Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ETm9SHjuk1Y4e78y5pPtETXRECkjNRi7FB5zX5cv6uNs/0/3137302e37382e3132382e302f32322d3234203d3e20323636323739.roa
File:                     3137302e37382e3132382e302f32322d3234203d3e20323636323739.roa (raw, json)
Hash identifier:          57oZeQM1V/GKoPcputJSWtiVHR2PWSWuQs3M6ITkfzI=
Subject key identifier:   76:63:BA:7A:81:1C:7F:02:FD:3A:CF:B3:D4:FD:55:90:49:52:D7:B7
Certificate issuer:       /CN=79E11200E9DB045F5A948F7CDE1F2E88F8EFE1A1
Certificate serial:       33D048625D24E47ABEC175FD7BE787D19ADB7CE1
Authority key identifier: 79:E1:12:00:E9:DB:04:5F:5A:94:8F:7C:DE:1F:2E:88:F8:EF:E1:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E11200E9DB045F5A948F7CDE1F2E88F8EFE1A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ETm9SHjuk1Y4e78y5pPtETXRECkjNRi7FB5zX5cv6uNs/0/3137302e37382e3132382e302f32322d3234203d3e20323636323739.roa
Signing time:             Wed 07 May 2025 07:49:13 +0000
ROA not before:           Wed 07 May 2025 07:44:13 +0000
ROA not after:            Wed 06 May 2026 07:49:13 +0000
asID:                     266279
IP address blocks:        170.78.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ETm9SHjuk1Y4e78y5pPtETXRECkjNRi7FB5zX5cv6uNs/0/79E11200E9DB045F5A948F7CDE1F2E88F8EFE1A1.crl
                          rsync://rpki-repo.registro.br/repo/ETm9SHjuk1Y4e78y5pPtETXRECkjNRi7FB5zX5cv6uNs/0/79E11200E9DB045F5A948F7CDE1F2E88F8EFE1A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E11200E9DB045F5A948F7CDE1F2E88F8EFE1A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 May 2025 06:16:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:d0:48:62:5d:24:e4:7a:be:c1:75:fd:7b:e7:87:d1:9a:db:7c:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79E11200E9DB045F5A948F7CDE1F2E88F8EFE1A1
        Validity
            Not Before: May  7 07:44:13 2025 GMT
            Not After : May  6 07:49:13 2026 GMT
        Subject: CN=7663BA7A811C7F02FD3ACFB3D4FD55904952D7B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7b:4d:19:6a:f5:14:7c:30:3a:79:c2:8f:2f:
                    be:8d:aa:2d:9c:49:08:3c:8e:c6:bf:3e:2a:97:3c:
                    3b:74:56:a9:57:9d:0c:b4:e6:10:23:33:26:4b:3a:
                    54:e0:22:c1:e6:ea:f3:3f:f6:92:87:1f:a3:ba:47:
                    d6:cc:73:74:5e:96:47:5b:59:df:e4:e1:cb:ee:eb:
                    3f:01:bc:5b:d0:b0:95:c4:cd:ee:d6:aa:6b:07:f4:
                    04:17:87:bb:d6:a3:c6:09:1b:d8:1e:c4:d1:01:0f:
                    a2:87:0e:f3:15:53:dd:73:e2:0f:70:84:d9:2a:69:
                    83:36:57:68:a5:e6:0f:b1:35:2f:76:76:3b:26:73:
                    b7:bf:15:8a:a5:2c:52:9f:66:61:9e:f5:6f:e7:47:
                    57:a1:38:92:82:07:1c:7e:fe:17:d5:4a:ad:ae:6e:
                    6e:7e:1f:33:c4:db:a8:77:e6:89:77:1b:b0:cd:da:
                    86:7f:36:8e:57:88:60:ee:41:8f:00:f1:e6:87:19:
                    8c:56:56:28:55:6e:e7:23:b9:68:8d:8b:79:51:34:
                    9f:ae:c6:7d:68:7a:65:5b:b5:da:27:e4:98:74:d8:
                    83:10:d3:85:52:54:88:c5:c7:61:8f:23:3f:22:eb:
                    ca:18:c5:82:b7:5f:e7:cb:c9:7a:fb:12:fa:2f:36:
                    cd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:63:BA:7A:81:1C:7F:02:FD:3A:CF:B3:D4:FD:55:90:49:52:D7:B7
            X509v3 Authority Key Identifier:
                keyid:79:E1:12:00:E9:DB:04:5F:5A:94:8F:7C:DE:1F:2E:88:F8:EF:E1:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ETm9SHjuk1Y4e78y5pPtETXRECkjNRi7FB5zX5cv6uNs/0/79E11200E9DB045F5A948F7CDE1F2E88F8EFE1A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E11200E9DB045F5A948F7CDE1F2E88F8EFE1A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ETm9SHjuk1Y4e78y5pPtETXRECkjNRi7FB5zX5cv6uNs/0/3137302e37382e3132382e302f32322d3234203d3e20323636323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:5e:5a:ff:28:18:f7:3f:72:a5:17:b5:c5:02:66:c5:50:f0:
         8b:ef:a6:bd:69:71:d9:de:44:90:03:92:e7:78:87:ec:d6:e1:
         f8:1b:80:b9:8d:a8:12:ab:e4:46:d3:7f:44:ce:dd:f7:02:0c:
         1d:f5:97:14:eb:1a:1f:d6:c6:b2:73:a3:49:86:aa:6f:bb:d9:
         ff:1a:6d:97:50:f4:28:31:b3:cd:f1:df:7f:2b:55:c6:25:c7:
         96:2b:dc:79:cb:87:5f:e2:25:1b:ef:43:ae:b1:4b:2d:ef:fd:
         4b:19:99:36:82:8f:eb:26:0c:cf:ce:37:ef:9f:ef:6b:dd:9b:
         c1:4f:0d:fd:94:ec:f1:20:89:84:26:8e:a2:95:2a:e9:c9:7e:
         47:b7:a6:6c:7d:86:ff:fa:1e:dc:58:00:46:34:cb:25:28:85:
         54:63:7f:57:99:1e:a7:74:50:39:8c:41:9e:1e:e2:93:d8:b2:
         a5:ff:ea:93:3a:f1:f4:61:9c:5e:ee:75:6a:65:a1:2d:ed:c9:
         5c:a6:1b:c3:a1:8b:6a:2b:f4:2b:9b:45:c8:3a:c8:06:b2:d8:
         40:28:c9:df:8e:a5:fa:03:1d:bf:52:39:cf:fb:56:1b:5a:73:
         0b:28:b8:04:c7:3d:49:e9:6b:f6:38:8e:44:4a:dc:a6:af:d7:
         08:0a:26:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 20:20:48 2025 by rpki-client