Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34362e302f32342d3332203d3e20323632373038.roa
File:                     3138362e3139332e34362e302f32342d3332203d3e20323632373038.roa (raw, json)
Hash identifier:          S4wAepn2B2iuqNf3se8Q6Fc041Wiv6LMrGIlamD5otY=
Subject key identifier:   14:81:47:00:C2:6A:82:01:36:41:F0:52:96:28:10:9E:19:86:B8:7F
Certificate issuer:       /CN=78346DE4E6250B19E47E9CC8008E76CF94DC04D7
Certificate serial:       27CC66125240E622EC1EAEA7C9B30D41B2433F79
Authority key identifier: 78:34:6D:E4:E6:25:0B:19:E4:7E:9C:C8:00:8E:76:CF:94:DC:04:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34362e302f32342d3332203d3e20323632373038.roa
Signing time:             Fri 24 Oct 2025 02:48:40 +0000
ROA not before:           Fri 24 Oct 2025 02:43:40 +0000
ROA not after:            Fri 23 Oct 2026 02:48:40 +0000
asID:                     262708
IP address blocks:        186.193.46.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.crl
                          rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 14:18:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:cc:66:12:52:40:e6:22:ec:1e:ae:a7:c9:b3:0d:41:b2:43:3f:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78346DE4E6250B19E47E9CC8008E76CF94DC04D7
        Validity
            Not Before: Oct 24 02:43:40 2025 GMT
            Not After : Oct 23 02:48:40 2026 GMT
        Subject: CN=14814700C26A82013641F0529628109E1986B87F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d2:24:be:9d:c5:7d:49:47:78:40:18:69:1f:
                    d7:aa:8a:ba:5f:27:f9:30:c1:a7:b6:24:8d:46:a5:
                    58:c6:16:d7:97:dc:d1:ae:36:b3:e7:4c:d0:b4:13:
                    29:67:e9:c4:e7:ed:36:ef:97:c1:ec:5f:9c:34:14:
                    51:b4:28:34:85:6f:6a:7a:62:38:6a:4f:33:3e:eb:
                    f7:80:f2:04:4b:1b:87:7c:f9:d0:bc:55:a2:c8:a7:
                    f7:7f:e2:ec:62:40:38:ee:6f:a7:7d:19:5b:ac:fc:
                    b8:29:34:f1:38:f5:df:3c:7c:d6:b3:94:56:77:ac:
                    a1:b3:9c:6e:cf:61:39:8f:af:c2:1e:79:77:dc:15:
                    34:9a:64:71:86:cf:e9:3f:df:d1:de:a9:e2:ba:25:
                    24:33:4b:a4:ca:7e:95:d6:9b:e9:b3:83:a2:b3:7e:
                    fd:97:18:ac:7c:30:de:d0:da:4b:87:2b:ea:29:06:
                    ec:61:69:87:26:e7:eb:94:41:50:5f:ce:2d:13:73:
                    9b:b4:a9:83:ea:5a:80:29:c5:77:52:03:e2:df:2d:
                    d3:4e:0b:fb:99:dd:cd:2e:61:b4:df:7b:0a:02:03:
                    fa:3f:dc:0a:98:66:3d:be:0f:c9:27:78:bf:89:de:
                    6c:1a:99:27:5c:9b:2e:9a:57:b9:bb:17:5e:aa:ae:
                    30:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:81:47:00:C2:6A:82:01:36:41:F0:52:96:28:10:9E:19:86:B8:7F
            X509v3 Authority Key Identifier:
                keyid:78:34:6D:E4:E6:25:0B:19:E4:7E:9C:C8:00:8E:76:CF:94:DC:04:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34362e302f32342d3332203d3e20323632373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:f4:aa:16:45:18:97:1d:82:64:8e:fc:6a:32:ee:91:34:cb:
         b7:d0:a4:6f:64:08:61:cd:c6:25:af:1e:da:11:30:86:65:78:
         f4:83:4b:ac:42:02:80:87:f3:e6:ca:1a:9f:a2:07:46:ea:a7:
         b8:7f:d1:9d:a5:a8:92:42:9b:9d:98:65:e5:ae:52:6d:cf:63:
         c5:be:77:59:81:d5:0f:e6:f1:77:52:65:2f:9e:03:2a:37:4c:
         af:2c:9c:03:b8:36:58:c1:4b:2d:4e:c9:26:49:e3:85:49:95:
         f3:8a:fe:e2:dd:25:5c:6c:bc:83:e9:9f:ce:fa:32:95:34:0d:
         14:2d:e0:0b:42:0a:36:06:66:6f:a6:54:c2:30:bc:71:a3:2d:
         93:95:09:1c:ab:84:fa:00:1b:b9:60:17:ac:22:bf:03:9c:c6:
         8a:8c:4d:d4:58:8c:8c:a6:55:11:27:86:fd:a0:53:23:93:f4:
         f9:59:e5:c1:fb:91:04:55:26:53:6c:e3:b8:66:ed:15:bf:68:
         96:19:8b:3c:63:65:6e:84:93:f2:52:45:33:08:67:e6:18:fe:
         81:af:2a:99:4a:5b:2e:85:4f:58:0e:90:a6:18:9e:c2:a4:29:
         4a:56:40:bf:06:a4:ad:39:0c:0c:99:c5:ae:5e:3a:44:32:ed:
         a1:7a:2f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 06:39:15 2025 by rpki-client