Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/3137302e37382e3138332e302f32342d3234203d3e20323636323735.roa
File:                     3137302e37382e3138332e302f32342d3234203d3e20323636323735.roa (raw, json)
Hash identifier:          2ONC3JgEDiTdCF8uSGGKDk+UpBPhrjw5eA2nDTvV+as=
Subject key identifier:   DF:36:63:6A:E0:D3:20:98:CA:4D:04:C1:E2:29:E8:C9:C0:EB:D7:31
Certificate issuer:       /CN=AA45B680FFBECE275B39CC323B49EB226DCABAD6
Certificate serial:       79E7026FF9D8AA7DCA39D65AF3EAED20B9A7345A
Authority key identifier: AA:45:B6:80:FF:BE:CE:27:5B:39:CC:32:3B:49:EB:22:6D:CA:BA:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA45B680FFBECE275B39CC323B49EB226DCABAD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/3137302e37382e3138332e302f32342d3234203d3e20323636323735.roa
Signing time:             Thu 31 Jul 2025 19:59:50 +0000
ROA not before:           Thu 31 Jul 2025 19:54:50 +0000
ROA not after:            Thu 30 Jul 2026 19:59:50 +0000
asID:                     266275
IP address blocks:        170.78.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/AA45B680FFBECE275B39CC323B49EB226DCABAD6.crl
                          rsync://rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/AA45B680FFBECE275B39CC323B49EB226DCABAD6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA45B680FFBECE275B39CC323B49EB226DCABAD6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 Aug 2025 08:35:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:e7:02:6f:f9:d8:aa:7d:ca:39:d6:5a:f3:ea:ed:20:b9:a7:34:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA45B680FFBECE275B39CC323B49EB226DCABAD6
        Validity
            Not Before: Jul 31 19:54:50 2025 GMT
            Not After : Jul 30 19:59:50 2026 GMT
        Subject: CN=DF36636AE0D32098CA4D04C1E229E8C9C0EBD731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5c:61:00:4a:54:1e:25:27:da:a3:f0:7c:cd:
                    38:f9:a7:94:13:d8:23:ab:f7:e9:83:4a:ce:5d:ca:
                    c1:fc:d0:f5:39:42:16:1e:24:2e:4d:b5:2b:5b:63:
                    e8:81:90:8d:bc:ec:a1:0f:38:20:39:2c:19:37:61:
                    98:9a:ec:f2:2f:53:a1:d9:3f:9a:e6:d0:d5:a1:25:
                    5b:09:9b:c1:23:ba:17:eb:ff:28:6d:c4:15:50:74:
                    b8:97:f5:c3:f0:30:62:c7:b9:68:67:a5:3a:26:a5:
                    af:1c:62:90:9c:a4:dd:d2:6c:5a:24:8d:70:3c:34:
                    d7:96:d8:49:2a:ed:04:a3:77:6e:09:17:24:fc:2c:
                    fb:22:08:da:14:08:24:55:48:82:69:5b:40:72:a6:
                    cb:0c:43:e2:cb:bc:78:4a:47:21:94:cf:2b:58:a7:
                    e9:2e:c6:f3:a2:61:2f:38:94:18:fa:a1:67:35:5a:
                    ef:99:aa:73:f2:71:b4:5c:41:a3:38:fb:20:8d:03:
                    4d:3e:03:d1:12:36:d7:1c:8b:a4:cf:79:f7:f2:61:
                    08:d6:38:bc:24:f4:61:65:c0:f2:0e:b0:63:4b:1f:
                    30:78:87:ec:fe:9a:d2:7f:01:37:22:b8:53:bd:8b:
                    29:3b:ce:17:98:99:f7:a4:f9:61:6e:fa:9f:fd:a8:
                    df:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:36:63:6A:E0:D3:20:98:CA:4D:04:C1:E2:29:E8:C9:C0:EB:D7:31
            X509v3 Authority Key Identifier:
