Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/3137302e37382e39332e302f32342d3234203d3e20323635353030.roa
File:                     3137302e37382e39332e302f32342d3234203d3e20323635353030.roa (raw, json)
Hash identifier:          V3otmwknhvFGlkyTtkjNaYdlE8zAOUgRbqx3oe1KcUs=
Subject key identifier:   10:ED:60:96:85:19:21:4E:82:15:34:6E:6C:D9:88:7D:3B:00:66:BC
Certificate issuer:       /CN=111517C0C6C887A92A115B4EF5EE97035B4AB21F
Certificate serial:       0D4DF98EE4D392844165446EB7EF6519EDD20C25
Authority key identifier: 11:15:17:C0:C6:C8:87:A9:2A:11:5B:4E:F5:EE:97:03:5B:4A:B2:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/111517C0C6C887A92A115B4EF5EE97035B4AB21F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/3137302e37382e39332e302f32342d3234203d3e20323635353030.roa
Signing time:             Fri 02 May 2025 02:07:45 +0000
ROA not before:           Fri 02 May 2025 02:02:45 +0000
ROA not after:            Fri 01 May 2026 02:07:45 +0000
asID:                     265500
IP address blocks:        170.78.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/111517C0C6C887A92A115B4EF5EE97035B4AB21F.crl
                          rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/111517C0C6C887A92A115B4EF5EE97035B4AB21F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/111517C0C6C887A92A115B4EF5EE97035B4AB21F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 03:34:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:4d:f9:8e:e4:d3:92:84:41:65:44:6e:b7:ef:65:19:ed:d2:0c:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=111517C0C6C887A92A115B4EF5EE97035B4AB21F
        Validity
            Not Before: May  2 02:02:45 2025 GMT
            Not After : May  1 02:07:45 2026 GMT
        Subject: CN=10ED60968519214E8215346E6CD9887D3B0066BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f4:fa:14:bd:a2:71:89:ea:35:3a:67:3f:43:
                    a2:3c:16:dc:a4:3e:e9:e1:cd:21:82:f4:42:e1:13:
                    a8:12:de:8c:5c:27:4b:3b:d9:70:14:83:48:2c:31:
                    cf:7f:fa:fe:b7:d5:ca:63:db:2a:51:27:cf:b2:1e:
                    8a:73:e3:f4:6c:a5:dd:47:a6:f5:85:ed:4f:d4:c1:
                    af:7a:ee:00:6f:97:51:32:71:a4:39:49:e2:18:b1:
                    fc:00:dc:80:40:20:36:4d:c3:4d:47:12:f1:07:8a:
                    c7:aa:f2:96:81:2c:44:f0:55:ec:8d:b4:14:d6:cd:
                    c7:0b:36:3b:dd:6c:ec:99:38:c0:2a:be:ca:28:c1:
                    2c:7f:ba:2a:9d:66:a9:9c:b1:2c:0b:f1:82:d0:3b:
                    57:bf:9d:9d:37:41:d2:a8:c9:75:55:f9:41:e5:8e:
                    0d:6e:cd:75:b5:ed:c0:7a:49:63:ff:92:f8:73:04:
                    ab:0b:7a:dc:0e:fc:8a:aa:3a:0c:bf:ef:66:27:5d:
                    5a:60:11:3d:a7:c6:32:46:f6:25:3f:d9:7f:9d:f3:
                    ec:95:c7:88:6e:4f:f5:19:aa:c2:1d:d0:21:1c:71:
                    5b:94:ec:e1:eb:33:d8:ac:0b:b6:99:70:5e:f3:11:
                    98:09:fb:c8:e9:78:06:70:6a:03:8e:2b:5d:4e:72:
                    0c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:ED:60:96:85:19:21:4E:82:15:34:6E:6C:D9:88:7D:3B:00:66:BC
            X509v3 Authority Key Identifier:
