Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/3137302e37382e39342e302f32342d3234203d3e20323635353030.roa
File:                     3137302e37382e39342e302f32342d3234203d3e20323635353030.roa (raw, json)
Hash identifier:          zKtgOhlDVwRZ6x1Eow5klQg+zdzS75vjKnWSxuFp3sE=
Subject key identifier:   A6:9A:73:17:00:17:0E:F0:36:7E:4E:63:74:4C:59:AF:42:BE:55:D0
Certificate issuer:       /CN=111517C0C6C887A92A115B4EF5EE97035B4AB21F
Certificate serial:       610FA5A18037C69996CFD2A87D86715A292905B0
Authority key identifier: 11:15:17:C0:C6:C8:87:A9:2A:11:5B:4E:F5:EE:97:03:5B:4A:B2:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/111517C0C6C887A92A115B4EF5EE97035B4AB21F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/3137302e37382e39342e302f32342d3234203d3e20323635353030.roa
Signing time:             Fri 02 May 2025 02:07:48 +0000
ROA not before:           Fri 02 May 2025 02:02:48 +0000
ROA not after:            Fri 01 May 2026 02:07:48 +0000
asID:                     265500
IP address blocks:        170.78.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/111517C0C6C887A92A115B4EF5EE97035B4AB21F.crl
                          rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/111517C0C6C887A92A115B4EF5EE97035B4AB21F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/111517C0C6C887A92A115B4EF5EE97035B4AB21F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 12:52:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:0f:a5:a1:80:37:c6:99:96:cf:d2:a8:7d:86:71:5a:29:29:05:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=111517C0C6C887A92A115B4EF5EE97035B4AB21F
        Validity
            Not Before: May  2 02:02:48 2025 GMT
            Not After : May  1 02:07:48 2026 GMT
        Subject: CN=A69A731700170EF0367E4E63744C59AF42BE55D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:be:20:e0:5f:f8:0e:eb:d4:0b:54:2e:ec:8c:
                    ca:87:c7:57:9b:20:58:7d:b5:37:80:90:f0:b0:2e:
                    bb:f2:22:08:ec:94:71:81:fc:86:7b:c2:d3:54:42:
                    3b:10:fd:e7:21:f2:51:84:fe:01:ff:c2:c9:38:f6:
                    fe:b9:c2:b0:8b:78:3a:42:12:ec:4a:99:98:ff:09:
                    9f:b6:66:56:c8:60:93:c2:73:44:c7:92:49:49:2a:
                    b0:14:1e:f6:e7:71:aa:e7:39:6a:b3:e1:a4:95:9e:
                    7a:cd:e2:f5:2b:10:94:8e:16:e9:75:ae:b1:04:a6:
                    0e:d1:11:31:3c:29:ca:77:40:16:7b:bb:0a:5e:dc:
                    18:68:21:c8:15:ec:01:7b:57:fb:3e:c9:9f:5c:4a:
                    e0:d5:71:29:1e:19:31:41:0f:4e:17:f3:9c:ba:7d:
                    a4:3c:54:81:f5:2d:79:81:95:69:f0:2c:1a:34:b6:
                    bc:38:b5:b7:f9:69:29:ee:8d:2b:31:73:fc:36:1a:
                    17:25:5e:53:d4:99:38:63:01:b4:a2:79:18:a6:39:
                    f6:c1:76:8d:d6:d7:6c:58:e9:f2:15:75:13:89:6c:
                    54:18:98:1b:ab:ee:da:38:87:fa:d1:85:6a:6c:df:
                    d4:98:73:0f:22:3a:a8:76:40:85:65:ea:3f:ce:29:
                    d8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:9A:73:17:00:17:0E:F0:36:7E:4E:63:74:4C:59:AF:42:BE:55:D0
            X509v3 Authority Key Identifier:
                keyid:11:15:17:C0:C6:C8:87:A9:2A:11:5B:4E:F5:EE:97:03:5B:4A:B2:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/111517C0C6C887A92A115B4EF5EE97035B4AB21F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/111517C0C6C887A92A115B4EF5EE97035B4AB21F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/3137302e37382e39342e302f32342d3234203d3e20323635353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:65:2f:00:90:8f:d0:d1:7d:9e:19:71:49:76:4c:87:29:7d:
         5d:b1:65:10:29:36:17:27:ff:7d:c7:65:27:ec:3c:4b:77:f9:
         3d:f6:f6:d5:08:5c:0b:4f:8e:36:ca:d2:05:7d:ce:1b:3c:ef:
         cc:20:69:ea:f3:bb:69:7a:ab:53:84:30:86:d1:3a:2f:f8:e0:
         f1:49:91:0c:61:79:80:fe:46:b6:53:c1:99:6a:91:b2:fa:67:
         3d:1c:a2:0f:75:35:b8:a1:8a:8e:4b:3a:4d:14:d9:bc:97:14:
         c9:4d:47:e0:3c:e5:ce:8e:d0:bb:33:b9:83:83:44:26:1d:b1:
         0c:9d:10:e9:a4:52:a0:c6:09:10:bc:66:72:85:f9:e1:cd:86:
         d3:c6:36:13:78:df:72:a0:f2:7e:c7:90:cc:49:ac:92:3b:a6:
         0d:89:e6:a7:c9:49:6f:f6:b3:26:4e:be:8a:1a:43:54:40:5c:
         ae:42:e9:a2:c4:5f:24:fd:d7:a4:b8:97:b8:03:52:1e:76:b5:
         89:19:dc:ec:ae:9a:e7:a8:79:92:5f:1d:8d:d5:2e:69:37:99:
         3d:5f:cd:1f:6e:c8:67:1a:24:1f:29:e3:24:08:a6:84:8e:64:
         d6:5a:1e:25:54:66:a0:59:06:f6:4d:ab:f1:da:a6:71:ee:47:
         17:8d:fa:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:26:23 2025 by rpki-client