Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DLZXpu5mfvVCDExjb7LPV5ref5HFUPot8ZArPTvD8xKn/1/34352e3137382e3137302e302f32342d3234203d3e20323733343338.roa
File:                     34352e3137382e3137302e302f32342d3234203d3e20323733343338.roa (raw, json)
Hash identifier:          7doZvK1p1gyJ4SdA0SAB5YWdX8K609VawyqUs3MbFZg=
Subject key identifier:   3C:F4:76:0A:CD:CF:B3:19:50:5A:C1:9E:88:87:6A:52:CC:74:A2:C2
Certificate issuer:       /CN=78EEB73CE335838F80FE0D32902455D8BEBE7641
Certificate serial:       3EE5A12FC88233A98A436EF012B452413BF56009
Authority key identifier: 78:EE:B7:3C:E3:35:83:8F:80:FE:0D:32:90:24:55:D8:BE:BE:76:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78EEB73CE335838F80FE0D32902455D8BEBE7641.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DLZXpu5mfvVCDExjb7LPV5ref5HFUPot8ZArPTvD8xKn/1/34352e3137382e3137302e302f32342d3234203d3e20323733343338.roa
Signing time:             Wed 27 Aug 2025 18:39:10 +0000
ROA not before:           Wed 27 Aug 2025 18:34:10 +0000
ROA not after:            Wed 26 Aug 2026 18:39:10 +0000
asID:                     273438
IP address blocks:        45.178.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DLZXpu5mfvVCDExjb7LPV5ref5HFUPot8ZArPTvD8xKn/1/78EEB73CE335838F80FE0D32902455D8BEBE7641.crl
                          rsync://rpki-repo.registro.br/repo/DLZXpu5mfvVCDExjb7LPV5ref5HFUPot8ZArPTvD8xKn/1/78EEB73CE335838F80FE0D32902455D8BEBE7641.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78EEB73CE335838F80FE0D32902455D8BEBE7641.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 05:11:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:e5:a1:2f:c8:82:33:a9:8a:43:6e:f0:12:b4:52:41:3b:f5:60:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78EEB73CE335838F80FE0D32902455D8BEBE7641
        Validity
            Not Before: Aug 27 18:34:10 2025 GMT
            Not After : Aug 26 18:39:10 2026 GMT
        Subject: CN=3CF4760ACDCFB319505AC19E88876A52CC74A2C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5d:b5:69:64:81:cb:c0:83:65:61:fb:b5:73:
                    bc:1b:9d:ee:45:9b:4f:16:f2:46:3c:f0:3a:3b:6b:
                    b6:fa:d9:82:ad:d7:f4:5c:5a:6d:93:0c:c5:cb:b9:
                    7e:e8:4e:25:c7:6d:a4:de:e1:e6:84:0f:b1:af:47:
                    b9:1c:f8:60:1d:78:4d:bc:66:96:e1:e9:ec:ce:f7:
                    91:36:3f:90:58:cc:5b:6e:de:c8:4c:73:fa:4a:3d:
                    dc:d4:cb:37:31:00:e2:14:a6:2d:3a:cd:c1:d0:7e:
                    bb:6a:72:83:5c:c7:c3:d5:6b:f3:8e:07:b6:4b:c3:
                    17:1c:8c:9e:d0:ce:c4:30:82:9d:22:9d:12:7e:57:
                    94:77:a2:b8:32:c7:a0:f5:7d:d7:ba:d5:f5:1e:47:
                    7e:25:f5:92:1e:5f:cf:de:a6:a9:15:26:c5:03:ca:
                    77:0a:c3:60:09:58:ba:77:11:57:52:e8:96:b0:8c:
                    ba:8f:51:8b:38:7b:a0:ae:b7:79:6c:5d:c7:45:2c:
                    9b:a7:1e:02:1c:c1:93:89:94:2d:1d:6e:71:8c:ea:
                    fb:e3:ed:30:e2:47:75:b7:39:94:1a:24:a4:99:fe:
                    d3:70:fc:0b:60:4f:80:da:bf:14:c9:cd:cb:0d:94:
                    d2:31:c5:3a:84:5b:0e:bb:24:59:6d:0e:7f:11:fd:
                    61:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F4:76:0A:CD:CF:B3:19:50:5A:C1:9E:88:87:6A:52:CC:74:A2:C2
            X509v3 Authority Key Identifier:
                keyid:78:EE:B7:3C:E3:35:83:8F:80:FE:0D:32:90:24:55:D8:BE:BE:76:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DLZXpu5mfvVCDExjb7LPV5ref5HFUPot8ZArPTvD8xKn/1/78EEB73CE335838F80FE0D32902455D8BEBE7641.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78EEB73CE335838F80FE0D32902455D8BEBE7641.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DLZXpu5mfvVCDExjb7LPV5ref5HFUPot8ZArPTvD8xKn/1/34352e3137382e3137302e302f32342d3234203d3e20323733343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:d7:a7:0f:76:df:ed:3a:d1:51:dc:28:82:79:89:d3:7c:20:
         2c:04:53:ab:a1:65:71:49:15:30:95:fa:e4:c0:e8:3a:17:61:
         92:55:3c:bd:17:2a:e9:28:37:0d:9e:b1:5d:5f:3f:d3:b9:2d:
         84:a6:91:91:8f:db:c6:12:a4:b9:0a:32:19:11:16:4a:10:92:
         21:8f:c1:8a:66:70:3c:a1:c2:55:d6:64:47:02:19:10:2a:1a:
         a1:ec:99:2e:f0:58:45:96:92:ee:b7:19:7f:86:ff:de:48:c2:
         be:ec:82:0b:85:49:b9:33:b2:44:15:3a:f3:97:cc:ce:6b:06:
         3d:03:f9:db:97:60:96:b8:f0:de:b7:42:9c:ee:40:67:bc:b7:
         94:ce:b8:b0:70:cf:ba:5d:23:3c:ce:36:49:59:27:5f:7f:06:
         1e:ea:2e:16:6f:86:cc:0d:c0:56:b4:ed:bd:c4:8e:65:4e:20:
         a2:9b:41:c9:b2:01:db:e1:f2:14:9b:ad:ae:e1:2f:6a:6b:31:
         0b:f1:6f:54:eb:d1:c9:e6:64:c4:2b:58:c2:ad:7c:99:f9:36:
         05:a7:19:0e:69:05:48:bc:2b:ae:c4:36:b9:be:cb:55:15:75:
         62:f7:10:05:ae:ef:e4:74:e5:d3:b0:a7:fb:4d:1a:d2:66:e4:
         57:9e:f8:ec
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPuWhL8iCM6mKQ27wErRSQTv1YAkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzhFRUI3M0NFMzM1ODM4RjgwRkUwRDMyOTAyNDU1RDhC
RUJFNzY0MTAeFw0yNTA4MjcxODM0MTBaFw0yNjA4MjYxODM5MTBaMDMxMTAvBgNV
BAMTKDNDRjQ3NjBBQ0RDRkIzMTk1MDVBQzE5RTg4ODc2QTUyQ0M3NEEyQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyXbVpZIHLwINlYfu1c7wbne5F
m08W8kY88Do7a7b62YKt1/RcWm2TDMXLuX7oTiXHbaTe4eaED7GvR7kc+GAdeE28
Zpbh6ezO95E2P5BYzFtu3shMc/pKPdzUyzcxAOIUpi06zcHQfrtqcoNcx8PVa/OO
B7ZLwxccjJ7QzsQwgp0inRJ+V5R3orgyx6D1fde61fUeR34l9ZIeX8/epqkVJsUD
yncKw2AJWLp3EVdS6JawjLqPUYs4e6Cut3lsXcdFLJunHgIcwZOJlC0dbnGM6vvj
7TDiR3W3OZQaJKSZ/tNw/AtgT4DavxTJzcsNlNIxxTqEWw67JFltDn8R/WGjAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUPPR2Cs3PsxlQWsGeiIdqUsx0osIwHwYDVR0j
BBgwFoAUeO63POM1g4+A/g0ykCRV2L6+dkEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRExaWHB1NW1mdlZDREV4amI3TFBWNXJlZjVIRlVQb3Q4WkFyUFR2RDh4
S24vMS83OEVFQjczQ0UzMzU4MzhGODBGRTBEMzI5MDI0NTVEOEJFQkU3NjQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc4RUVCNzNDRTMzNTgzOEY4
MEZFMEQzMjkwMjQ1NUQ4QkVCRTc2NDEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RMWlhwdTVtZnZWQ0RFeGpiN0xQVjVyZWY1SEZVUG90OFpBclBUdkQ4eEtuLzEv
MzQzNTJlMzEzNzM4MmUzMTM3MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzMzNDMzMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtsqowDQYJKoZIhvcNAQELBQADggEBAKHXpw92
3+060VHcKIJ5idN8ICwEU6uhZXFJFTCV+uTA6DoXYZJVPL0XKukoNw2esV1fP9O5
LYSmkZGP28YSpLkKMhkRFkoQkiGPwYpmcDyhwlXWZEcCGRAqGqHsmS7wWEWWku63
GX+G/95Iwr7sgguFSbkzskQVOvOXzM5rBj0D+duXYJa48N63QpzuQGe8t5TOuLBw
z7pdIzzONklZJ19/Bh7qLhZvhswNwFa07b3EjmVOIKKbQcmyAdvh8hSbra7hL2pr
MQvxb1Tr0cnmZMQrWMKtfJn5NgWnGQ5pBUi8K67ENrm+y1UVdWL3EAWu7+R05dOw
p/tNGtJm5Fee+Ow=
-----END CERTIFICATE-----
Generated at Fri Sep 19 08:11:55 2025 by rpki-client