Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/3137302e37382e39322e302f32322d3232203d3e20323635353030.roa
File:                     3137302e37382e39322e302f32322d3232203d3e20323635353030.roa (raw, json)
Hash identifier:          1L79XwiPjefyxwPH4tKwWuEn6L+vqqzmk0eocEafe2Q=
Subject key identifier:   8D:D4:8C:61:45:FF:B3:9F:6A:18:7B:AC:F2:E3:10:E6:72:F6:B8:3E
Certificate issuer:       /CN=111517C0C6C887A92A115B4EF5EE97035B4AB21F
Certificate serial:       7C9B14853B0DC208BB69BC4C3DA777599A7215EC
Authority key identifier: 11:15:17:C0:C6:C8:87:A9:2A:11:5B:4E:F5:EE:97:03:5B:4A:B2:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/111517C0C6C887A92A115B4EF5EE97035B4AB21F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/3137302e37382e39322e302f32322d3232203d3e20323635353030.roa
Signing time:             Fri 02 May 2025 02:12:48 +0000
ROA not before:           Fri 02 May 2025 02:07:48 +0000
ROA not after:            Fri 01 May 2026 02:12:48 +0000
asID:                     265500
IP address blocks:        170.78.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/111517C0C6C887A92A115B4EF5EE97035B4AB21F.crl
                          rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/111517C0C6C887A92A115B4EF5EE97035B4AB21F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/111517C0C6C887A92A115B4EF5EE97035B4AB21F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 03:34:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:9b:14:85:3b:0d:c2:08:bb:69:bc:4c:3d:a7:77:59:9a:72:15:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=111517C0C6C887A92A115B4EF5EE97035B4AB21F
        Validity
            Not Before: May  2 02:07:48 2025 GMT
            Not After : May  1 02:12:48 2026 GMT
        Subject: CN=8DD48C6145FFB39F6A187BACF2E310E672F6B83E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4b:05:9c:70:21:4e:5d:b0:d3:91:93:0a:44:
                    fa:0c:8b:45:49:ed:f5:2a:ac:38:5e:55:f7:08:bf:
                    ff:cb:13:0e:d0:fa:4f:c3:fd:bc:17:a6:15:62:da:
                    0b:b2:18:40:2f:fe:4c:61:ad:b2:48:96:90:4c:3f:
                    47:f0:d7:fc:8c:ac:07:86:bc:98:18:6e:c7:e1:8d:
                    e2:e5:70:4b:49:b9:c7:61:74:eb:f1:fc:f6:62:13:
                    c0:0e:ca:75:08:7f:4b:24:2b:d7:40:6c:50:45:35:
                    1e:23:6d:ca:96:00:55:67:b5:e4:5a:25:17:a9:49:
                    ab:28:7c:ed:6e:d5:fc:07:f9:bb:49:8f:91:ef:9b:
                    77:76:20:bb:42:1b:53:6a:37:5a:0e:45:8e:5d:12:
                    d8:fc:78:95:c9:24:42:b8:f6:91:2a:f6:35:74:bf:
                    51:83:b0:e7:99:24:7d:68:f4:9b:45:05:cb:4a:26:
                    46:e3:32:34:31:c4:38:02:cc:4a:4e:7c:89:8a:86:
                    45:0e:4c:3d:f8:a3:86:fe:65:05:ab:1e:6d:a4:43:
                    a6:6c:79:9f:cf:58:44:ff:1f:62:aa:3d:81:cf:dd:
                    a2:3c:f9:d3:f5:74:3a:4b:78:3f:7c:18:31:0b:34:
                    ad:17:e3:ed:b0:77:f3:11:8e:e0:71:b3:e2:db:20:
                    9e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:D4:8C:61:45:FF:B3:9F:6A:18:7B:AC:F2:E3:10:E6:72:F6:B8:3E
            X509v3 Authority Key Identifier:
                keyid:11:15:17:C0:C6:C8:87:A9:2A:11:5B:4E:F5:EE:97:03:5B:4A:B2:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/111517C0C6C887A92A115B4EF5EE97035B4AB21F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/111517C0C6C887A92A115B4EF5EE97035B4AB21F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/3137302e37382e39322e302f32322d3232203d3e20323635353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:e4:8d:60:70:7a:94:7f:dd:8f:76:e3:02:b6:23:99:e7:2b:
         77:06:c1:56:98:c8:38:b7:b1:67:93:03:f0:bf:80:32:3d:36:
         d0:47:63:62:4f:12:8f:54:99:66:80:4b:4e:80:c2:60:54:1f:
         5d:d3:ad:36:af:e4:28:41:db:01:3f:81:18:14:1b:eb:df:b9:
         5a:e7:a6:3b:8d:ee:11:29:fd:0e:54:81:d8:95:6b:09:e9:4d:
         fd:e6:3a:06:f8:f8:25:ae:23:87:7a:5b:20:ba:da:bf:e0:24:
         59:2e:70:f4:95:13:bf:a3:09:f3:aa:ba:ba:66:f5:ec:34:52:
         05:cc:77:5c:e1:36:9b:69:db:8d:58:b0:ff:d9:3a:cb:e3:cd:
         89:5b:d1:27:4f:28:0d:a1:6a:4a:4e:55:61:f2:30:9d:0e:81:
         66:84:ad:25:80:c5:e0:92:64:ae:97:91:88:81:9b:ac:05:e0:
         08:32:08:be:52:c0:31:34:d9:12:ae:27:53:e4:7c:15:ac:66:
         6e:21:2b:86:e9:ac:bc:eb:08:12:9c:d4:6d:c0:54:44:ca:e2:
         f0:aa:af:6f:44:f3:70:30:86:8c:8d:98:5a:d6:ae:69:cd:31:
         f1:da:f7:87:50:03:45:2b:e7:d4:81:27:c2:1a:cd:8d:3c:9b:
         c0:99:0b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 11:17:22 2025 by rpki-client