                keyid:11:15:17:C0:C6:C8:87:A9:2A:11:5B:4E:F5:EE:97:03:5B:4A:B2:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/111517C0C6C887A92A115B4EF5EE97035B4AB21F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/111517C0C6C887A92A115B4EF5EE97035B4AB21F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/3137302e37382e39332e302f32342d3234203d3e20323635353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:b5:bd:b1:e9:ed:fb:be:77:76:30:88:eb:5d:36:be:a6:cb:
         ed:9a:59:fc:f8:de:c7:ae:9c:10:0e:27:ee:a4:d0:96:41:b4:
         69:3b:ed:12:b6:7e:04:4e:28:e1:cd:7f:5f:33:f2:22:17:e5:
         03:25:db:8d:c3:60:5a:f9:66:93:1c:bd:ff:f1:a6:b9:59:81:
         39:b9:d3:5e:a8:d9:a1:25:b0:0c:00:32:e0:f3:a5:af:62:f9:
         14:23:dc:68:3d:e8:29:a2:86:10:bc:05:e2:ac:bb:f9:1e:46:
         49:59:59:e3:4f:3b:14:70:2e:c2:64:c9:d0:c4:6c:27:22:cd:
         03:04:32:29:6f:d2:04:23:cf:b2:ea:db:8c:d5:82:79:7b:2d:
         d5:ea:c3:3c:b2:64:63:6a:4d:be:e6:16:fd:67:99:33:73:5c:
         a7:69:39:40:df:93:20:cb:33:4a:e6:e8:f2:32:5d:a1:3a:5c:
         cc:b2:79:1a:2a:5c:c7:95:01:48:34:13:4c:f1:8d:46:65:bf:
         86:fb:cd:53:17:e7:ac:6b:cb:68:10:3c:f4:90:8b:f0:dc:c3:
         d7:cc:82:e8:92:46:a9:c8:70:9a:11:ac:92:20:7d:7b:0e:63:
         d5:b3:6a:6c:64:fb:f2:6f:aa:72:6b:1a:ae:35:7c:25:99:05:
         95:10:51:ae
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUDU35juTTkoRBZURut+9lGe3SDCUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTExNTE3QzBDNkM4ODdBOTJBMTE1QjRFRjVFRTk3MDM1
QjRBQjIxRjAeFw0yNTA1MDIwMjAyNDVaFw0yNjA1MDEwMjA3NDVaMDMxMTAvBgNV
BAMTKDEwRUQ2MDk2ODUxOTIxNEU4MjE1MzQ2RTZDRDk4ODdEM0IwMDY2QkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK9PoUvaJxieo1Omc/Q6I8Ftyk
PunhzSGC9ELhE6gS3oxcJ0s72XAUg0gsMc9/+v631cpj2ypRJ8+yHopz4/Rspd1H
pvWF7U/Uwa967gBvl1EycaQ5SeIYsfwA3IBAIDZNw01HEvEHiseq8paBLETwVeyN
tBTWzccLNjvdbOyZOMAqvsoowSx/uiqdZqmcsSwL8YLQO1e/nZ03QdKoyXVV+UHl
jg1uzXW17cB6SWP/kvhzBKsLetwO/IqqOgy/72YnXVpgET2nxjJG9iU/2X+d8+yV
x4huT/UZqsId0CEccVuU7OHrM9isC7aZcF7zEZgJ+8jpeAZwagOOK11Ocgy1AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUEO1gloUZIU6CFTRubNmIfTsAZrwwHwYDVR0j
BBgwFoAUERUXwMbIh6kqEVtO9e6XA1tKsh8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1FBZGs3ZnplMWM3amgzZ29CNlZvcENTOHRqUVZOMUpmTlhCWmFoWFZj
eGovMC8xMTE1MTdDMEM2Qzg4N0E5MkExMTVCNEVGNUVFOTcwMzVCNEFCMjFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzExMTUxN0MwQzZDODg3QTky
QTExNUI0RUY1RUU5NzAzNUI0QUIyMUYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NRQWRrN2Z6ZTFjN2poM2dvQjZWb3BDUzh0alFWTjFKZk5YQlphaFhWY3hqLzAv
MzEzNzMwMmUzNzM4MmUzOTMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1
MzUzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqk5dMA0GCSqGSIb3DQEBCwUAA4IBAQCTtb2x6e37
vnd2MIjrXTa+psvtmln8+N7HrpwQDifupNCWQbRpO+0Stn4ETijhzX9fM/IiF+UD
JduNw2Ba+WaTHL3/8aa5WYE5udNeqNmhJbAMADLg86WvYvkUI9xoPegpooYQvAXi
rLv5HkZJWVnjTzsUcC7CZMnQxGwnIs0DBDIpb9IEI8+y6tuM1YJ5ey3V6sM8smRj
ak2+5hb9Z5kzc1ynaTlA35MgyzNK5ujyMl2hOlzMsnkaKlzHlQFINBNM8Y1GZb+G
+81TF+esa8toEDz0kIvw3MPXzILokkapyHCaEaySIH17DmPVs2psZPvyb6pyaxqu
NXwlmQWVEFGu
-----END CERTIFICATE-----
Generated at Fri May 2 03:58:30 2025 by rpki-client