Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/3137302e37382e3138302e302f32342d3234203d3e20323636323735.roa
File:                     3137302e37382e3138302e302f32342d3234203d3e20323636323735.roa (raw, json)
Hash identifier:          VJ/YCJ3lUyJu2jLJlCvHnxbGVhqOxJVz4kLsX1EV4SY=
Subject key identifier:   3E:C8:70:03:97:A5:36:ED:17:8D:74:1E:4D:FC:8C:0B:DB:E2:F3:C7
Certificate issuer:       /CN=AA45B680FFBECE275B39CC323B49EB226DCABAD6
Certificate serial:       6C3433594AEC18159E898BF084225977C7FC5513
Authority key identifier: AA:45:B6:80:FF:BE:CE:27:5B:39:CC:32:3B:49:EB:22:6D:CA:BA:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA45B680FFBECE275B39CC323B49EB226DCABAD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/3137302e37382e3138302e302f32342d3234203d3e20323636323735.roa
Signing time:             Thu 31 Jul 2025 19:59:28 +0000
ROA not before:           Thu 31 Jul 2025 19:54:28 +0000
ROA not after:            Thu 30 Jul 2026 19:59:28 +0000
asID:                     266275
IP address blocks:        170.78.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/AA45B680FFBECE275B39CC323B49EB226DCABAD6.crl
                          rsync://rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/AA45B680FFBECE275B39CC323B49EB226DCABAD6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA45B680FFBECE275B39CC323B49EB226DCABAD6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 Aug 2025 08:35:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:34:33:59:4a:ec:18:15:9e:89:8b:f0:84:22:59:77:c7:fc:55:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA45B680FFBECE275B39CC323B49EB226DCABAD6
        Validity
            Not Before: Jul 31 19:54:28 2025 GMT
            Not After : Jul 30 19:59:28 2026 GMT
        Subject: CN=3EC8700397A536ED178D741E4DFC8C0BDBE2F3C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d9:17:7a:49:f7:21:1f:86:d5:18:b9:0a:56:
                    1b:bc:11:72:b2:1f:a3:b7:c2:44:8f:a1:42:18:6a:
                    07:ce:08:ce:d7:03:66:f7:55:cf:f1:b5:05:06:9c:
                    ac:81:16:16:51:a2:56:02:e0:31:3c:06:0c:6c:84:
                    c6:75:6c:e2:21:e9:a2:99:23:82:9f:f3:9d:dd:cf:
                    d7:86:43:0e:48:11:7a:97:e5:69:9f:09:e2:03:21:
                    bf:74:86:43:2f:41:f3:e6:08:7a:ee:e8:eb:9d:9f:
                    fc:ee:1f:e3:0c:38:2c:a6:46:7d:12:f8:a5:56:27:
                    ac:a4:df:05:31:58:a7:4d:29:e5:b3:2e:48:be:91:
                    0d:2e:c2:ac:bd:3f:01:82:0f:81:63:b2:e3:b9:5a:
                    10:72:3c:f5:88:35:64:27:3d:fc:c4:5b:fc:0a:19:
                    eb:70:d3:08:0a:c1:02:b9:e4:9c:77:5d:49:6a:74:
                    a3:78:95:07:d5:74:53:75:40:53:37:05:d1:94:a7:
                    87:f1:60:5f:f7:79:85:f0:71:e8:55:89:de:cc:7c:
                    c2:f8:b8:24:d6:57:bd:71:06:c3:a9:21:e1:c9:ed:
                    3d:2a:c6:9a:9f:b9:1c:45:4f:f9:12:c7:e1:0a:2d:
                    f2:d3:02:03:20:88:b8:dd:73:43:c1:7e:42:09:12:
                    fd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C8:70:03:97:A5:36:ED:17:8D:74:1E:4D:FC:8C:0B:DB:E2:F3:C7
            X509v3 Authority Key Identifier:
                keyid:AA:45:B6:80:FF:BE:CE:27:5B:39:CC:32:3B:49:EB:22:6D:CA:BA:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/AA45B680FFBECE275B39CC323B49EB226DCABAD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA45B680FFBECE275B39CC323B49EB226DCABAD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/3137302e37382e3138302e302f32342d3234203d3e20323636323735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:89:c8:5a:9d:1e:0a:9d:9a:e4:4d:d4:8a:8e:ef:15:3e:6c:
         a1:d8:13:f1:b0:48:54:f7:bb:0b:11:97:42:63:f5:fe:fe:8e:
         19:51:a8:d9:81:e9:0e:28:f8:65:1b:b9:c0:1b:00:cb:5e:0d:
         d7:1d:d4:a2:3c:d6:8e:d1:94:ca:6e:67:64:10:b3:85:4c:86:
         8b:24:cf:f4:1d:04:57:f1:68:a2:99:16:20:72:d2:16:02:53:
         0f:c1:c2:bf:ef:22:a3:26:e3:19:08:64:2d:d7:9e:b5:85:a7:
         11:a7:85:69:d8:2c:de:3f:d0:36:ee:58:e8:a0:6e:13:f2:7d:
         5e:97:67:f9:5b:48:98:8e:57:01:aa:89:ca:9c:d3:94:72:91:
         37:15:22:74:1b:4d:fa:60:f7:ec:40:6f:ec:9a:84:51:b1:95:
         8c:96:68:3f:b8:b8:4a:63:33:27:e8:d1:72:36:1c:b4:b1:b8:
         b8:ef:9b:10:bc:c9:d6:e6:2f:3c:2e:e3:3d:33:a0:6a:90:bf:
         c6:40:b8:0f:6d:44:b0:4f:42:b9:3c:f9:3f:4e:b8:67:fa:1d:
         8c:2e:12:b6:14:ae:24:85:03:7c:53:df:93:b5:6c:d1:5a:20:
         80:ed:df:0b:85:4a:95:2b:d0:93:d9:ea:7d:0c:fa:c8:0f:cf:
         8b:bd:7c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:13:30 2025 by rpki-client