Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/3137302e37382e3234302e302f32322d3234203d3e20323634313238.roa
File:                     3137302e37382e3234302e302f32322d3234203d3e20323634313238.roa (raw, json)
Hash identifier:          oz/Xjh+jR/plturHwyxcC3YqrerDjS9XoAP5thbB1QY=
Subject key identifier:   F5:6E:55:32:5E:2A:47:58:F1:6C:B8:51:DA:CA:A5:B7:E8:C8:46:52
Certificate issuer:       /CN=E3C11484C8B4CD3F766170F9E324672A733D9604
Certificate serial:       38772AA42ACEB90F035EBBD89D372A4F639819BD
Authority key identifier: E3:C1:14:84:C8:B4:CD:3F:76:61:70:F9:E3:24:67:2A:73:3D:96:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3C11484C8B4CD3F766170F9E324672A733D9604.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/3137302e37382e3234302e302f32322d3234203d3e20323634313238.roa
Signing time:             Thu 06 Mar 2025 10:21:53 +0000
ROA not before:           Thu 06 Mar 2025 10:16:53 +0000
ROA not after:            Thu 05 Mar 2026 10:21:53 +0000
asID:                     264128
IP address blocks:        170.78.240.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/E3C11484C8B4CD3F766170F9E324672A733D9604.crl
                          rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/E3C11484C8B4CD3F766170F9E324672A733D9604.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3C11484C8B4CD3F766170F9E324672A733D9604.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:77:2a:a4:2a:ce:b9:0f:03:5e:bb:d8:9d:37:2a:4f:63:98:19:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3C11484C8B4CD3F766170F9E324672A733D9604
        Validity
            Not Before: Mar  6 10:16:53 2025 GMT
            Not After : Mar  5 10:21:53 2026 GMT
        Subject: CN=F56E55325E2A4758F16CB851DACAA5B7E8C84652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:85:b2:59:bf:5d:2a:02:82:fb:46:e4:7b:2f:
                    fd:ce:d2:c3:a0:4c:79:45:b9:6e:dd:50:13:4d:a4:
                    7d:63:d2:a2:47:68:a7:27:0a:57:17:1f:bd:79:61:
                    04:40:c3:44:82:81:d2:6d:14:50:18:4c:fd:b7:76:
                    36:ec:7d:b3:99:0c:ca:4e:7d:29:eb:dd:fe:65:43:
                    f4:ac:83:29:ea:28:92:6a:da:7e:c0:58:fb:af:de:
                    2d:ae:f4:4c:a5:28:92:c7:cf:54:35:38:64:79:5d:
                    9a:d1:ab:14:7e:fc:b6:7f:d7:5d:80:36:e0:a7:ab:
                    57:4a:08:2e:76:6b:e3:c3:e0:7e:cb:4a:c2:5f:2a:
                    d4:44:b2:f2:4a:e9:70:87:ab:39:9c:fe:8e:22:a4:
                    95:4c:07:33:f6:39:bf:40:7f:ec:28:45:66:55:11:
                    c6:13:c6:f4:fa:20:94:d6:a7:54:fa:1d:d4:31:b9:
                    32:46:2c:b4:a1:22:3e:98:6a:fb:a9:0b:8a:47:18:
                    44:d7:c2:12:a7:bd:35:f9:06:a0:4c:78:12:da:56:
                    3a:ed:d9:53:22:0d:11:97:fe:3f:d6:ae:1f:27:3d:
                    02:71:d5:cf:bc:3a:ca:bc:58:f6:c4:a1:2e:f3:e6:
                    24:5b:a2:1a:41:bc:6f:00:7a:5b:6b:5e:7d:4a:38:
                    0b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:6E:55:32:5E:2A:47:58:F1:6C:B8:51:DA:CA:A5:B7:E8:C8:46:52
            X509v3 Authority Key Identifier:
                keyid:E3:C1:14:84:C8:B4:CD:3F:76:61:70:F9:E3:24:67:2A:73:3D:96:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/E3C11484C8B4CD3F766170F9E324672A733D9604.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3C11484C8B4CD3F766170F9E324672A733D9604.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/3137302e37382e3234302e302f32322d3234203d3e20323634313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:94:2d:03:72:c9:09:20:ec:36:d6:8c:99:b0:c0:6b:72:7c:
         f6:86:f0:1f:46:0d:4b:83:8f:d7:27:73:08:2b:18:a5:21:9a:
         b4:f7:39:1e:2f:83:17:6c:28:86:c2:94:f9:00:90:ac:6d:77:
         b1:44:57:97:86:54:ef:6b:ed:e7:5e:e9:18:c0:12:b9:25:ca:
         b3:2c:4a:49:8d:7d:c0:71:64:6e:bc:8f:ca:76:f5:0a:ff:40:
         12:53:c6:4b:99:2e:eb:38:23:49:22:7c:2a:a5:90:6d:de:29:
         7c:05:46:34:03:df:85:62:ef:04:a9:b0:89:59:d7:21:b0:40:
         ab:4d:20:b3:ff:06:45:92:f7:2a:a1:eb:af:a9:00:82:3a:bc:
         e3:6b:f6:da:ac:36:32:a1:65:0d:0b:f0:cd:74:84:b9:57:33:
         86:b7:78:2f:9c:45:c2:7d:65:54:c5:76:51:3d:c8:9d:ac:8f:
         ec:58:ec:f3:05:6c:28:70:f9:cb:1a:ef:c9:07:d4:df:c4:ee:
         14:30:e5:c4:81:4a:da:cf:d8:fd:ce:97:5d:4e:ad:b7:95:c8:
         44:79:f9:6c:ce:a5:e2:01:27:28:21:28:0d:2f:1f:5f:cf:a6:
         0c:2b:ee:2d:30:33:1d:1b:fe:85:e5:a8:5b:cb:9e:e6:75:d4:
         63:51:10:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:18 2025 by rpki-client on console.sobornost.net