Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/3137302e37382e39352e302f32342d3234203d3e20323635353030.roa
File:                     3137302e37382e39352e302f32342d3234203d3e20323635353030.roa (raw, json)
Hash identifier:          lb4CEZK+thpdYad8e+tPiwZQLh+sceLqP2SkaOcU58w=
Subject key identifier:   9B:BE:AB:E1:87:38:F6:F7:87:D5:6F:E2:F8:70:9F:00:EB:9E:1A:51
Certificate issuer:       /CN=111517C0C6C887A92A115B4EF5EE97035B4AB21F
Certificate serial:       0EBDFEE0C8F9731A00989BEC888F52A73E5BE71A
Authority key identifier: 11:15:17:C0:C6:C8:87:A9:2A:11:5B:4E:F5:EE:97:03:5B:4A:B2:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/111517C0C6C887A92A115B4EF5EE97035B4AB21F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/3137302e37382e39352e302f32342d3234203d3e20323635353030.roa
Signing time:             Fri 02 May 2025 02:07:50 +0000
ROA not before:           Fri 02 May 2025 02:02:50 +0000
ROA not after:            Fri 01 May 2026 02:07:50 +0000
asID:                     265500
IP address blocks:        170.78.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/111517C0C6C887A92A115B4EF5EE97035B4AB21F.crl
                          rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/111517C0C6C887A92A115B4EF5EE97035B4AB21F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/111517C0C6C887A92A115B4EF5EE97035B4AB21F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 05:15:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:bd:fe:e0:c8:f9:73:1a:00:98:9b:ec:88:8f:52:a7:3e:5b:e7:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=111517C0C6C887A92A115B4EF5EE97035B4AB21F
        Validity
            Not Before: May  2 02:02:50 2025 GMT
            Not After : May  1 02:07:50 2026 GMT
        Subject: CN=9BBEABE18738F6F787D56FE2F8709F00EB9E1A51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:16:28:d3:30:52:5e:05:5f:5d:4a:d4:92:dc:
                    9b:d5:4f:57:df:65:d7:29:47:6c:36:eb:60:c6:b8:
                    e8:ab:39:40:a1:45:2a:04:9b:d8:88:bf:d9:2d:48:
                    ce:16:26:64:b0:24:d9:b1:b7:4d:39:3e:80:6d:83:
                    07:6e:07:b7:ac:d5:84:e8:04:55:8a:4a:41:60:fc:
                    8e:d1:a7:2f:49:87:46:5d:9f:a9:b5:55:92:91:ae:
                    3b:1a:e1:04:96:f0:45:b4:7e:95:f9:fc:53:3b:6e:
                    e3:d1:29:50:a3:d7:7a:d5:d8:24:7d:2e:3f:5c:e8:
                    8b:13:bc:63:35:b1:56:09:c5:bc:ae:d6:13:1c:2c:
                    79:fb:49:2e:a3:87:2b:89:2a:52:d6:d1:bb:01:60:
                    84:6c:24:e3:ee:1a:7f:d2:ed:e6:59:f7:47:0f:35:
                    9c:a4:5d:c9:85:69:13:02:98:06:f9:b4:75:43:7b:
                    73:c6:04:d0:71:d9:51:11:68:f0:61:fe:68:ae:d8:
                    6a:aa:f4:ea:68:55:af:7e:c5:1b:02:85:90:6b:a1:
                    50:5d:88:f1:6b:be:e4:31:5a:3a:48:08:f5:3a:6b:
                    a3:3a:55:5e:d3:dd:c8:14:d4:8f:2c:31:ae:34:58:
                    c2:89:fb:55:d9:d6:a4:9b:52:3a:de:8e:58:75:22:
                    1c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:BE:AB:E1:87:38:F6:F7:87:D5:6F:E2:F8:70:9F:00:EB:9E:1A:51
            X509v3 Authority Key Identifier:
