvLEgV8DhglfaljUz4JqPf
OdvQZgyMKHzMq71+YtnEsYcH+QjEcZjVB5tiE+S4Cpkx0N2jBGIujJB5JleKhjrT
d/9BWA5S5LpcZ6+QSRMf5mDM1rRYaRUB50awPgIfbr1fiVNT6fQ9YxSK79eB1THL
+eSXXi4NCoHR+Fk2oZscL1lbhbzsSv2hcAZlmypAcrmZSaoJ3UqntVvomComVaLj
R8NbQuRNF6t4hIs=
-----END CERTIFICATE-----
Generated at Fri Sep 19 08:12:22 2025 by rpki-client