Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/3137302e37382e3138302e302f32332d3233203d3e20323636323735.roa
File:                     3137302e37382e3138302e302f32332d3233203d3e20323636323735.roa (raw, json)
Hash identifier:          SRAPFyAqSIe1oQltBoDFyX6zUG1XoL6XgORgoJo18Ug=
Subject key identifier:   D3:10:A7:B8:77:D3:3D:EE:2E:CB:16:12:02:6B:BD:95:71:4D:FF:11
Certificate issuer:       /CN=AA45B680FFBECE275B39CC323B49EB226DCABAD6
Certificate serial:       0E6C6C8004E93431AF421E5038B310524AAA6644
Authority key identifier: AA:45:B6:80:FF:BE:CE:27:5B:39:CC:32:3B:49:EB:22:6D:CA:BA:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA45B680FFBECE275B39CC323B49EB226DCABAD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/3137302e37382e3138302e302f32332d3233203d3e20323636323735.roa
Signing time:             Thu 31 Jul 2025 19:59:05 +0000
ROA not before:           Thu 31 Jul 2025 19:54:05 +0000
ROA not after:            Thu 30 Jul 2026 19:59:05 +0000
asID:                     266275
IP address blocks:        170.78.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/AA45B680FFBECE275B39CC323B49EB226DCABAD6.crl
                          rsync://rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/AA45B680FFBECE275B39CC323B49EB226DCABAD6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA45B680FFBECE275B39CC323B49EB226DCABAD6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 Aug 2025 09:28:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:6c:6c:80:04:e9:34:31:af:42:1e:50:38:b3:10:52:4a:aa:66:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA45B680FFBECE275B39CC323B49EB226DCABAD6
        Validity
            Not Before: Jul 31 19:54:05 2025 GMT
            Not After : Jul 30 19:59:05 2026 GMT
        Subject: CN=D310A7B877D33DEE2ECB1612026BBD95714DFF11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bc:6a:b9:60:fe:4c:7c:46:42:97:e5:45:8b:
                    5a:01:3a:45:44:70:1a:10:c5:b9:0d:1f:0e:2b:30:
                    64:6e:ad:ec:b9:ff:30:8b:c3:ea:3c:63:f0:6b:da:
                    73:d4:d1:c4:0b:cf:1b:4e:59:4c:cc:7e:7e:42:d2:
                    97:ee:fc:b9:6b:3b:2d:fa:0f:2e:04:ff:2e:22:6b:
                    6e:9b:28:54:f2:cf:d0:82:6d:c4:99:8c:08:de:2f:
                    71:e8:b6:b7:27:72:7f:b0:3d:4d:d6:55:a4:3a:4f:
                    3a:7d:1e:c4:fc:f9:f2:f2:f9:05:b7:19:b6:d9:aa:
                    40:6c:18:2a:d3:10:a5:af:06:35:87:a3:98:bd:c8:
                    06:5f:ca:b6:7c:32:95:96:a3:24:1f:06:cc:7e:08:
                    fa:6d:ad:54:ce:7e:0f:db:da:92:d9:e8:02:f4:98:
                    cb:92:1f:22:2b:52:65:20:28:29:3c:90:bb:7f:1f:
                    c6:48:f8:30:ad:ee:89:03:1d:da:2b:88:d6:a6:52:
                    1c:e6:45:49:2c:31:c2:68:eb:5b:b8:51:b0:bc:13:
                    0c:b3:39:81:c0:f6:81:af:52:40:d3:eb:2b:0e:ed:
                    d1:00:5d:06:3a:31:3c:af:63:8d:fd:7b:b8:34:68:
                    b6:4b:62:dd:75:d1:9f:75:00:c5:bf:70:52:3a:38:
                    e2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:10:A7:B8:77:D3:3D:EE:2E:CB:16:12:02:6B:BD:95:71:4D:FF:11
            X509v3 Authority Key Identifier:
