Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3139312e352e3134302e302f32322d3232203d3e20323633353336.roa
File:                     3139312e352e3134302e302f32322d3232203d3e20323633353336.roa (raw, json)
Hash identifier:          MDFI9Qn9i/H2MsqqMfOE9pObmv3pOGbNDjiTPrrT9OI=
Subject key identifier:   10:52:6B:02:ED:F5:2D:14:E3:B5:74:19:4E:C5:17:10:02:FA:42:63
Certificate issuer:       /CN=D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0
Certificate serial:       77C2F721E07EC7FE3928FC2D351882659F5905FC
Authority key identifier: D1:1A:BF:5E:A0:73:36:38:B4:A2:FC:EB:EA:C9:51:7B:56:83:AD:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3139312e352e3134302e302f32322d3232203d3e20323633353336.roa
Signing time:             Tue 09 Sep 2025 16:46:48 +0000
ROA not before:           Tue 09 Sep 2025 16:41:48 +0000
ROA not after:            Tue 08 Sep 2026 16:46:48 +0000
asID:                     263536
IP address blocks:        191.5.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.crl
                          rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 00:55:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:c2:f7:21:e0:7e:c7:fe:39:28:fc:2d:35:18:82:65:9f:59:05:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0
        Validity
            Not Before: Sep  9 16:41:48 2025 GMT
            Not After : Sep  8 16:46:48 2026 GMT
        Subject: CN=10526B02EDF52D14E3B574194EC5171002FA4263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:22:e5:20:5e:53:51:2b:26:be:7a:13:fa:cb:
                    22:52:6a:ef:6a:fc:9e:64:68:08:b1:3d:aa:94:3b:
                    4f:8f:21:7a:f2:27:6d:24:c9:d3:b6:0d:21:78:1a:
                    2b:5b:e3:5b:bc:bc:ff:48:10:fe:ea:a3:e4:64:7a:
                    d0:0e:8a:5b:58:68:9c:e3:c7:9e:32:6e:06:1f:f7:
                    d5:6c:bc:b8:ed:83:4a:fc:c5:78:3b:52:8f:a3:2b:
                    32:69:dd:0f:ef:e2:17:d2:9a:40:20:0d:92:92:a2:
                    bd:dd:22:01:60:1b:8c:40:e2:bb:24:87:79:ff:84:
                    df:0e:21:cc:c7:e6:a4:ab:f0:59:89:f0:1e:fc:2f:
                    69:cf:e1:2f:1e:00:1f:60:33:ee:f9:01:ed:54:7c:
                    8b:ea:7b:c7:32:68:1b:3d:35:41:14:32:c0:a6:7d:
                    71:4a:49:63:11:ba:62:b9:c4:9e:33:d1:a8:25:8d:
                    f7:7a:f3:fb:db:f2:17:b8:89:2f:01:e4:c9:d3:54:
                    50:8e:ec:83:1b:c1:c2:18:21:14:6c:e1:ef:98:c4:
                    4a:a8:36:70:6c:2e:88:b4:7b:c3:97:b2:4a:7b:dc:
                    5a:be:bf:54:53:69:14:ae:44:7e:e7:0b:72:16:38:
                    62:c1:c1:c3:72:7c:94:e6:ca:90:77:7a:b9:44:6a:
                    93:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:52:6B:02:ED:F5:2D:14:E3:B5:74:19:4E:C5:17:10:02:FA:42:63
            X509v3 Authority Key Identifier:
                keyid:D1:1A:BF:5E:A0:73:36:38:B4:A2:FC:EB:EA:C9:51:7B:56:83:AD:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3139312e352e3134302e302f32322d3232203d3e20323633353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:66:9d:ff:09:69:7f:fc:80:af:cc:86:54:0c:16:9e:19:d1:
         12:87:65:a0:40:b5:9b:52:12:0c:bc:90:0b:a1:c9:ba:e4:49:
         18:ad:29:a0:38:c1:8d:3a:93:50:19:ee:30:a3:66:e1:38:7c:
         98:5c:39:18:68:20:4e:44:b9:3d:bd:8a:bf:a9:c8:ae:71:09:
         5a:b6:c2:0e:db:64:20:9d:72:38:d2:f1:9d:2a:df:e6:0e:ac:
         a6:b1:e0:29:dd:b2:57:67:24:bf:fb:6c:c5:82:97:32:e3:19:
         73:e3:2e:c7:18:da:3f:fc:34:a7:f3:11:22:09:6e:e6:80:ca:
         24:39:de:24:db:4c:78:f8:62:ef:37:05:eb:2d:c2:88:ad:51:
         92:fd:3f:5a:85:32:d4:fd:26:68:21:f3:e4:38:88:cd:7b:f9:
         ee:bb:62:58:e2:33:4a:01:84:49:64:65:a5:4a:c8:aa:76:41:
         97:07:d8:a5:97:60:15:92:5e:c3:d3:d0:69:eb:89:de:a5:f5:
         a2:3d:25:4b:58:3b:54:04:26:53:b6:da:a0:1a:c7:2b:56:43:
         1e:a9:d2:52:3c:ca:69:5e:04:d3:15:40:2a:f5:91:d1:3a:99:
         8f:ba:ed:44:29:bf:8f:9a:6c:23:ad:7c:05:fb:2d:70:16:86:
         ab:16:af:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:29:51 2025 by rpki-client