Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3139312e352e3133372e302f32342d3234203d3e20323633353336.roa
File:                     3139312e352e3133372e302f32342d3234203d3e20323633353336.roa (raw, json)
Hash identifier:          3ugTnhJK6dLc1UM3HyBzpXd3LXfSsLvOJfYrJxMRF4o=
Subject key identifier:   7A:61:34:37:D1:B3:84:7A:34:C2:6D:32:EB:2A:38:68:76:2D:DD:6F
Certificate issuer:       /CN=D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0
Certificate serial:       3880DAC494DB335AF0CAFD5B538A0690B76973E2
Authority key identifier: D1:1A:BF:5E:A0:73:36:38:B4:A2:FC:EB:EA:C9:51:7B:56:83:AD:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3139312e352e3133372e302f32342d3234203d3e20323633353336.roa
Signing time:             Tue 09 Sep 2025 16:46:48 +0000
ROA not before:           Tue 09 Sep 2025 16:41:48 +0000
ROA not after:            Tue 08 Sep 2026 16:46:48 +0000
asID:                     263536
IP address blocks:        191.5.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.crl
                          rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 08:23:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:80:da:c4:94:db:33:5a:f0:ca:fd:5b:53:8a:06:90:b7:69:73:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0
        Validity
            Not Before: Sep  9 16:41:48 2025 GMT
            Not After : Sep  8 16:46:48 2026 GMT
        Subject: CN=7A613437D1B3847A34C26D32EB2A3868762DDD6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:87:c6:4f:38:45:19:5a:00:2e:18:dd:f7:cc:
                    8a:ae:f4:f2:cc:56:83:60:75:7b:f2:a5:32:eb:99:
                    56:e4:94:c2:d7:db:68:74:34:7e:36:3e:b5:3f:f8:
                    5f:20:fc:c9:8e:5f:89:fd:6a:a6:02:24:e4:56:4c:
                    c8:10:15:0b:61:f5:cd:f4:fb:da:85:8b:c2:10:c0:
                    0a:3f:8b:c5:04:87:74:16:a4:8f:a8:d6:f2:af:29:
                    d3:bc:46:72:ab:59:11:ba:98:ca:87:b8:2d:d4:e1:
                    12:b2:b3:8a:45:d5:2d:2c:fe:fa:63:11:bb:9d:e5:
                    d0:ab:1f:06:46:20:9e:4b:9b:df:30:6b:25:a8:26:
                    93:81:09:59:83:89:1a:27:8d:6e:81:38:0e:fc:c9:
                    d9:8d:d5:ac:54:16:f9:3f:a8:75:a5:a8:39:2e:d1:
                    43:03:d2:be:d5:9c:a8:51:5f:81:ea:4b:9b:fa:fc:
                    93:d9:3b:bb:9f:03:f2:c1:4d:08:83:f1:87:62:ed:
                    0f:8a:ed:00:54:ca:2d:10:23:ef:7e:70:e8:b9:12:
                    31:70:71:04:09:d2:8c:13:47:b5:fa:c4:d2:7d:c8:
                    44:ec:b6:52:ec:23:a4:93:3e:cf:fd:b0:4b:25:66:
                    1c:4e:3b:6f:39:b7:b0:1e:61:ba:a9:98:23:bd:35:
                    48:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:61:34:37:D1:B3:84:7A:34:C2:6D:32:EB:2A:38:68:76:2D:DD:6F
            X509v3 Authority Key Identifier:
                keyid:D1:1A:BF:5E:A0:73:36:38:B4:A2:FC:EB:EA:C9:51:7B:56:83:AD:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3139312e352e3133372e302f32342d3234203d3e20323633353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:94:53:f7:42:f5:00:0c:87:ac:ba:2c:8c:c8:5b:d2:ad:0b:
         b0:9e:a2:2a:e3:52:f8:c5:8a:59:4d:2d:48:8f:1e:ff:25:17:
         ee:c7:de:4c:5f:ac:c6:bf:43:30:ed:22:08:ee:0e:81:72:c4:
         dd:f1:a2:b1:c5:e1:00:4b:76:eb:bb:65:dc:27:d6:95:fd:09:
         3f:20:5b:96:57:9c:d1:9c:46:d0:ba:39:f2:28:69:e7:3c:fb:
         76:12:88:6c:38:1e:a9:d7:1f:42:40:2b:d6:e0:62:d3:72:48:
         fb:8c:d0:0e:63:a0:34:04:3c:cc:0c:f3:f7:9c:8d:20:d4:af:
         fe:7c:4e:a1:22:55:98:f1:a4:4b:28:db:11:0c:89:4b:7b:e8:
         07:4f:a2:d3:7e:ed:ae:68:59:d6:cf:c3:6f:6c:e4:41:82:2f:
         8c:3a:c4:34:61:89:ae:01:72:7c:10:aa:98:cd:62:82:3f:03:
         44:8d:68:3c:26:3d:c4:db:c8:b3:c6:56:79:a0:1e:a0:2c:8c:
         1f:d2:8f:f7:fe:4c:79:3f:7a:e7:36:1e:d8:ef:03:19:17:b1:
         49:86:a6:d1:78:7f:da:8f:f2:c9:bb:4c:5b:70:30:06:5b:3a:
         30:b1:0e:c2:5a:76:1e:f2:76:6b:5e:67:c1:96:87:d2:e5:85:
         f8:ad:e0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 10:25:10 2025 by rpki-client