Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3139312e352e3133322e302f32322d3232203d3e20323633353336.roa
File:                     3139312e352e3133322e302f32322d3232203d3e20323633353336.roa (raw, json)
Hash identifier:          iYI2ydffR+5svEIABcg5JHP2iRCdOiZuk2pOF/KqrmM=
Subject key identifier:   23:D3:F8:A9:7A:A0:FC:08:70:8E:16:C0:D5:91:00:C6:55:34:FB:E0
Certificate issuer:       /CN=D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0
Certificate serial:       61DBA60D55BFAE24152A8C71AFC89F804CDBF716
Authority key identifier: D1:1A:BF:5E:A0:73:36:38:B4:A2:FC:EB:EA:C9:51:7B:56:83:AD:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3139312e352e3133322e302f32322d3232203d3e20323633353336.roa
Signing time:             Tue 09 Sep 2025 16:46:49 +0000
ROA not before:           Tue 09 Sep 2025 16:41:49 +0000
ROA not after:            Tue 08 Sep 2026 16:46:49 +0000
asID:                     263536
IP address blocks:        191.5.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.crl
                          rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 19:45:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:db:a6:0d:55:bf:ae:24:15:2a:8c:71:af:c8:9f:80:4c:db:f7:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0
        Validity
            Not Before: Sep  9 16:41:49 2025 GMT
            Not After : Sep  8 16:46:49 2026 GMT
        Subject: CN=23D3F8A97AA0FC08708E16C0D59100C65534FBE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:37:32:38:ae:81:37:0c:77:90:77:59:81:4f:
                    35:8b:4e:13:2a:c8:47:84:57:f3:29:ed:7d:51:be:
                    6f:b1:91:4d:4d:ce:46:65:b2:d7:b7:3c:3e:3c:7c:
                    fd:28:b1:44:af:43:c8:6d:fe:1c:94:98:e1:dc:ef:
                    46:47:e9:ad:44:9b:be:64:a4:64:e2:38:57:32:a8:
                    5e:79:e9:4a:79:c0:e1:2c:3f:89:a8:6e:e6:27:fe:
                    a9:f7:de:08:ed:73:98:c4:a7:e5:ae:52:bd:c5:8c:
                    1c:fa:c2:5c:8d:3e:80:f0:fe:93:6d:6b:b1:b4:d3:
                    72:8e:fc:84:24:fc:db:ac:b5:cc:a1:ce:82:51:48:
                    03:79:4c:da:cb:23:21:de:a7:fa:37:fc:dd:3f:bb:
                    85:cc:c1:7d:bb:77:54:42:81:6a:30:b3:a6:6b:47:
                    ad:a8:66:94:2b:39:f2:75:fd:f1:13:41:61:db:b3:
                    9a:23:84:91:b3:f1:9f:ff:19:3e:ff:8c:c0:5a:78:
                    d8:bc:b9:9e:59:f9:ee:04:ae:0e:e8:64:4f:4b:46:
                    1c:26:95:05:53:4f:96:53:b6:24:a0:3c:9e:90:ea:
                    2f:48:73:d1:ee:22:26:0b:75:0d:ce:fd:e4:a5:22:
                    82:07:d1:0d:0e:23:30:e4:ad:f1:01:54:d9:3b:70:
                    2c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D3:F8:A9:7A:A0:FC:08:70:8E:16:C0:D5:91:00:C6:55:34:FB:E0
            X509v3 Authority Key Identifier:
                keyid:D1:1A:BF:5E:A0:73:36:38:B4:A2:FC:EB:EA:C9:51:7B:56:83:AD:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3139312e352e3133322e302f32322d3232203d3e20323633353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cf:9b:3e:04:00:fc:51:ba:bf:28:60:a5:5d:d5:c5:ef:a4:07:
         43:ad:f3:f8:1b:a8:52:be:92:26:86:2b:39:7a:29:f3:f0:2c:
         bd:4f:55:d1:11:ec:a5:b5:17:fb:fe:e7:9e:ff:e5:fb:4b:94:
         e2:20:1a:b6:e2:17:a1:9e:1c:be:d8:78:10:5b:f6:73:2d:7f:
         4d:f0:f1:c7:88:01:c6:f9:46:51:7c:3e:8c:8c:e1:e1:b9:2b:
         f2:76:c3:b8:86:95:dc:ac:13:37:a6:5f:82:87:44:61:2e:da:
         32:03:c4:87:6e:22:b4:e5:0f:b7:e5:b4:fd:17:d4:f4:3f:c0:
         3c:b9:83:f2:bf:8c:42:c9:d0:0b:73:85:c5:72:18:4f:d2:36:
         74:6d:e2:3f:58:d0:25:3c:77:9a:cc:55:bb:8f:57:65:52:85:
         88:cb:45:90:2e:c8:32:fc:a0:94:23:85:9e:2f:de:3d:9b:80:
         2c:8e:15:c8:9b:26:b2:75:f6:38:53:da:f8:6b:03:f6:57:e4:
         99:29:1a:ee:66:e3:b9:1e:38:1c:38:71:b2:61:d0:4d:65:4a:
         e9:5b:54:a3:3c:17:1d:9c:ff:a3:92:79:bb:a3:d1:c1:f5:02:
         7f:77:e8:e7:94:3c:6e:3c:d3:ce:0a:e9:db:1c:f5:fb:ed:7c:
         6f:38:8a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 21:03:48 2025 by rpki-client