Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3139312e352e3134322e302f32342d3234203d3e20323633353336.roa
File:                     3139312e352e3134322e302f32342d3234203d3e20323633353336.roa (raw, json)
Hash identifier:          tvfb8LmUKy+922QhOgkgMz9ZV/rYJHOCnhWJytO2XUE=
Subject key identifier:   D9:06:DB:29:44:52:5E:65:92:BA:FF:2A:9B:EE:08:F3:51:FE:29:7D
Certificate issuer:       /CN=D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0
Certificate serial:       0D4DAC406D1E27431296C0AAF6F0FFC866E68D76
Authority key identifier: D1:1A:BF:5E:A0:73:36:38:B4:A2:FC:EB:EA:C9:51:7B:56:83:AD:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3139312e352e3134322e302f32342d3234203d3e20323633353336.roa
Signing time:             Tue 09 Sep 2025 16:46:48 +0000
ROA not before:           Tue 09 Sep 2025 16:41:48 +0000
ROA not after:            Tue 08 Sep 2026 16:46:48 +0000
asID:                     263536
IP address blocks:        191.5.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.crl
                          rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 08:23:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:4d:ac:40:6d:1e:27:43:12:96:c0:aa:f6:f0:ff:c8:66:e6:8d:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0
        Validity
            Not Before: Sep  9 16:41:48 2025 GMT
            Not After : Sep  8 16:46:48 2026 GMT
        Subject: CN=D906DB2944525E6592BAFF2A9BEE08F351FE297D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:51:1b:33:e4:1a:49:a9:15:da:b2:21:f5:b9:
                    35:7e:05:2a:0b:56:1c:44:fd:5d:05:3a:6f:50:03:
                    df:b9:83:39:b4:54:b7:5d:ba:7a:08:11:69:3f:1c:
                    d4:00:4c:cb:2f:ce:24:8b:42:5a:20:42:ec:6a:c4:
                    94:59:8e:a3:05:ae:f8:5e:af:3f:df:ac:11:e0:76:
                    54:25:dc:a0:22:e4:72:3d:c0:62:e4:7d:19:c8:7e:
                    de:ed:47:cf:bb:a7:f2:4a:6e:36:57:ff:ed:e4:e1:
                    f8:70:da:b7:ea:ac:5a:de:ba:6e:b0:b7:9b:23:94:
                    3a:55:36:a3:97:5b:b4:ed:34:05:cd:73:27:8a:95:
                    7f:ce:15:30:0a:7c:91:05:36:7f:b1:1e:4d:1a:07:
                    16:a2:6f:0e:97:36:5f:be:3f:5c:14:6d:6c:8e:35:
                    98:6f:a9:a2:05:b6:3a:0f:db:87:69:4e:9c:c8:11:
                    f0:ca:69:1d:c2:a5:c6:da:ce:af:0a:03:78:f6:6a:
                    17:f1:dc:fb:0f:5b:ed:1f:10:8e:43:5f:64:97:ed:
                    d4:5f:8a:bd:d0:03:73:07:dd:40:27:bf:8d:a9:8c:
                    5b:62:44:e8:b0:d3:4a:4f:31:37:6b:bd:1d:11:4f:
                    50:bb:57:e1:fa:28:52:23:a0:fd:53:22:89:58:98:
                    b0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:06:DB:29:44:52:5E:65:92:BA:FF:2A:9B:EE:08:F3:51:FE:29:7D
            X509v3 Authority Key Identifier:
                keyid:D1:1A:BF:5E:A0:73:36:38:B4:A2:FC:EB:EA:C9:51:7B:56:83:AD:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3139312e352e3134322e302f32342d3234203d3e20323633353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:27:3f:ea:c6:06:b2:61:41:6a:c7:39:41:5b:e2:a3:ea:60:
         0a:49:f8:84:3a:b5:b8:2d:c1:17:90:f0:c3:8e:4e:7d:f8:f2:
         63:dd:77:91:fd:ac:06:6d:23:a4:5a:57:bb:0a:9a:74:6d:57:
         88:f0:4d:cd:7c:38:eb:02:f8:7f:b4:0c:08:83:b2:94:2e:d9:
         87:79:03:31:4d:e7:ed:e3:e6:0a:ba:ac:a7:98:bd:38:0c:ca:
         69:4c:83:ad:8b:bb:dc:d5:5d:86:72:7a:ba:8a:60:3f:7c:49:
         e5:c7:25:38:dc:05:d6:a2:13:1a:f1:39:1f:ee:11:16:95:8b:
         e0:fd:8c:6f:ad:f2:08:72:57:6c:e6:47:20:46:65:f0:73:f9:
         76:98:ea:a3:a3:3c:ee:5d:ff:02:d1:3c:67:e9:8f:23:8d:c8:
         9d:22:69:78:15:51:44:0f:e2:18:a4:05:f0:2a:75:84:54:e7:
         73:2e:51:ec:b1:fd:08:8d:5f:3c:dd:ac:43:54:a5:8b:8a:b1:
         81:24:4f:b7:17:fd:b7:59:19:68:cc:6c:e4:c9:0e:59:b1:15:
         7e:ab:f4:96:f9:90:d9:2a:ec:30:2d:d9:80:15:76:e7:4f:7c:
         7a:3e:64:dd:2e:c1:ce:7e:95:86:3e:cf:b1:57:6b:85:90:98:
         18:2e:1c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 11:59:28 2025 by rpki-client