Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DLZXpu5mfvVCDExjb7LPV5ref5HFUPot8ZArPTvD8xKn/1/34352e3137382e3137312e302f32342d3234203d3e20323733343338.roa
File:                     34352e3137382e3137312e302f32342d3234203d3e20323733343338.roa (raw, json)
Hash identifier:          MEpc13YSDfuBnhqeJRyfmovOJXUJvi1WumNafInNeng=
Subject key identifier:   6E:EA:D9:71:D0:BC:84:15:39:BF:4C:51:8C:68:32:7C:1E:9E:26:3F
Certificate issuer:       /CN=78EEB73CE335838F80FE0D32902455D8BEBE7641
Certificate serial:       4FF18559E0211ACFB69C9E2DF5A6AA5FA14128A7
Authority key identifier: 78:EE:B7:3C:E3:35:83:8F:80:FE:0D:32:90:24:55:D8:BE:BE:76:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78EEB73CE335838F80FE0D32902455D8BEBE7641.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DLZXpu5mfvVCDExjb7LPV5ref5HFUPot8ZArPTvD8xKn/1/34352e3137382e3137312e302f32342d3234203d3e20323733343338.roa
Signing time:             Wed 27 Aug 2025 18:39:09 +0000
ROA not before:           Wed 27 Aug 2025 18:34:09 +0000
ROA not after:            Wed 26 Aug 2026 18:39:09 +0000
asID:                     273438
IP address blocks:        45.178.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DLZXpu5mfvVCDExjb7LPV5ref5HFUPot8ZArPTvD8xKn/1/78EEB73CE335838F80FE0D32902455D8BEBE7641.crl
                          rsync://rpki-repo.registro.br/repo/DLZXpu5mfvVCDExjb7LPV5ref5HFUPot8ZArPTvD8xKn/1/78EEB73CE335838F80FE0D32902455D8BEBE7641.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78EEB73CE335838F80FE0D32902455D8BEBE7641.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 05:11:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:f1:85:59:e0:21:1a:cf:b6:9c:9e:2d:f5:a6:aa:5f:a1:41:28:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78EEB73CE335838F80FE0D32902455D8BEBE7641
        Validity
            Not Before: Aug 27 18:34:09 2025 GMT
            Not After : Aug 26 18:39:09 2026 GMT
        Subject: CN=6EEAD971D0BC841539BF4C518C68327C1E9E263F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:bb:be:7e:16:e2:d0:65:c2:be:88:ad:2a:b8:
                    59:1e:55:f0:81:0b:7a:b6:a2:92:a5:4b:f2:b8:f8:
                    a5:fe:bd:ac:dc:55:12:b6:80:76:37:c4:56:54:a5:
                    5e:98:ad:a6:c7:00:06:08:7a:5b:ad:18:6e:7b:36:
                    ca:cf:3b:9f:2b:f7:89:3f:79:e3:75:51:43:6b:c7:
                    77:d8:6c:2f:0c:79:46:9b:b0:e8:2a:9b:e1:c2:57:
                    33:fc:63:02:a7:40:b0:2a:df:84:21:5b:08:ad:b2:
                    0c:56:de:2e:58:3f:b7:91:60:e0:48:9d:6b:5b:50:
                    5a:20:ea:d0:1d:42:55:bf:8e:03:4e:ad:b1:9b:d4:
                    bc:43:db:ce:14:d1:a6:01:12:52:8f:37:cf:2c:40:
                    45:70:14:84:85:58:a4:bc:c6:77:fd:ce:7c:20:27:
                    4a:d0:7e:4a:b9:82:60:42:e5:06:a3:0b:5f:61:ca:
                    94:4c:52:34:5a:58:b9:26:77:70:68:7d:ca:d1:27:
                    a6:ba:c4:4f:b2:88:67:f6:3b:1f:a9:df:9e:21:a6:
                    82:36:0e:f6:72:1f:77:32:83:38:0a:8c:c9:01:8b:
                    45:09:65:e8:4a:ff:ff:26:7e:2e:12:2d:b4:e7:80:
                    15:3a:e9:fb:84:cd:88:3c:0c:96:b3:a7:cb:73:8f:
                    f3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:EA:D9:71:D0:BC:84:15:39:BF:4C:51:8C:68:32:7C:1E:9E:26:3F
            X509v3 Authority Key Identifier:
                keyid:78:EE:B7:3C:E3:35:83:8F:80:FE:0D:32:90:24:55:D8:BE:BE:76:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DLZXpu5mfvVCDExjb7LPV5ref5HFUPot8ZArPTvD8xKn/1/78EEB73CE335838F80FE0D32902455D8BEBE7641.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78EEB73CE335838F80FE0D32902455D8BEBE7641.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DLZXpu5mfvVCDExjb7LPV5ref5HFUPot8ZArPTvD8xKn/1/34352e3137382e3137312e302f32342d3234203d3e20323733343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:05:2f:b2:6f:09:f1:f8:21:a2:bb:6a:1d:e8:25:8f:09:d9:
         59:f4:d4:24:1a:38:df:91:72:71:1e:67:d0:a3:37:93:05:85:
         86:b6:03:20:c2:a1:d6:16:bf:5d:09:c1:22:98:cc:3d:b0:7f:
         46:05:00:c6:d8:1e:3d:fd:88:85:d4:80:b3:8b:f6:fa:9d:9b:
         a4:cd:42:c4:cf:60:3b:1b:22:43:2e:7c:43:7e:08:9f:8e:b9:
         25:e0:83:4d:0c:e4:e2:cf:c8:81:64:62:ba:93:b5:16:b0:98:
         24:23:75:08:24:c1:29:37:0b:78:98:9f:14:ae:86:be:a0:1c:
         a2:0a:89:ca:b1:32:a3:e0:84:40:d5:8d:b3:70:05:25:33:50:
         99:84:60:15:7c:81:6c:cb:95:e7:c9:15:84:e3:af:df:62:71:
         57:e7:cc:3d:c7:db:1f:4b:db:18:50:29:94:97:c9:ac:77:e3:
         1f:31:0f:3e:01:25:54:b4:b4:32:c2:27:0c:10:c1:7c:72:42:
         4a:3e:25:65:57:77:6e:e5:44:67:be:dd:ca:df:ea:1c:f6:be:
         40:7d:a7:42:c9:bf:37:46:09:b0:7d:a5:9e:76:2d:4a:c4:b8:
         af:8b:4f:95:54:d1:3a:78:1d:c8:bd:33:3d:b0:e7:f3:a4:a3:
         62:85:d0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 08:12:12 2025 by rpki-client