Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3139312e352e3133352e302f32342d3234203d3e20323633353336.roa
File:                     3139312e352e3133352e302f32342d3234203d3e20323633353336.roa (raw, json)
Hash identifier:          2kYq64hy37a/uFqriS+zMVe+cNh6XxjB6DE9hl4BjC8=
Subject key identifier:   02:60:63:19:E9:82:95:E4:D4:D8:33:72:BF:0F:D8:5A:38:DB:C3:5D
Certificate issuer:       /CN=D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0
Certificate serial:       2FC43CB95EA3AFEAF5CCB4589694222D9C702E29
Authority key identifier: D1:1A:BF:5E:A0:73:36:38:B4:A2:FC:EB:EA:C9:51:7B:56:83:AD:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3139312e352e3133352e302f32342d3234203d3e20323633353336.roa
Signing time:             Tue 09 Sep 2025 16:46:49 +0000
ROA not before:           Tue 09 Sep 2025 16:41:49 +0000
ROA not after:            Tue 08 Sep 2026 16:46:49 +0000
asID:                     263536
IP address blocks:        191.5.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.crl
                          rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 08:23:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:c4:3c:b9:5e:a3:af:ea:f5:cc:b4:58:96:94:22:2d:9c:70:2e:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0
        Validity
            Not Before: Sep  9 16:41:49 2025 GMT
            Not After : Sep  8 16:46:49 2026 GMT
        Subject: CN=02606319E98295E4D4D83372BF0FD85A38DBC35D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:55:14:b5:f7:60:14:cf:2b:60:6e:2c:d9:dc:
                    9b:71:16:fa:a7:fc:8a:7f:99:d9:c8:41:db:0f:fb:
                    6c:b7:da:e9:0d:9e:54:dc:7c:bd:cd:da:30:2f:10:
                    ba:c1:e0:34:c3:6f:68:8d:13:b5:05:b1:e4:6d:a9:
                    4c:53:fb:34:48:40:46:d4:0e:2e:db:c9:ba:12:fa:
                    82:30:42:06:36:bb:df:d1:08:64:b4:b2:d8:f5:2f:
                    49:2a:3c:d6:e0:dc:d9:f7:36:e1:2a:4b:8b:d0:52:
                    68:e4:65:98:47:db:8a:3a:8f:b3:68:cf:71:de:63:
                    b6:8c:fa:66:b4:c8:64:c6:d7:b1:a2:9c:75:3f:f5:
                    e3:3b:32:43:64:83:db:33:0b:5b:5a:5b:7e:a0:2b:
                    27:6d:6d:c2:3a:ca:fe:27:db:52:ba:f1:c4:73:11:
                    79:29:41:85:44:8c:32:c1:f9:2d:06:0e:11:a8:8a:
                    42:fd:2f:65:bc:02:f1:4a:18:d2:06:f0:9e:ab:93:
                    94:19:0d:56:8e:b0:50:05:2f:55:59:b0:37:3b:17:
                    5b:05:0c:c3:cf:ec:bb:ff:ef:ac:92:bf:b2:04:6c:
                    84:de:eb:7f:cc:72:8f:8c:df:00:53:30:e1:3f:95:
                    39:fd:0b:27:90:f1:90:ac:fd:5a:33:79:45:e9:49:
                    cc:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:60:63:19:E9:82:95:E4:D4:D8:33:72:BF:0F:D8:5A:38:DB:C3:5D
            X509v3 Authority Key Identifier:
