Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3139312e352e3133332e302f32342d3234203d3e20323633353336.roa
File:                     3139312e352e3133332e302f32342d3234203d3e20323633353336.roa (raw, json)
Hash identifier:          IlcY8VUCjM8r0uhYIWAY8Nql7UzZicy/1Em3Z64z6v8=
Subject key identifier:   03:7D:AD:CF:B9:33:27:C5:D2:57:EE:D3:F2:D5:1D:34:D5:AD:93:46
Certificate issuer:       /CN=D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0
Certificate serial:       75748A75A654F7D81FAA060F1B0C0A29C99BED89
Authority key identifier: D1:1A:BF:5E:A0:73:36:38:B4:A2:FC:EB:EA:C9:51:7B:56:83:AD:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3139312e352e3133332e302f32342d3234203d3e20323633353336.roa
Signing time:             Tue 09 Sep 2025 18:15:55 +0000
ROA not before:           Tue 09 Sep 2025 18:10:55 +0000
ROA not after:            Tue 08 Sep 2026 18:15:55 +0000
asID:                     263536
IP address blocks:        191.5.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.crl
                          rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 08:23:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:74:8a:75:a6:54:f7:d8:1f:aa:06:0f:1b:0c:0a:29:c9:9b:ed:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0
        Validity
            Not Before: Sep  9 18:10:55 2025 GMT
            Not After : Sep  8 18:15:55 2026 GMT
        Subject: CN=037DADCFB93327C5D257EED3F2D51D34D5AD9346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d7:c7:0c:11:8c:ac:1a:39:9c:7f:4f:cc:53:
                    fa:05:70:11:6d:a7:97:b8:c0:da:e9:e5:fd:a3:5b:
                    df:8b:66:17:8d:b5:dd:9f:17:2d:e8:e8:c3:25:b2:
                    12:a6:f8:a5:27:e8:fa:12:88:66:b3:7e:84:8c:65:
                    98:2f:c4:91:d8:d4:0c:67:2a:2e:97:22:ab:6e:52:
                    cc:0f:1a:dd:21:48:70:ed:c3:16:e5:ee:be:e5:a9:
                    09:ca:21:00:01:31:67:00:cd:ee:d0:64:54:01:71:
                    6f:df:61:cc:83:f3:11:5d:00:9d:f6:0a:85:23:39:
                    12:72:da:42:fa:dc:0f:f0:af:40:50:1e:6d:e9:d8:
                    92:09:3f:cd:8e:98:8b:79:88:10:db:06:39:00:98:
                    38:5d:66:e9:f9:98:78:f5:be:0a:fe:10:fb:cf:22:
                    ef:33:7f:af:0f:c5:00:73:26:93:b3:61:05:ae:e3:
                    a3:84:6c:85:8f:28:50:0d:79:b0:d6:a4:35:00:d9:
                    9a:98:92:88:c4:9c:20:5c:93:24:e5:ec:c8:38:90:
                    c0:15:91:a8:a2:fb:88:06:8b:de:07:a8:07:45:eb:
                    a0:04:43:7b:0c:3e:95:67:71:45:0e:e4:38:c1:cf:
                    1e:02:73:8a:2c:7c:a4:76:a6:76:20:e1:f9:e8:36:
                    a9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:7D:AD:CF:B9:33:27:C5:D2:57:EE:D3:F2:D5:1D:34:D5:AD:93:46
            X509v3 Authority Key Identifier:
                keyid:D1:1A:BF:5E:A0:73:36:38:B4:A2:FC:EB:EA:C9:51:7B:56:83:AD:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3139312e352e3133332e302f32342d3234203d3e20323633353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:a2:a1:ec:c0:e6:31:ef:64:b7:b2:c2:34:a0:1b:e2:b2:73:
         dd:76:36:5c:e3:a4:69:bf:48:65:68:c8:d8:7c:01:3d:8b:8b:
         b1:1d:9c:86:a1:69:37:d0:9c:1c:3c:a9:44:ca:8d:a8:d1:00:
         35:54:25:36:26:53:65:c9:c9:85:a1:50:df:14:fc:ce:11:b5:
         4c:06:fb:fe:93:e6:f1:f4:57:91:5f:0f:a9:01:d1:da:e6:55:
         c8:72:44:36:85:dc:53:f2:1a:6c:62:a3:ec:60:eb:3e:f4:36:
         91:cd:73:47:6a:bd:40:52:b4:64:35:26:dd:71:f2:d0:c8:9f:
         99:c8:81:67:5a:4c:4d:2e:8f:74:b2:ef:e2:2c:ae:c2:81:8c:
         c0:d3:7e:72:54:b1:62:ab:cb:9c:b4:23:9e:46:67:f2:ca:e6:
         9e:e9:69:74:8f:56:54:3a:09:94:79:4f:bb:1c:e1:10:c5:ea:
         7d:b8:fc:5f:1f:36:58:69:d1:a6:94:e5:55:c4:23:11:64:0b:
         35:41:cc:08:e8:d9:bb:30:20:95:43:70:d6:22:1a:7d:05:e9:
         ac:fe:b7:53:21:a3:8a:c8:31:82:22:ff:54:5e:e5:41:7d:51:
         7b:62:cd:10:10:b2:79:08:c1:a6:18:14:cc:5c:30:ae:76:63:
         10:86:53:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 10:25:08 2025 by rpki-client