                keyid:AA:45:B6:80:FF:BE:CE:27:5B:39:CC:32:3B:49:EB:22:6D:CA:BA:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/AA45B680FFBECE275B39CC323B49EB226DCABAD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA45B680FFBECE275B39CC323B49EB226DCABAD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/3137302e37382e3138302e302f32332d3233203d3e20323636323735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:02:ac:8a:0e:99:1a:b2:4b:81:d4:d4:b0:a7:a4:0b:bd:ad:
         16:1d:39:fa:cb:f5:36:51:e8:07:55:7c:66:fb:77:9c:b4:0f:
         41:56:1c:2e:eb:bc:94:cc:ed:49:6c:af:6d:29:6a:9f:ac:70:
         54:13:7d:e9:23:80:72:25:b8:8e:e1:00:26:68:17:2d:99:51:
         16:f5:10:58:3c:10:cf:dd:ed:25:88:1f:8e:8b:00:4a:1a:c2:
         ea:a1:de:57:0f:88:8a:cc:7d:e5:90:c3:59:00:84:bc:a6:53:
         a0:38:79:d5:cb:97:65:72:99:3b:4b:68:82:09:74:d1:01:d4:
         4e:36:44:fe:dc:81:37:b8:12:e0:7d:57:2a:68:17:a3:20:b3:
         be:14:99:d7:e8:8e:0d:1e:86:fd:c8:ea:58:ef:81:98:d2:52:
         5a:c9:bf:d3:74:64:2f:81:2a:33:ff:97:37:7d:cd:28:9d:e8:
         8e:9b:36:15:d6:d5:33:32:97:b3:a8:3e:52:4a:3d:13:3a:9b:
         ea:42:c4:9a:b1:91:f6:b8:63:1a:55:0c:4e:8a:20:e3:4c:16:
         cf:f9:10:31:90:f9:9b:e9:6b:f3:0f:44:3d:b7:41:6f:6a:56:
         17:5a:9f:34:4f:08:27:5b:2a:4c:2f:4c:d0:94:10:f3:d4:ee:
         8b:0c:cc:c9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDmxsgATpNDGvQh5QOLMQUkqqZkQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUE0NUI2ODBGRkJFQ0UyNzVCMzlDQzMyM0I0OUVCMjI2
RENBQkFENjAeFw0yNTA3MzExOTU0MDVaFw0yNjA3MzAxOTU5MDVaMDMxMTAvBgNV
BAMTKEQzMTBBN0I4NzdEMzNERUUyRUNCMTYxMjAyNkJCRDk1NzE0REZGMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAvGq5YP5MfEZCl+VFi1oBOkVE
cBoQxbkNHw4rMGRurey5/zCLw+o8Y/Br2nPU0cQLzxtOWUzMfn5C0pfu/LlrOy36
Dy4E/y4ia26bKFTyz9CCbcSZjAjeL3Hotrcncn+wPU3WVaQ6Tzp9HsT8+fLy+QW3
GbbZqkBsGCrTEKWvBjWHo5i9yAZfyrZ8MpWWoyQfBsx+CPptrVTOfg/b2pLZ6AL0
mMuSHyIrUmUgKCk8kLt/H8ZI+DCt7okDHdoriNamUhzmRUksMcJo61u4UbC8Ewyz
OYHA9oGvUkDT6ysO7dEAXQY6MTyvY439e7g0aLZLYt110Z91AMW/cFI6OOJhAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU0xCnuHfTPe4uyxYSAmu9lXFN/xEwHwYDVR0j
BBgwFoAUqkW2gP++zidbOcwyO0nrIm3KutYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNm5kckozRWFEQ1hTUTdZbVo5WXFEWmZGUWoxOG10bVN3UXROdFRxMnlH
S3UvMC9BQTQ1QjY4MEZGQkVDRTI3NUIzOUNDMzIzQjQ5RUIyMjZEQ0FCQUQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBNDVCNjgwRkZCRUNFMjc1
QjM5Q0MzMjNCNDlFQjIyNkRDQUJBRDYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZuZHJKM0VhRENYU1E3WW1aOVlxRFpmRlFqMThtdG1Td1F0TnRUcTJ5R0t1LzAv
MzEzNzMwMmUzNzM4MmUzMTM4MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzYzMjM3MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGqTrQwDQYJKoZIhvcNAQELBQADggEBACYCrIoO
mRqyS4HU1LCnpAu9rRYdOfrL9TZR6AdVfGb7d5y0D0FWHC7rvJTM7Ulsr20pap+s
cFQTfekjgHIluI7hACZoFy2ZURb1EFg8EM/d7SWIH46LAEoawuqh3lcPiIrMfeWQ
w1kAhLymU6A4edXLl2VymTtLaIIJdNEB1E42RP7cgTe4EuB9VypoF6Mgs74Umdfo
jg0ehv3I6ljvgZjSUlrJv9N0ZC+BKjP/lzd9zSid6I6bNhXW1TMyl7OoPlJKPRM6
m+pCxJqxkfa4YxpVDE6KIONMFs/5EDGQ+Zvpa/MPRD23QW9qVhdanzRPCCdbKkwv
TNCUEPPU7osMzMk=
-----END CERTIFICATE-----
Generated at Wed Aug 6 16:24:52 2025 by rpki-client