                keyid:D1:1A:BF:5E:A0:73:36:38:B4:A2:FC:EB:EA:C9:51:7B:56:83:AD:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3139312e352e3133352e302f32342d3234203d3e20323633353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:0a:1d:9d:bc:5a:a3:53:f9:c1:0a:20:71:dd:f4:f1:a5:5c:
         b4:94:30:ae:de:9b:17:b8:36:71:55:d2:02:48:58:be:f3:8b:
         9a:c7:83:f0:70:7c:86:a1:fc:10:0a:fc:f4:78:92:7b:5f:70:
         9a:b0:66:a2:35:e8:d0:33:34:b7:f3:ab:5b:9c:a8:dd:ad:ff:
         51:f7:11:c1:df:2c:af:0d:9b:71:d4:5c:81:5e:4c:1e:a9:7b:
         42:ee:3e:8f:35:97:e3:13:1a:72:1b:d4:67:75:6d:ed:71:e8:
         66:3a:d9:81:9f:30:e8:32:99:28:5d:4c:21:60:1d:83:b1:3e:
         68:cb:70:e7:b6:a3:34:00:20:4c:ed:d8:af:a7:6b:3e:dc:af:
         f0:8a:75:d4:16:34:49:b0:cd:d5:ac:70:3d:4d:cc:90:da:40:
         d9:4c:d8:63:c5:a5:a3:a8:b7:ed:41:41:4f:58:cd:c8:bd:71:
         26:38:f6:16:6e:29:de:c5:03:c6:5e:05:32:f7:ec:92:5c:89:
         17:c9:94:9e:c5:03:21:8d:33:4d:0a:fa:6a:68:02:59:d6:4a:
         bb:f6:b2:c9:33:8c:39:90:aa:ae:c9:48:ca:28:9b:31:f8:5d:
         5e:c0:2f:cc:78:d2:e2:99:30:ad:dd:b8:8d:f7:be:96:6f:3a:
         05:50:ca:b6
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUL8Q8uV6jr+r1zLRYlpQiLZxwLikwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDExQUJGNUVBMDczMzYzOEI0QTJGQ0VCRUFDOTUxN0I1
NjgzQUREMDAeFw0yNTA5MDkxNjQxNDlaFw0yNjA5MDgxNjQ2NDlaMDMxMTAvBgNV
BAMTKDAyNjA2MzE5RTk4Mjk1RTRENEQ4MzM3MkJGMEZEODVBMzhEQkMzNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiVRS192AUzytgbizZ3JtxFvqn
/Ip/mdnIQdsP+2y32ukNnlTcfL3N2jAvELrB4DTDb2iNE7UFseRtqUxT+zRIQEbU
Di7byboS+oIwQgY2u9/RCGS0stj1L0kqPNbg3Nn3NuEqS4vQUmjkZZhH24o6j7No
z3HeY7aM+ma0yGTG17GinHU/9eM7MkNkg9szC1taW36gKydtbcI6yv4n21K68cRz
EXkpQYVEjDLB+S0GDhGoikL9L2W8AvFKGNIG8J6rk5QZDVaOsFAFL1VZsDc7F1sF
DMPP7Lv/76ySv7IEbITe63/Mco+M3wBTMOE/lTn9CyeQ8ZCs/VozeUXpSczTAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUAmBjGemCleTU2DNyvw/YWjjbw10wHwYDVR0j
BBgwFoAU0Rq/XqBzNji0ovzr6slRe1aDrdAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzhiSEQ5clBiNlZ1bXZFcnpQMjNGRzFVN2ZIb3VQVFk1eUpaWEpDMUhw
OGIvMS9EMTFBQkY1RUEwNzMzNjM4QjRBMkZDRUJFQUM5NTE3QjU2ODNBREQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxMUFCRjVFQTA3MzM2MzhC
NEEyRkNFQkVBQzk1MTdCNTY4M0FERDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc4YkhEOXJQYjZWdW12RXJ6UDIzRkcxVTdmSG91UFRZNXlKWlhKQzFIcDhiLzEv
MzEzOTMxMmUzNTJlMzEzMzM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMz
MzUzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAvwWHMA0GCSqGSIb3DQEBCwUAA4IBAQCLCh2dvFqj
U/nBCiBx3fTxpVy0lDCu3psXuDZxVdICSFi+84uax4PwcHyGofwQCvz0eJJ7X3Ca
sGaiNejQMzS386tbnKjdrf9R9xHB3yyvDZtx1FyBXkweqXtC7j6PNZfjExpyG9Rn
dW3tcehmOtmBnzDoMpkoXUwhYB2DsT5oy3DntqM0ACBM7divp2s+3K/winXUFjRJ
sM3VrHA9TcyQ2kDZTNhjxaWjqLftQUFPWM3IvXEmOPYWbinexQPGXgUy9+ySXIkX
yZSexQMhjTNNCvpqaAJZ1kq79rLJM4w5kKquyUjKKJsx+F1ewC/MeNLimTCt3biN
976WbzoFUMq2
-----END CERTIFICATE-----
Generated at Thu Sep 18 10:25:16 2025 by rpki-client