Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/3137302e37382e312e302f32342d3234203d3e20323635343931.roa
File:                     3137302e37382e312e302f32342d3234203d3e20323635343931.roa (raw, json)
Hash identifier:          PQNmBpE4feQ20eIcRR+QRqj0eul1QpyAJdfzllKps8Q=
Subject key identifier:   0E:3D:6C:F2:0E:FD:45:2C:8F:C3:38:7E:0B:2E:7F:96:55:FC:5F:20
Certificate issuer:       /CN=205DB4059EFB07B48AE7EF22E19D03ACD75D514B
Certificate serial:       64D3BC998B177885EF9C0864293E4206513F007D
Authority key identifier: 20:5D:B4:05:9E:FB:07:B4:8A:E7:EF:22:E1:9D:03:AC:D7:5D:51:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/205DB4059EFB07B48AE7EF22E19D03ACD75D514B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/3137302e37382e312e302f32342d3234203d3e20323635343931.roa
Signing time:             Mon 13 Jul 2026 14:04:46 +0000
ROA not before:           Mon 13 Jul 2026 13:59:46 +0000
ROA not after:            Mon 12 Jul 2027 14:04:46 +0000
asID:                     265491
IP address blocks:        170.78.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/205DB4059EFB07B48AE7EF22E19D03ACD75D514B.crl
                          rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/205DB4059EFB07B48AE7EF22E19D03ACD75D514B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/205DB4059EFB07B48AE7EF22E19D03ACD75D514B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 01:32:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:d3:bc:99:8b:17:78:85:ef:9c:08:64:29:3e:42:06:51:3f:00:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=205DB4059EFB07B48AE7EF22E19D03ACD75D514B
        Validity
            Not Before: Jul 13 13:59:46 2026 GMT
            Not After : Jul 12 14:04:46 2027 GMT
        Subject: CN=0E3D6CF20EFD452C8FC3387E0B2E7F9655FC5F20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ea:2e:76:15:2d:09:b6:b5:29:6b:cb:39:6c:
                    0b:1d:94:b2:08:cc:18:35:28:45:33:8d:13:61:79:
                    b7:bb:c0:e3:d6:89:53:0b:90:bb:67:dc:97:70:64:
                    eb:cf:eb:62:8f:9e:0b:61:73:9c:c4:c6:78:c8:90:
                    a2:3e:74:38:f0:84:fd:12:25:39:79:d4:e4:70:90:
                    87:e0:88:59:38:e4:3d:1d:f1:54:be:50:57:2c:9b:
                    d7:1e:2f:2f:40:38:28:d6:3e:90:07:21:3d:fc:e6:
                    e7:46:dd:32:d5:28:bb:24:ac:b1:2c:3e:ba:ba:72:
                    4f:4a:b8:e7:91:82:e8:b4:d4:0e:dc:ab:33:a4:7e:
                    a0:41:4c:9b:c1:50:fa:f8:3c:60:fe:d0:a3:9d:79:
                    c2:75:16:46:72:21:0e:6a:11:95:a5:20:1b:15:0e:
                    4c:8c:85:50:df:a2:29:67:68:fb:cd:4e:83:78:43:
                    8e:b4:60:e7:5e:d5:ed:60:70:43:19:c0:a5:ac:ac:
                    71:27:c5:f0:7c:54:ea:ea:e9:4f:11:19:59:bc:4d:
                    45:2a:46:19:3c:0a:e8:bd:82:2b:b7:d0:99:45:44:
                    e2:1a:d2:67:9f:4d:17:e2:32:84:34:46:03:3b:4e:
                    9c:a1:a0:f4:a7:c7:2f:b8:fc:4f:a2:03:f1:34:18:
                    a8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:3D:6C:F2:0E:FD:45:2C:8F:C3:38:7E:0B:2E:7F:96:55:FC:5F:20
            X509v3 Authority Key Identifier:
                keyid:20:5D:B4:05:9E:FB:07:B4:8A:E7:EF:22:E1:9D:03:AC:D7:5D:51:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/205DB4059EFB07B48AE7EF22E19D03ACD75D514B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/205DB4059EFB07B48AE7EF22E19D03ACD75D514B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/3137302e37382e312e302f32342d3234203d3e20323635343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:f6:01:d7:76:c8:89:0e:84:6f:52:ab:43:57:5d:9b:81:bb:
         ef:49:09:cc:a1:d2:5d:1d:da:a0:58:f6:a1:20:12:1d:6d:70:
         db:c3:57:c1:9f:d4:eb:42:5a:2d:ba:fd:84:d0:e2:51:74:81:
         33:06:fa:7b:a8:44:fa:b8:ba:97:42:1d:62:e4:ae:83:61:c6:
         22:04:e7:b9:3c:40:4d:07:c0:67:e5:3a:b4:f7:43:d0:8e:e9:
         cb:85:12:47:88:5e:7d:6e:ac:40:ff:10:d6:68:11:33:2b:92:
         57:dc:c0:99:19:aa:a5:50:18:79:73:65:56:89:e5:41:02:c5:
         5a:8d:bc:5c:59:ad:42:51:c7:50:31:93:c4:b0:e9:45:e8:86:
         e2:2a:00:31:b0:f1:24:98:f3:dc:9c:ff:87:68:68:80:1e:e0:
         78:4a:1b:40:11:e6:1d:b1:e6:4b:2d:13:43:f1:17:8e:4e:04:
         21:85:24:42:c3:a7:c2:fa:07:e1:23:a7:13:b6:de:9b:e2:ca:
         06:ba:d7:cb:e8:39:ce:d1:fb:06:2e:73:10:84:0c:c0:7a:05:
         6d:ac:34:7d:8a:8f:2c:89:85:66:18:3e:53:a1:2a:7f:d6:02:
         df:58:57:d8:8c:1d:47:88:7e:4b:6d:d0:e9:8b:f6:55:78:94:
         c2:01:63:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:59:00 2026 by rpki-client