Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3139312e352e3133362e302f32342d3234203d3e20323633353336.roa
File:                     3139312e352e3133362e302f32342d3234203d3e20323633353336.roa (raw, json)
Hash identifier:          qJFhjRubw9/dATKW+xTXN3toCxslLc3aNMRLZCran/4=
Subject key identifier:   E6:B5:C2:5B:2C:01:3D:AB:0F:78:7B:B7:B7:42:D4:2D:B5:EC:B2:52
Certificate issuer:       /CN=D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0
Certificate serial:       23563EF8AEE146E6FA1ED0D5468E6B87896F6A4F
Authority key identifier: D1:1A:BF:5E:A0:73:36:38:B4:A2:FC:EB:EA:C9:51:7B:56:83:AD:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3139312e352e3133362e302f32342d3234203d3e20323633353336.roa
Signing time:             Tue 09 Sep 2025 16:46:50 +0000
ROA not before:           Tue 09 Sep 2025 16:41:50 +0000
ROA not after:            Tue 08 Sep 2026 16:46:50 +0000
asID:                     263536
IP address blocks:        191.5.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.crl
                          rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 21:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:56:3e:f8:ae:e1:46:e6:fa:1e:d0:d5:46:8e:6b:87:89:6f:6a:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0
        Validity
            Not Before: Sep  9 16:41:50 2025 GMT
            Not After : Sep  8 16:46:50 2026 GMT
        Subject: CN=E6B5C25B2C013DAB0F787BB7B742D42DB5ECB252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:37:a0:bb:56:65:4b:a5:d6:d5:f7:29:99:93:
                    fb:51:a4:76:7b:d0:d4:9a:b2:2d:a6:31:f7:8e:1b:
                    9b:5c:c7:db:32:cd:b1:8c:02:94:0a:3e:d1:09:bb:
                    35:1f:a0:31:3b:c2:91:d5:6e:b8:51:41:1c:93:b6:
                    93:49:e0:30:e6:b1:f9:6d:fc:7d:9f:3e:fd:b6:4f:
                    63:55:f3:31:df:3b:a8:bb:44:0f:d6:a8:ab:e0:58:
                    f2:9e:0a:bb:32:60:1b:96:56:10:cf:06:fc:56:39:
                    ce:d0:53:74:54:4a:f8:bb:e6:88:6c:09:1a:03:6b:
                    5e:52:ca:20:19:fb:33:99:9d:a9:8d:7b:07:4f:2b:
                    47:7c:4d:51:7b:b1:22:7f:d5:93:5b:9e:78:3d:78:
                    ae:dc:a3:c2:4f:29:62:c4:34:1e:6d:50:46:a7:48:
                    35:75:b6:8c:e3:c0:65:75:47:9f:62:4a:f4:82:e9:
                    67:cc:0b:c9:fa:65:1b:2c:6d:19:db:10:9b:b5:70:
                    f5:32:45:34:f8:9d:7d:54:79:be:a0:15:3c:47:39:
                    d6:71:77:58:48:1c:be:b0:b9:12:29:a2:80:7e:47:
                    a6:2a:60:7f:53:68:d4:7a:ae:7c:85:aa:cd:dd:44:
                    a3:3c:31:b1:55:8c:77:1a:d4:45:06:e9:4e:41:ba:
                    a1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B5:C2:5B:2C:01:3D:AB:0F:78:7B:B7:B7:42:D4:2D:B5:EC:B2:52
            X509v3 Authority Key Identifier:
                keyid:D1:1A:BF:5E:A0:73:36:38:B4:A2:FC:EB:EA:C9:51:7B:56:83:AD:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3139312e352e3133362e302f32342d3234203d3e20323633353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         dd:49:46:b2:87:40:aa:17:bd:b6:fd:a2:63:d5:0c:96:5b:be:
         9f:c4:b3:00:29:01:4f:46:ed:8a:e2:da:84:7b:28:98:56:53:
         5e:76:d2:56:86:8c:15:72:22:e1:7d:95:db:f1:2b:c6:29:db:
         f4:2b:75:e5:f8:d6:57:e9:8e:ad:d5:4c:63:8d:3b:c3:f2:bf:
         01:6c:3a:e9:17:84:f3:44:66:2b:dc:cc:68:4f:c0:63:c1:79:
         94:db:54:91:e1:4c:0e:c4:7f:a9:be:67:76:ee:c1:b3:97:a6:
         5a:6d:04:8e:1d:08:8b:aa:22:f1:fa:db:e9:43:47:6c:ff:b5:
         3b:de:d7:13:9d:d0:89:fc:f4:a3:9c:14:a2:0e:be:cd:0b:88:
         6a:ee:14:c9:12:58:3b:eb:36:a7:1e:2b:4a:d3:b4:01:1f:ca:
         e8:63:ad:c6:16:4a:7a:9e:87:9c:00:75:6c:68:fe:91:9f:40:
         51:4f:57:87:04:70:ef:b9:46:e9:33:63:03:0a:9f:43:21:4d:
         4b:98:d7:84:d7:09:fd:ff:cb:01:3f:1d:d8:f2:22:a4:04:d9:
         aa:5f:8d:8e:bf:1d:8f:40:cd:34:1c:11:c0:51:3d:1b:60:31:
         ff:cd:00:fe:18:f2:fc:e3:3f:75:68:a3:a4:be:e3:ea:d3:7a:
         67:5b:17:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 22:01:44 2025 by rpki-client