Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3139312e352e3133312e302f32342d3234203d3e20323633353336.roa
File:                     3139312e352e3133312e302f32342d3234203d3e20323633353336.roa (raw, json)
Hash identifier:          nsdhWdoORb230lWMeig6iZCyBy6yABHAvBm+FqPgi7o=
Subject key identifier:   C9:DD:2F:9C:B7:FC:EE:A2:2A:C6:CC:C9:B5:14:AD:90:E4:51:E2:DE
Certificate issuer:       /CN=D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0
Certificate serial:       278B967A50E93B4872460CDFF3B02EF9C149CBCA
Authority key identifier: D1:1A:BF:5E:A0:73:36:38:B4:A2:FC:EB:EA:C9:51:7B:56:83:AD:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3139312e352e3133312e302f32342d3234203d3e20323633353336.roa
Signing time:             Tue 09 Sep 2025 18:15:41 +0000
ROA not before:           Tue 09 Sep 2025 18:10:41 +0000
ROA not after:            Tue 08 Sep 2026 18:15:41 +0000
asID:                     263536
IP address blocks:        191.5.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.crl
                          rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 00:55:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:8b:96:7a:50:e9:3b:48:72:46:0c:df:f3:b0:2e:f9:c1:49:cb:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0
        Validity
            Not Before: Sep  9 18:10:41 2025 GMT
            Not After : Sep  8 18:15:41 2026 GMT
        Subject: CN=C9DD2F9CB7FCEEA22AC6CCC9B514AD90E451E2DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:50:cc:c8:4e:fc:3b:f1:aa:f6:cf:78:e3:ec:
                    d5:82:b0:b9:b5:f4:86:6d:2b:81:ff:70:51:a0:09:
                    c7:fc:78:c6:3c:17:32:25:20:56:3c:cc:ec:38:43:
                    f6:ec:80:ee:b3:80:f4:d4:d9:c6:ad:a9:ae:4f:02:
                    90:0b:ed:67:ee:f3:49:de:ce:20:9b:35:95:de:35:
                    7b:2a:8d:12:38:ac:a9:90:7c:e0:27:84:5d:45:ef:
                    ca:2c:ac:de:85:a5:03:ec:d5:2e:af:2a:a9:0b:79:
                    99:3b:f9:7d:f1:c6:9a:b8:cb:a2:b2:e7:01:1f:eb:
                    e2:ac:55:a6:43:d9:aa:72:f7:41:0e:e4:11:f2:71:
                    40:56:18:c1:c9:b9:70:99:ef:db:af:a7:66:70:99:
                    11:75:20:0c:60:c4:94:af:6a:96:a9:e4:0b:ec:15:
                    55:8e:31:76:00:77:d6:c0:bc:3d:bc:11:c9:24:de:
                    29:52:76:e6:3c:d4:cd:c8:8e:62:2b:df:f7:c2:9b:
                    ce:f7:75:1b:89:4c:6c:b5:cf:fb:a7:2b:98:63:6c:
                    97:89:f1:e4:86:f1:4c:72:af:8c:a4:4a:47:67:13:
                    9e:41:c0:dd:a6:27:33:40:62:eb:76:f5:5c:ca:80:
                    be:fa:aa:e7:c4:d9:d8:56:a0:75:b3:ed:eb:0b:39:
                    33:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:DD:2F:9C:B7:FC:EE:A2:2A:C6:CC:C9:B5:14:AD:90:E4:51:E2:DE
            X509v3 Authority Key Identifier:
                keyid:D1:1A:BF:5E:A0:73:36:38:B4:A2:FC:EB:EA:C9:51:7B:56:83:AD:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3139312e352e3133312e302f32342d3234203d3e20323633353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:0e:56:6d:91:41:ec:ac:29:4d:b0:41:f3:96:fe:37:76:9e:
         cd:f1:e8:22:53:66:57:73:10:31:f2:83:23:b3:8a:81:f7:22:
         cb:83:6c:d4:e6:51:27:88:d3:4c:ca:d5:af:66:88:bb:97:f5:
         43:37:8c:14:5c:f5:4a:af:b6:1f:94:b3:42:59:f8:4b:a1:d4:
         c1:0b:86:34:b3:a7:96:b4:b2:5a:ee:2a:0a:aa:16:fe:bc:4d:
         53:45:b2:b6:da:1b:14:c3:fa:e9:03:7c:1a:75:ca:cd:04:57:
         6a:33:23:13:51:c0:18:05:07:fd:80:f3:c2:ad:f9:22:25:51:
         76:26:1a:4c:37:2c:8b:0f:f6:05:2a:67:4a:c0:44:a3:3f:9d:
         66:7f:87:fc:18:fb:63:6d:eb:4a:76:3d:17:56:63:52:c0:41:
         cc:a8:df:6c:3c:6d:08:de:5f:53:f7:98:f4:b0:c5:4f:76:d1:
         b8:fd:ac:82:90:36:c1:0c:f5:13:13:ab:78:59:78:96:f6:5b:
         7c:41:db:b3:46:77:db:0f:cc:b9:1b:1e:e1:ae:ae:cd:bf:51:
         a6:6f:70:04:f9:c9:a3:42:d3:0a:a5:87:9c:dc:49:52:b2:72:
         b6:33:38:66:52:c7:75:48:18:bd:ab:35:5f:50:d2:67:31:9e:
         53:4b:80:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:29:58 2025 by rpki-client