Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3139312e352e3134302e302f32332d3233203d3e20323633353336.roa
File:                     3139312e352e3134302e302f32332d3233203d3e20323633353336.roa (raw, json)
Hash identifier:          st7rOd4jt8o4wI2Nw4A2U7fFjp1Yr+4L0tH+ecpAdLM=
Subject key identifier:   10:39:5B:5E:FC:A1:A0:34:66:37:4E:96:6E:68:FC:C4:88:1E:4A:62
Certificate issuer:       /CN=D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0
Certificate serial:       76D77EBFE9F2626CFEA45F1C87D0C8F9D56F5E6A
Authority key identifier: D1:1A:BF:5E:A0:73:36:38:B4:A2:FC:EB:EA:C9:51:7B:56:83:AD:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3139312e352e3134302e302f32332d3233203d3e20323633353336.roa
Signing time:             Tue 09 Sep 2025 16:46:48 +0000
ROA not before:           Tue 09 Sep 2025 16:41:48 +0000
ROA not after:            Tue 08 Sep 2026 16:46:48 +0000
asID:                     263536
IP address blocks:        191.5.140.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.crl
                          rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 08:23:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:d7:7e:bf:e9:f2:62:6c:fe:a4:5f:1c:87:d0:c8:f9:d5:6f:5e:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0
        Validity
            Not Before: Sep  9 16:41:48 2025 GMT
            Not After : Sep  8 16:46:48 2026 GMT
        Subject: CN=10395B5EFCA1A03466374E966E68FCC4881E4A62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f7:ff:f8:e8:93:a0:ae:61:30:6c:8d:66:12:
                    36:d3:c9:4e:1e:71:f9:40:97:42:ba:ee:7c:37:c5:
                    99:88:88:9b:85:ae:87:d2:89:ca:8b:07:dd:38:2b:
                    be:4d:b4:be:52:f6:36:6d:63:66:e0:a4:9a:8b:f1:
                    13:08:71:91:1f:bb:5e:9e:03:6e:cb:e1:b8:11:4c:
                    01:72:e2:ad:51:23:4f:04:c6:43:1e:9b:0b:d1:3c:
                    f3:ac:29:8d:eb:69:98:fe:3d:e6:17:46:e1:ad:ea:
                    0a:54:5e:a9:47:17:d9:0e:5c:af:92:17:22:27:ae:
                    2a:86:eb:bf:c4:7a:fd:c7:e0:f2:46:e0:9f:85:fd:
                    52:3a:43:ed:cc:2a:ad:de:c8:63:a0:af:c7:6e:29:
                    18:de:6f:dc:3f:09:2f:0e:e2:fe:4a:e4:b3:21:4c:
                    74:bb:13:15:38:86:c1:f6:d9:f3:35:31:82:23:48:
                    54:71:30:a1:d1:38:ec:8b:36:44:b0:d2:fc:3e:0d:
                    d1:1d:0f:8a:38:a9:43:45:bf:ca:0b:e7:01:79:4b:
                    65:10:21:1c:ac:22:b2:ae:59:8d:ed:2e:e3:84:61:
                    0f:28:e6:6d:a0:50:72:4a:c3:1f:0b:19:a5:3f:0a:
                    e8:07:67:66:d6:d2:3c:f5:a0:d7:c1:b7:0d:28:22:
                    9b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:39:5B:5E:FC:A1:A0:34:66:37:4E:96:6E:68:FC:C4:88:1E:4A:62
            X509v3 Authority Key Identifier:
                keyid:D1:1A:BF:5E:A0:73:36:38:B4:A2:FC:EB:EA:C9:51:7B:56:83:AD:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3139312e352e3134302e302f32332d3233203d3e20323633353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:3b:f0:28:6b:36:c2:89:7e:43:54:0c:d5:38:9e:d1:0d:59:
         7f:59:72:6c:40:83:7d:a6:0d:0f:bc:f6:82:9f:bb:d5:3d:53:
         b7:8f:84:16:8b:64:c9:c3:a1:23:ca:db:14:83:a4:b0:29:ff:
         f6:0e:42:0c:b4:9a:1b:25:b2:06:8c:d3:b6:f1:81:0a:5f:d8:
         31:d9:86:a5:2a:53:b3:5b:ec:9e:79:e2:3e:20:74:15:99:50:
         23:c8:80:4d:02:f6:2f:c8:a8:a0:cb:30:3c:21:11:bf:4c:4d:
         83:81:3d:ef:a3:d6:d9:bf:e8:80:46:86:ef:0c:1e:6a:06:c8:
         10:fa:ca:0b:ac:42:aa:30:46:c0:03:de:a4:44:be:a3:22:53:
         63:f2:be:d7:c1:e6:58:99:ae:b3:7b:fa:40:8c:ef:20:39:6c:
         87:9e:1f:1a:d0:0c:60:4f:73:27:1c:c7:6e:72:94:85:03:5e:
         74:35:3b:c3:10:2c:b9:52:16:88:41:68:d0:80:de:ae:de:a6:
         7c:56:3c:fe:6b:73:7c:d1:5e:13:71:5c:b1:d4:3c:b0:f0:f9:
         d2:a6:8d:bd:52:44:7e:20:e7:d4:81:b5:76:8d:93:24:51:36:
         84:b9:72:90:3b:42:67:24:a6:1a:da:20:5f:92:6f:b0:39:17:
         f3:b0:e9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 17:34:22 2025 by rpki-client