Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3139312e352e3132382e302f32302d3230203d3e20323633353336.roa
File:                     3139312e352e3132382e302f32302d3230203d3e20323633353336.roa (raw, json)
Hash identifier:          rojmsgJVrr40TlkmuNRBa5xOKMMTFfnwWlZkvLPFGss=
Subject key identifier:   74:6B:26:0A:BE:6C:47:59:59:AA:DD:B8:5E:28:BA:DC:9D:46:79:9F
Certificate issuer:       /CN=D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0
Certificate serial:       3165ECC6601AEEA3C9442990F5B40459F244445D
Authority key identifier: D1:1A:BF:5E:A0:73:36:38:B4:A2:FC:EB:EA:C9:51:7B:56:83:AD:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3139312e352e3132382e302f32302d3230203d3e20323633353336.roa
Signing time:             Tue 09 Sep 2025 16:46:47 +0000
ROA not before:           Tue 09 Sep 2025 16:41:47 +0000
ROA not after:            Tue 08 Sep 2026 16:46:47 +0000
asID:                     263536
IP address blocks:        191.5.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.crl
                          rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 08:23:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:65:ec:c6:60:1a:ee:a3:c9:44:29:90:f5:b4:04:59:f2:44:44:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0
        Validity
            Not Before: Sep  9 16:41:47 2025 GMT
            Not After : Sep  8 16:46:47 2026 GMT
        Subject: CN=746B260ABE6C475959AADDB85E28BADC9D46799F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8b:de:5f:ec:27:9c:28:2f:6b:d5:74:75:39:
                    65:ca:3e:44:1f:1d:7d:f8:8d:7b:f2:d4:44:db:42:
                    ca:51:c4:ad:f7:d9:90:47:80:04:5e:c2:df:e8:21:
                    eb:b5:34:94:c2:b8:59:43:16:4e:cc:59:18:2c:d7:
                    00:fb:ec:51:d9:92:ff:e6:cc:95:1f:9e:cf:1d:e8:
                    1f:8c:01:f1:37:5e:c1:46:94:33:38:4a:8e:f8:c3:
                    77:12:d4:82:ed:97:26:07:ab:5c:47:b7:66:1f:ae:
                    f4:df:f3:9f:be:a5:19:1d:d6:e3:53:0a:c8:d5:53:
                    cb:39:78:fb:10:fb:78:e4:4f:01:ea:98:df:49:c3:
                    38:7d:65:7f:5d:31:1b:50:d1:b9:71:3b:cc:51:f8:
                    90:52:82:5f:73:de:6a:ae:55:22:17:ec:83:8c:0e:
                    b9:69:e0:0b:05:67:40:1d:57:d5:4e:b4:04:3c:e5:
                    42:4e:d1:bb:75:3a:d4:cc:3e:1f:66:45:23:da:46:
                    1b:cc:17:55:0e:fb:99:3f:36:ee:21:c4:6c:7c:47:
                    b6:d0:0e:f0:55:8e:6b:f1:77:19:4a:8b:63:51:0f:
                    8f:b7:8b:4b:37:30:d2:6a:f4:3a:5e:8f:f8:88:24:
                    78:65:a6:f1:c9:41:87:1d:4a:d4:c3:bc:96:af:bc:
                    89:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:6B:26:0A:BE:6C:47:59:59:AA:DD:B8:5E:28:BA:DC:9D:46:79:9F
            X509v3 Authority Key Identifier:
                keyid:D1:1A:BF:5E:A0:73:36:38:B4:A2:FC:EB:EA:C9:51:7B:56:83:AD:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3139312e352e3132382e302f32302d3230203d3e20323633353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a8:55:d4:ec:66:f3:67:65:bb:8f:5a:b9:71:75:1f:a6:48:ef:
         82:40:7c:7e:70:67:99:fa:b5:9e:c2:bd:40:be:35:5a:90:70:
         39:dc:e0:af:f6:5d:a2:fe:f3:bd:b5:c3:a3:e3:72:d6:87:59:
         3c:56:4a:92:00:71:c3:f0:2e:0c:32:8d:d2:0c:2e:3f:82:33:
         3c:eb:4a:ce:9d:9f:cc:70:ce:f4:98:35:38:6f:93:e4:97:d7:
         fc:5f:13:9e:e9:fa:b4:85:68:ef:a5:5b:fe:93:26:01:db:ef:
         c8:1b:c9:c5:78:2b:d2:09:60:9d:2f:64:e7:f6:39:5e:63:e2:
         bc:f5:8e:b5:ed:31:18:c2:1c:9a:da:e6:62:57:be:41:50:a9:
         a8:a4:25:16:1f:a3:8f:8b:9b:42:d3:da:a5:0d:4e:f1:94:c2:
         e1:9d:e3:76:e0:ba:fe:a0:8e:39:26:5b:85:e8:2c:af:cd:5d:
         1f:8c:79:91:e3:82:8d:bd:ae:ab:85:99:e3:e2:ad:ea:71:ce:
         50:5c:47:be:a3:a3:3d:6d:78:21:d6:c5:e4:da:cd:32:7d:60:
         96:a3:8a:41:97:af:d2:ed:00:36:9a:a3:99:39:50:32:c4:6b:
         9e:f0:e3:e4:9b:02:cf:90:0e:14:aa:ad:60:23:15:a8:df:c1:
         39:20:aa:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 17:34:26 2025 by rpki-client