Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33322e302f32302d3332203d3e20323632373038.roa
File:                     3138362e3139332e33322e302f32302d3332203d3e20323632373038.roa (raw, json)
Hash identifier:          b4J1VrcPMRqtEKy3kbUH+IaSHTEFP63jLkD77Trb6aY=
Subject key identifier:   6A:19:51:28:CA:1A:D0:1C:30:2A:E5:CD:59:FD:2C:76:A4:03:BB:F4
Certificate issuer:       /CN=78346DE4E6250B19E47E9CC8008E76CF94DC04D7
Certificate serial:       59EBFBA9FBFFCBFD4FBAF8BFD590E3DD51C0B2BC
Authority key identifier: 78:34:6D:E4:E6:25:0B:19:E4:7E:9C:C8:00:8E:76:CF:94:DC:04:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33322e302f32302d3332203d3e20323632373038.roa
Signing time:             Fri 25 Sep 2026 03:19:43 +0000
ROA not before:           Fri 25 Sep 2026 03:14:43 +0000
ROA not after:            Fri 24 Sep 2027 03:19:43 +0000
asID:                     262708
IP address blocks:        186.193.32.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.crl
                          rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 17:23:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:eb:fb:a9:fb:ff:cb:fd:4f:ba:f8:bf:d5:90:e3:dd:51:c0:b2:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78346DE4E6250B19E47E9CC8008E76CF94DC04D7
        Validity
            Not Before: Sep 25 03:14:43 2026 GMT
            Not After : Sep 24 03:19:43 2027 GMT
        Subject: CN=6A195128CA1AD01C302AE5CD59FD2C76A403BBF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:db:57:8e:af:21:5f:fe:99:cc:9e:8d:8a:71:
                    c7:30:df:ab:f2:b1:c0:12:9a:47:c8:54:71:46:20:
                    17:36:9f:88:ec:a7:34:15:bd:40:36:20:76:84:28:
                    65:7a:b9:00:f0:a6:3e:04:89:eb:e5:57:78:fc:3e:
                    dc:c5:2e:57:52:c6:6e:de:8d:c8:b1:a0:0f:cd:9b:
                    84:a3:07:0a:49:7e:9f:e6:a5:67:dc:d9:42:7a:3c:
                    61:17:09:76:4b:59:11:3b:00:55:92:6a:2d:37:40:
                    2c:8b:0b:ca:b1:33:73:ef:68:97:b3:2e:dd:e6:bb:
                    42:72:39:6c:09:62:d9:8a:21:04:ca:58:07:ee:09:
                    4f:95:ac:60:63:39:fa:58:81:38:55:32:40:71:76:
                    e9:17:e6:ab:52:f6:1d:80:b7:d6:de:6c:2a:a4:ad:
                    05:bf:86:38:5d:ba:1a:40:57:3e:23:7c:c7:2f:ec:
                    d3:15:7c:3a:7b:04:34:eb:59:ab:7b:11:85:c2:c6:
                    5e:9f:6d:f0:31:2d:22:bb:e7:ec:9c:6e:c5:aa:67:
                    1b:ad:91:20:7e:89:bc:45:9b:03:e3:40:6a:2d:5b:
                    2b:62:75:59:96:8d:b7:d8:2d:da:f6:e1:c1:0b:95:
                    8c:4d:da:a5:73:27:d1:ca:85:40:69:0b:58:8e:19:
                    57:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:19:51:28:CA:1A:D0:1C:30:2A:E5:CD:59:FD:2C:76:A4:03:BB:F4
            X509v3 Authority Key Identifier:
                keyid:78:34:6D:E4:E6:25:0B:19:E4:7E:9C:C8:00:8E:76:CF:94:DC:04:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33322e302f32302d3332203d3e20323632373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         39:bf:d7:5a:fd:f2:ed:ec:aa:f6:ff:60:9d:e3:49:f2:75:13:
         b0:ea:d3:08:f9:a2:92:81:48:5a:05:6c:eb:9e:9e:58:23:32:
         e4:0b:a1:f8:d8:8b:14:62:c5:b9:71:40:31:b2:35:c6:e6:86:
         5e:fc:a3:c4:de:a2:42:e7:43:c6:a6:55:25:16:7f:c5:72:61:
         4a:3b:96:85:dd:39:a0:68:9a:a8:8a:5c:e0:6f:82:73:6e:f4:
         9a:52:5e:12:27:1e:4a:ee:8e:f2:53:f7:dc:53:a5:56:4c:f4:
         0f:3c:ff:ba:e4:9c:92:97:97:72:69:af:02:c0:bc:c6:d5:c4:
         47:e2:9e:d4:61:70:f2:6f:15:2a:62:b7:26:db:6d:ee:49:a8:
         02:99:fe:92:21:37:42:2b:28:a2:d5:51:0f:ac:12:68:4a:fc:
         62:10:59:14:16:64:93:94:03:5b:68:11:1f:71:14:8d:eb:9d:
         c9:92:9d:90:25:1f:8c:61:e8:0b:d7:dd:25:9e:39:be:5c:03:
         e1:0c:3c:0a:45:8b:9a:ba:d3:6f:d2:55:b7:2d:6d:d0:39:82:
         66:f5:5c:2f:78:98:e6:56:55:94:dd:d4:ff:b5:dc:50:dc:96:
         7d:8e:bd:8d:bb:09:00:fc:fe:7b:f2:2b:3f:a7:22:17:51:c0:
         4c:53:c5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:25:04 2026 by rpki-client