Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3139312e352e3133362e302f32312d3231203d3e20323633353336.roa
File:                     3139312e352e3133362e302f32312d3231203d3e20323633353336.roa (raw, json)
Hash identifier:          ETPkFR/ZRGSeaKuEP9xyo5ATVf3rqHuyAcYBM5h30io=
Subject key identifier:   F2:2C:15:41:AC:FF:7A:8D:2B:06:A8:7B:8B:34:88:A0:23:FC:6B:35
Certificate issuer:       /CN=D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0
Certificate serial:       01A331F9F4A5A559EE9D0B0C0C0D6952852EE57F
Authority key identifier: D1:1A:BF:5E:A0:73:36:38:B4:A2:FC:EB:EA:C9:51:7B:56:83:AD:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3139312e352e3133362e302f32312d3231203d3e20323633353336.roa
Signing time:             Tue 09 Sep 2025 16:46:48 +0000
ROA not before:           Tue 09 Sep 2025 16:41:48 +0000
ROA not after:            Tue 08 Sep 2026 16:46:48 +0000
asID:                     263536
IP address blocks:        191.5.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.crl
                          rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 08:23:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a3:31:f9:f4:a5:a5:59:ee:9d:0b:0c:0c:0d:69:52:85:2e:e5:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0
        Validity
            Not Before: Sep  9 16:41:48 2025 GMT
            Not After : Sep  8 16:46:48 2026 GMT
        Subject: CN=F22C1541ACFF7A8D2B06A87B8B3488A023FC6B35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:95:68:30:9f:b7:8c:27:51:5e:80:92:90:67:
                    c6:42:42:48:7f:70:50:d7:34:81:f1:e7:0e:14:98:
                    9c:b2:36:4b:31:b2:ad:e6:55:ad:2c:e1:a0:f6:ec:
                    6c:68:98:8f:aa:04:7d:e9:b4:a9:db:98:ff:47:52:
                    2f:0c:31:78:8d:fc:b6:04:41:20:30:cf:e3:5d:d9:
                    1f:d5:b8:9e:e7:6a:ee:83:5a:73:8a:5d:7c:75:e6:
                    23:dc:a2:9f:a2:6c:a6:bb:10:92:91:c8:66:dc:a3:
                    78:1b:34:8a:f2:51:1a:a7:4e:fb:d1:4b:44:5a:63:
                    4c:07:ea:dc:51:24:7c:ea:09:d1:08:16:8b:3a:6b:
                    25:99:fd:18:e1:d0:5b:a5:02:ab:65:b0:73:23:d9:
                    38:51:2a:7e:fa:3c:ba:a0:97:a8:87:60:4e:1e:e8:
                    c5:33:bd:d1:93:7b:87:76:ce:35:62:e2:b0:e5:c3:
                    05:9e:43:d1:08:aa:e2:7e:5f:75:49:0a:20:78:40:
                    6b:5b:d1:c1:ef:16:4b:fb:63:ad:6c:e0:08:3c:24:
                    9b:82:1f:81:da:00:59:d1:9c:c5:73:45:84:0a:6c:
                    8a:c2:3c:ae:7b:7f:12:58:f9:65:0e:9f:2c:dd:f6:
                    8d:52:89:9d:29:08:0b:a2:81:39:d2:c1:82:51:1e:
                    f2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:2C:15:41:AC:FF:7A:8D:2B:06:A8:7B:8B:34:88:A0:23:FC:6B:35
            X509v3 Authority Key Identifier:
                keyid:D1:1A:BF:5E:A0:73:36:38:B4:A2:FC:EB:EA:C9:51:7B:56:83:AD:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3139312e352e3133362e302f32312d3231203d3e20323633353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         cc:93:e2:bb:af:21:b5:03:f9:49:f9:e1:53:ec:6a:03:25:b0:
         f9:91:0d:7c:28:7c:6b:88:71:42:ff:e1:25:b3:3e:13:20:91:
         95:61:bd:73:4b:cc:8c:69:a8:5b:1d:97:70:2e:fe:21:6c:3c:
         fb:92:e8:15:fb:bc:20:24:28:76:5b:45:6c:9d:01:19:49:1d:
         d9:4d:f4:51:29:d4:d3:8a:a5:c0:6d:aa:35:3b:35:9e:9b:2d:
         4b:96:dd:2c:44:e9:76:47:6a:93:bd:ab:cc:f9:2f:b4:7c:51:
         4d:84:51:28:99:ca:74:1b:b4:80:35:37:72:a5:7c:34:6f:8d:
         29:ce:2a:b6:05:b5:6a:2c:9c:e0:16:2d:88:d4:3d:4f:26:f0:
         61:70:5b:d1:cc:fa:9b:98:63:2c:6b:16:7f:bc:1a:24:5c:4a:
         df:9b:4b:78:59:b7:ae:e5:78:6f:a4:04:e0:92:4f:d6:1b:2c:
         f6:f4:5b:58:23:de:00:3f:dc:00:77:86:98:94:be:a8:7e:06:
         f2:7b:29:12:4f:6f:f3:c6:9d:39:d0:69:ae:2b:9d:33:3b:f4:
         89:ba:5c:4e:64:7c:c7:bc:32:7e:5b:f6:06:3f:44:40:b8:23:
         c5:6c:90:f5:e9:03:93:0a:f2:eb:cf:a5:ce:45:2e:a9:76:f4:
         c4:bc:ec:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 10:28:38 2025 by rpki-client