Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3137302e37382e3132302e302f32322d3234203d3e20323634303039.roa
File:                     3137302e37382e3132302e302f32322d3234203d3e20323634303039.roa (raw, json)
Hash identifier:          1opYPtLVmJbgysJRSAW69AB3hcLNgtJAvVFzTTA/ISk=
Subject key identifier:   BB:35:68:D7:B8:8E:E1:3E:F3:C3:44:25:DA:C5:10:4C:44:B2:CE:F8
Certificate issuer:       /CN=1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789
Certificate serial:       75D27ED22CB6AE5C7F5338CF7D08B6D507CC3A17
Authority key identifier: 1A:F7:BE:8F:4E:29:E1:CE:A1:A1:0C:0B:A0:43:05:42:12:6F:E7:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3137302e37382e3132302e302f32322d3234203d3e20323634303039.roa
Signing time:             Fri 25 Apr 2025 19:26:14 +0000
ROA not before:           Fri 25 Apr 2025 19:21:14 +0000
ROA not after:            Fri 24 Apr 2026 19:26:14 +0000
asID:                     264009
IP address blocks:        170.78.120.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.crl
                          rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 15:20:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:d2:7e:d2:2c:b6:ae:5c:7f:53:38:cf:7d:08:b6:d5:07:cc:3a:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789
        Validity
            Not Before: Apr 25 19:21:14 2025 GMT
            Not After : Apr 24 19:26:14 2026 GMT
        Subject: CN=BB3568D7B88EE13EF3C34425DAC5104C44B2CEF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:05:c6:98:2e:12:4d:66:e3:98:59:a5:cc:1d:
                    c9:79:4f:5f:c8:d7:c2:fd:d5:6c:d7:5f:f9:c8:8e:
                    d3:dd:d1:3a:d7:6d:b3:ac:65:99:c4:9b:50:37:fb:
                    ae:91:c7:fc:cd:c8:e9:b9:c0:03:e9:a1:51:57:c9:
                    32:bc:0c:3a:ca:60:29:f5:e4:b5:ca:5f:91:e5:d7:
                    6e:de:c9:5e:83:11:29:8a:b3:9c:09:fd:0c:e5:46:
                    c2:44:8e:1b:73:20:b1:11:2c:d0:41:b5:f5:37:20:
                    6d:e6:64:b6:b2:90:3d:88:51:71:2e:d3:48:ee:b9:
                    8e:6d:1d:9d:35:f1:0a:0d:c0:d3:f1:eb:c6:06:c1:
                    47:4a:98:b3:0a:f3:65:e5:3c:7f:b5:ee:d9:fb:64:
                    2b:35:4d:fd:d0:5a:d4:72:ad:06:86:01:fb:82:d6:
                    8e:fc:8f:82:df:24:bc:89:e7:0b:c9:b7:b9:66:e7:
                    52:51:32:d4:aa:b0:73:e2:85:e1:68:95:b6:32:f3:
                    49:aa:f8:d6:cf:3d:d2:e4:84:6b:41:15:41:a2:b4:
                    cf:93:af:27:ca:75:8e:fb:71:99:67:9e:6a:0c:a8:
                    e2:b5:f1:66:88:89:ce:1f:91:14:bb:34:0a:8a:39:
                    6a:1e:54:af:95:79:2f:69:20:c8:e7:a4:c8:5f:27:
                    2c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:35:68:D7:B8:8E:E1:3E:F3:C3:44:25:DA:C5:10:4C:44:B2:CE:F8
            X509v3 Authority Key Identifier:
                keyid:1A:F7:BE:8F:4E:29:E1:CE:A1:A1:0C:0B:A0:43:05:42:12:6F:E7:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3137302e37382e3132302e302f32322d3234203d3e20323634303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:58:ba:b4:49:54:6e:51:f0:bb:ef:f2:53:8f:2b:b3:15:0d:
         b7:ae:94:3c:5d:c9:2f:63:50:a5:aa:57:a1:6b:19:76:fa:93:
         80:18:40:07:88:01:b0:b5:dc:14:f7:a9:da:72:a6:55:e5:d0:
         da:c0:93:7c:47:c2:5f:fc:3e:04:a6:cb:f3:59:f7:86:7c:9f:
         27:e0:45:d4:ac:99:2c:cf:96:8e:ce:a9:af:0a:e7:a3:72:9e:
         b3:64:e2:c1:9a:0d:b3:3d:43:49:28:cf:46:26:bf:ad:a3:20:
         51:88:3b:33:4e:26:13:5a:c1:de:62:de:85:85:cb:06:99:90:
         5c:65:1a:99:d8:19:06:fb:a9:f8:ac:42:16:a9:03:f1:80:91:
         68:ad:f3:65:03:56:d1:ca:d0:aa:84:08:a8:d4:62:15:ac:ac:
         7b:e4:3e:6d:4d:30:5e:60:00:2f:de:e2:2b:11:24:75:25:fc:
         bb:9f:52:34:68:13:d7:69:a0:0f:ed:b7:95:66:47:77:82:6e:
         08:ed:c9:b8:12:87:5b:c3:ee:17:26:b8:93:10:83:23:59:c6:
         b2:49:2e:ec:ed:31:9d:e7:c2:c7:8b:14:78:45:9c:b9:58:02:
         c2:08:7e:90:1f:ff:31:b6:2c:08:8b:b4:81:9d:45:ae:95:d6:
         c3:c6:41:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:54:10 2025 by rpki-client on console.sobornost.net