Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3139312e352e3133322e302f32342d3234203d3e20323633353336.roa
File:                     3139312e352e3133322e302f32342d3234203d3e20323633353336.roa (raw, json)
Hash identifier:          thpfsKZnTYffe2W/pp6V5gJr826fO62hmqJ1/MmBV0g=
Subject key identifier:   4E:DE:40:3F:BD:2C:61:D7:37:17:A1:FB:28:B3:AB:10:EB:16:74:C9
Certificate issuer:       /CN=D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0
Certificate serial:       665420D91E8AB0007661A03C21D04AF516A64EEB
Authority key identifier: D1:1A:BF:5E:A0:73:36:38:B4:A2:FC:EB:EA:C9:51:7B:56:83:AD:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3139312e352e3133322e302f32342d3234203d3e20323633353336.roa
Signing time:             Tue 09 Sep 2025 18:15:48 +0000
ROA not before:           Tue 09 Sep 2025 18:10:48 +0000
ROA not after:            Tue 08 Sep 2026 18:15:48 +0000
asID:                     263536
IP address blocks:        191.5.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.crl
                          rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 21:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:54:20:d9:1e:8a:b0:00:76:61:a0:3c:21:d0:4a:f5:16:a6:4e:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0
        Validity
            Not Before: Sep  9 18:10:48 2025 GMT
            Not After : Sep  8 18:15:48 2026 GMT
        Subject: CN=4EDE403FBD2C61D73717A1FB28B3AB10EB1674C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:da:d4:ef:e5:74:fd:fd:8c:a9:9f:52:62:95:
                    4c:37:0d:b4:81:12:52:fa:8c:05:06:b9:7f:c5:a3:
                    7d:e6:14:2c:21:27:db:28:15:52:07:35:fc:20:8e:
                    bf:1f:d8:a0:3d:eb:e8:dd:1a:d8:63:3e:4d:24:96:
                    85:63:4c:19:1b:2b:fb:39:60:fb:9b:f2:d5:c9:75:
                    96:f0:08:42:9d:44:62:eb:81:a8:1d:83:2e:a1:b2:
                    a8:ce:78:e8:22:64:88:26:9a:30:65:dc:8d:01:08:
                    a6:9a:6c:43:77:85:06:19:81:1d:ba:e1:6f:e9:1e:
                    09:c3:23:7f:27:6f:69:10:04:e0:68:23:3c:f6:09:
                    26:7d:2b:2a:8c:6c:ce:6d:0f:e7:94:db:bc:0d:81:
                    0c:00:91:1b:a5:c4:4b:36:74:b6:81:d4:93:21:1d:
                    b8:49:26:4c:bb:1e:56:92:b6:9a:ab:e1:26:9f:ab:
                    95:e8:3c:7a:9d:b3:e3:21:df:ac:86:35:93:87:fa:
                    21:ae:ca:c0:32:a2:a5:fc:15:c3:1c:54:73:a3:53:
                    e0:1c:e4:a1:38:a6:4e:1a:1c:7e:9d:08:4f:cd:44:
                    3a:f8:e9:43:9d:c9:b6:95:d2:95:35:7a:a1:7c:29:
                    ab:bb:94:97:1e:bb:90:0c:13:36:3c:64:cf:06:f9:
                    bf:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:DE:40:3F:BD:2C:61:D7:37:17:A1:FB:28:B3:AB:10:EB:16:74:C9
            X509v3 Authority Key Identifier:
                keyid:D1:1A:BF:5E:A0:73:36:38:B4:A2:FC:EB:EA:C9:51:7B:56:83:AD:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3139312e352e3133322e302f32342d3234203d3e20323633353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:b7:f5:45:87:44:b7:d8:d8:15:af:c1:40:75:c4:73:50:9d:
         c8:8d:01:56:9e:8d:66:fb:1d:58:2d:20:3b:88:5e:21:ef:72:
         d9:25:0b:4c:e1:00:e1:c0:0d:00:ea:3d:68:28:62:33:f9:ce:
         31:08:11:b8:36:25:b9:8d:73:11:70:fd:78:75:9a:b2:4e:f8:
         6a:ce:9e:64:42:7c:37:dc:06:3c:c6:13:11:1a:d4:a6:f5:19:
         33:24:1c:5c:1d:cd:1e:5c:85:1b:32:d7:46:04:f0:56:a8:d3:
         bc:66:49:6e:21:98:6f:1a:47:a6:df:e7:87:4a:d9:98:ff:73:
         57:60:dc:5d:8f:a9:58:c8:37:2d:6f:aa:75:d5:25:e7:48:b7:
         43:8e:5e:3f:29:66:21:43:15:4d:e0:cd:77:3f:68:3d:dd:0d:
         89:93:15:6a:67:9c:74:b9:db:90:7b:12:87:75:fa:88:48:a6:
         c5:c4:1e:31:1e:7b:90:2d:a2:87:58:e0:23:18:49:a3:82:58:
         b8:4b:95:c1:9e:e8:c8:64:6e:6f:3f:c8:97:b4:18:87:92:8d:
         0e:e6:8a:32:79:a0:15:01:5e:5d:03:5e:9b:ec:b5:7c:7c:2a:
         c0:93:60:39:f7:8f:1c:61:9a:7a:6e:ec:6d:31:66:48:aa:20:
         a5:c2:c2:3e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZlQg2R6KsAB2YaA8IdBK9RamTuswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDExQUJGNUVBMDczMzYzOEI0QTJGQ0VCRUFDOTUxN0I1
NjgzQUREMDAeFw0yNTA5MDkxODEwNDhaFw0yNjA5MDgxODE1NDhaMDMxMTAvBgNV
BAMTKDRFREU0MDNGQkQyQzYxRDczNzE3QTFGQjI4QjNBQjEwRUIxNjc0QzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn2tTv5XT9/Yypn1JilUw3DbSB
ElL6jAUGuX/Fo33mFCwhJ9soFVIHNfwgjr8f2KA96+jdGthjPk0kloVjTBkbK/s5
YPub8tXJdZbwCEKdRGLrgagdgy6hsqjOeOgiZIgmmjBl3I0BCKaabEN3hQYZgR26
4W/pHgnDI38nb2kQBOBoIzz2CSZ9KyqMbM5tD+eU27wNgQwAkRulxEs2dLaB1JMh
HbhJJky7HlaStpqr4Safq5XoPHqds+Mh36yGNZOH+iGuysAyoqX8FcMcVHOjU+Ac
5KE4pk4aHH6dCE/NRDr46UOdybaV0pU1eqF8Kau7lJceu5AMEzY8ZM8G+b/tAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUTt5AP70sYdc3F6H7KLOrEOsWdMkwHwYDVR0j
BBgwFoAU0Rq/XqBzNji0ovzr6slRe1aDrdAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzhiSEQ5clBiNlZ1bXZFcnpQMjNGRzFVN2ZIb3VQVFk1eUpaWEpDMUhw
OGIvMS9EMTFBQkY1RUEwNzMzNjM4QjRBMkZDRUJFQUM5NTE3QjU2ODNBREQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxMUFCRjVFQTA3MzM2MzhC
NEEyRkNFQkVBQzk1MTdCNTY4M0FERDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc4YkhEOXJQYjZWdW12RXJ6UDIzRkcxVTdmSG91UFRZNXlKWlhKQzFIcDhiLzEv
MzEzOTMxMmUzNTJlMzEzMzMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMz
MzUzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAvwWEMA0GCSqGSIb3DQEBCwUAA4IBAQAUt/VFh0S3
2NgVr8FAdcRzUJ3IjQFWno1m+x1YLSA7iF4h73LZJQtM4QDhwA0A6j1oKGIz+c4x
CBG4NiW5jXMRcP14dZqyTvhqzp5kQnw33AY8xhMRGtSm9RkzJBxcHc0eXIUbMtdG
BPBWqNO8ZkluIZhvGkem3+eHStmY/3NXYNxdj6lYyDctb6p11SXnSLdDjl4/KWYh
QxVN4M13P2g93Q2JkxVqZ5x0uduQexKHdfqISKbFxB4xHnuQLaKHWOAjGEmjgli4
S5XBnujIZG5vP8iXtBiHko0O5ooyeaAVAV5dA16b7LV8fCrAk2A5948cYZp6buxt
MWZIqiClwsI+
-----END CERTIFICATE-----
Generated at Thu Sep 18 21:54:43 2025 by rpki-client