                keyid:11:15:17:C0:C6:C8:87:A9:2A:11:5B:4E:F5:EE:97:03:5B:4A:B2:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/111517C0C6C887A92A115B4EF5EE97035B4AB21F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/111517C0C6C887A92A115B4EF5EE97035B4AB21F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/3137302e37382e39352e302f32342d3234203d3e20323635353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:d8:4e:58:1e:40:d9:a1:2c:b1:46:c4:30:69:7a:eb:f9:ac:
         84:63:ac:35:da:9c:db:68:b9:05:af:05:8c:0b:a9:f5:2f:20:
         6e:03:0c:2b:e3:62:2a:6c:df:56:39:93:4b:fe:d8:bf:99:44:
         8d:82:50:ac:d1:53:a1:39:c1:4a:b7:32:49:7d:1b:ed:eb:8c:
         fb:53:6c:96:47:44:e8:42:6e:b4:79:ff:99:82:63:89:e6:50:
         2d:e1:a0:36:37:04:24:56:19:5f:72:2f:de:ac:13:1c:89:cb:
         b9:bd:9d:39:b5:85:1a:02:a3:eb:f8:43:a6:cb:7b:da:39:d2:
         61:00:70:44:1b:62:d7:69:34:fc:0e:91:8c:ba:04:47:d3:0c:
         42:5e:00:f4:05:18:e9:4a:89:2b:c6:4f:46:0c:a0:f8:64:86:
         ee:cd:22:69:28:2f:08:13:12:c0:09:e2:1f:b3:d3:55:ad:7d:
         ef:4b:e7:cc:84:a1:67:4f:0c:ca:0c:d8:cb:1b:67:36:63:8e:
         c0:fe:98:66:5f:d6:97:1e:2f:76:8a:15:75:89:a4:bf:ea:a3:
         3f:b9:c7:e9:59:2b:2f:2f:da:90:f0:e0:81:eb:cd:1e:73:2e:
         10:84:68:9e:29:64:76:e4:5e:1a:a8:74:91:6d:65:34:7c:0a:
         a7:ff:7a:2e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUDr3+4Mj5cxoAmJvsiI9Spz5b5xowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTExNTE3QzBDNkM4ODdBOTJBMTE1QjRFRjVFRTk3MDM1
QjRBQjIxRjAeFw0yNTA1MDIwMjAyNTBaFw0yNjA1MDEwMjA3NTBaMDMxMTAvBgNV
BAMTKDlCQkVBQkUxODczOEY2Rjc4N0Q1NkZFMkY4NzA5RjAwRUI5RTFBNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0FijTMFJeBV9dStSS3JvVT1ff
ZdcpR2w262DGuOirOUChRSoEm9iIv9ktSM4WJmSwJNmxt005PoBtgwduB7es1YTo
BFWKSkFg/I7Rpy9Jh0Zdn6m1VZKRrjsa4QSW8EW0fpX5/FM7buPRKVCj13rV2CR9
Lj9c6IsTvGM1sVYJxbyu1hMcLHn7SS6jhyuJKlLW0bsBYIRsJOPuGn/S7eZZ90cP
NZykXcmFaRMCmAb5tHVDe3PGBNBx2VERaPBh/miu2Gqq9OpoVa9+xRsChZBroVBd
iPFrvuQxWjpICPU6a6M6VV7T3cgU1I8sMa40WMKJ+1XZ1qSbUjrejlh1IhxBAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUm76r4Yc49veH1W/i+HCfAOueGlEwHwYDVR0j
BBgwFoAUERUXwMbIh6kqEVtO9e6XA1tKsh8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1FBZGs3ZnplMWM3amgzZ29CNlZvcENTOHRqUVZOMUpmTlhCWmFoWFZj
eGovMC8xMTE1MTdDMEM2Qzg4N0E5MkExMTVCNEVGNUVFOTcwMzVCNEFCMjFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzExMTUxN0MwQzZDODg3QTky
QTExNUI0RUY1RUU5NzAzNUI0QUIyMUYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NRQWRrN2Z6ZTFjN2poM2dvQjZWb3BDUzh0alFWTjFKZk5YQlphaFhWY3hqLzAv
MzEzNzMwMmUzNzM4MmUzOTM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1
MzUzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqk5fMA0GCSqGSIb3DQEBCwUAA4IBAQCG2E5YHkDZ
oSyxRsQwaXrr+ayEY6w12pzbaLkFrwWMC6n1LyBuAwwr42IqbN9WOZNL/ti/mUSN
glCs0VOhOcFKtzJJfRvt64z7U2yWR0ToQm60ef+ZgmOJ5lAt4aA2NwQkVhlfci/e
rBMcicu5vZ05tYUaAqPr+EOmy3vaOdJhAHBEG2LXaTT8DpGMugRH0wxCXgD0BRjp
Sokrxk9GDKD4ZIbuzSJpKC8IExLACeIfs9NVrX3vS+fMhKFnTwzKDNjLG2c2Y47A
/phmX9aXHi92ihV1iaS/6qM/ucfpWSsvL9qQ8OCB680ecy4QhGieKWR25F4aqHSR
bWU0fAqn/3ou
-----END CERTIFICATE-----
Generated at Tue May 13 15:10:58 2025 by rpki-client