                keyid:AA:45:B6:80:FF:BE:CE:27:5B:39:CC:32:3B:49:EB:22:6D:CA:BA:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/AA45B680FFBECE275B39CC323B49EB226DCABAD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA45B680FFBECE275B39CC323B49EB226DCABAD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/3137302e37382e3138332e302f32342d3234203d3e20323636323735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:96:6c:f1:49:a1:c3:d4:b2:e7:f3:4d:c9:0e:ae:0b:cc:3a:
         d2:5c:4e:6a:3e:59:69:f0:cc:06:03:d5:40:f7:e0:20:0d:99:
         19:9a:88:26:d8:72:71:c9:e0:7f:1c:ac:61:52:b0:8e:d1:c5:
         e6:fc:82:fd:c4:93:75:dd:97:42:d5:26:cf:96:e1:f8:69:49:
         be:c0:e4:5c:b4:78:0e:7d:10:66:08:17:fa:de:8e:c0:71:ab:
         fb:4a:31:b3:1e:41:80:e3:73:2f:b3:02:0a:70:2f:9d:bf:97:
         34:6a:f5:a4:bf:09:c1:e3:38:70:66:7b:5d:7b:b0:82:71:9e:
         3a:86:84:97:de:6a:43:4a:33:39:c1:c4:06:8d:37:ad:e7:80:
         2e:ab:95:52:7a:ec:1c:da:ce:48:94:c0:b9:64:44:16:60:74:
         a1:bf:e8:34:e5:fa:ab:1b:40:6e:73:15:35:55:cc:86:63:c2:
         ad:f6:78:3e:8d:52:b1:9a:71:43:39:5c:63:22:15:dd:8e:79:
         3b:4e:15:40:14:6f:1e:55:c0:ff:65:b2:42:56:1f:bd:ff:94:
         fc:87:d6:3c:3d:f5:2e:2b:eb:a6:dc:f4:20:ff:fc:ad:c4:e9:
         ff:cb:e2:90:b5:e0:27:a9:46:b7:ae:84:e6:2b:f4:27:54:18:
         7f:6e:8e:84
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUeecCb/nYqn3KOdZa8+rtILmnNFowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUE0NUI2ODBGRkJFQ0UyNzVCMzlDQzMyM0I0OUVCMjI2
RENBQkFENjAeFw0yNTA3MzExOTU0NTBaFw0yNjA3MzAxOTU5NTBaMDMxMTAvBgNV
BAMTKERGMzY2MzZBRTBEMzIwOThDQTREMDRDMUUyMjlFOEM5QzBFQkQ3MzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPXGEASlQeJSfao/B8zTj5p5QT
2COr9+mDSs5dysH80PU5QhYeJC5NtStbY+iBkI287KEPOCA5LBk3YZia7PIvU6HZ
P5rm0NWhJVsJm8Ejuhfr/yhtxBVQdLiX9cPwMGLHuWhnpTompa8cYpCcpN3SbFok
jXA8NNeW2Ekq7QSjd24JFyT8LPsiCNoUCCRVSIJpW0BypssMQ+LLvHhKRyGUzytY
p+kuxvOiYS84lBj6oWc1Wu+ZqnPycbRcQaM4+yCNA00+A9ESNtcci6TPeffyYQjW
OLwk9GFlwPIOsGNLHzB4h+z+mtJ/ATciuFO9iyk7zheYmfek+WFu+p/9qN8zAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU3zZjauDTIJjKTQTB4inoycDr1zEwHwYDVR0j
BBgwFoAUqkW2gP++zidbOcwyO0nrIm3KutYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNm5kckozRWFEQ1hTUTdZbVo5WXFEWmZGUWoxOG10bVN3UXROdFRxMnlH
S3UvMC9BQTQ1QjY4MEZGQkVDRTI3NUIzOUNDMzIzQjQ5RUIyMjZEQ0FCQUQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBNDVCNjgwRkZCRUNFMjc1
QjM5Q0MzMjNCNDlFQjIyNkRDQUJBRDYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZuZHJKM0VhRENYU1E3WW1aOVlxRFpmRlFqMThtdG1Td1F0TnRUcTJ5R0t1LzAv
MzEzNzMwMmUzNzM4MmUzMTM4MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzYzMjM3MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACqTrcwDQYJKoZIhvcNAQELBQADggEBAI6WbPFJ
ocPUsufzTckOrgvMOtJcTmo+WWnwzAYD1UD34CANmRmaiCbYcnHJ4H8crGFSsI7R
xeb8gv3Ek3Xdl0LVJs+W4fhpSb7A5Fy0eA59EGYIF/rejsBxq/tKMbMeQYDjcy+z
AgpwL52/lzRq9aS/CcHjOHBme117sIJxnjqGhJfeakNKMznBxAaNN63ngC6rlVJ6
7BzazkiUwLlkRBZgdKG/6DTl+qsbQG5zFTVVzIZjwq32eD6NUrGacUM5XGMiFd2O
eTtOFUAUbx5VwP9lskJWH73/lPyH1jw99S4r66bc9CD//K3E6f/L4pC14CepRreu
hOYr9CdUGH9ujoQ=
-----END CERTIFICATE-----
Generated at Wed Aug 6 11:13:28 2025 by rpki-client