Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33362e302f32342d3332203d3e20323632373038.roa
File:                     3138362e3139332e33362e302f32342d3332203d3e20323632373038.roa (raw, json)
Hash identifier:          /ea6bQMen8ZSD5tE6wWrnglL23ZqW7q3yns9zHQrHzk=
Subject key identifier:   0E:AE:D4:DB:FC:1A:B8:BD:4D:0E:55:60:90:60:50:92:14:BC:87:2B
Certificate issuer:       /CN=78346DE4E6250B19E47E9CC8008E76CF94DC04D7
Certificate serial:       2D77A00622404A863289E4B8C9458D9036B534D9
Authority key identifier: 78:34:6D:E4:E6:25:0B:19:E4:7E:9C:C8:00:8E:76:CF:94:DC:04:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33362e302f32342d3332203d3e20323632373038.roa
Signing time:             Fri 25 Sep 2026 03:19:36 +0000
ROA not before:           Fri 25 Sep 2026 03:14:36 +0000
ROA not after:            Fri 24 Sep 2027 03:19:36 +0000
asID:                     262708
IP address blocks:        186.193.36.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.crl
                          rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 01:19:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:77:a0:06:22:40:4a:86:32:89:e4:b8:c9:45:8d:90:36:b5:34:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78346DE4E6250B19E47E9CC8008E76CF94DC04D7
        Validity
            Not Before: Sep 25 03:14:36 2026 GMT
            Not After : Sep 24 03:19:36 2027 GMT
        Subject: CN=0EAED4DBFC1AB8BD4D0E55609060509214BC872B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e8:dd:33:2e:3d:52:c4:9c:18:d8:ce:7d:c2:
                    27:b2:39:d3:5a:2b:a9:be:62:83:4e:10:26:dc:1d:
                    20:ea:d4:6a:84:4a:43:cd:e4:3a:17:50:de:47:14:
                    ae:28:b3:a7:d2:59:1b:92:e3:c1:96:26:df:b8:52:
                    3f:b6:5a:a2:5f:65:59:74:5d:2f:a2:29:ac:0b:3b:
                    09:26:bf:23:4e:4a:4b:6d:84:c5:94:42:b3:a4:72:
                    03:61:58:a7:af:79:80:ca:8a:88:05:d3:96:83:dc:
                    2d:8e:db:b6:52:b5:4a:4f:bc:b6:dc:07:31:50:7c:
                    78:0f:63:c8:cc:67:ab:80:a8:da:48:c6:11:f3:c8:
                    d7:90:2e:58:ca:30:73:1a:03:2c:b2:85:f1:59:1b:
                    5e:89:55:ab:6a:0e:98:71:28:01:1d:d1:11:5b:39:
                    5f:11:a9:71:fd:c4:99:3e:32:73:a2:4c:68:63:b3:
                    cf:1d:60:cf:52:d3:8a:92:b5:94:04:a8:97:6a:b3:
                    94:cd:43:fe:30:86:f8:af:8a:6d:5f:2b:52:56:10:
                    9b:5d:f6:c9:c6:95:52:1e:d0:e3:6e:95:a6:f1:b7:
                    b4:41:6e:b2:87:85:6e:05:f3:ad:fa:a1:24:3e:2f:
                    c4:88:9e:0f:44:15:98:9e:d1:7d:3e:53:ce:e7:45:
                    fb:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:AE:D4:DB:FC:1A:B8:BD:4D:0E:55:60:90:60:50:92:14:BC:87:2B
            X509v3 Authority Key Identifier:
                keyid:78:34:6D:E4:E6:25:0B:19:E4:7E:9C:C8:00:8E:76:CF:94:DC:04:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33362e302f32342d3332203d3e20323632373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:20:8c:10:50:5b:bd:62:fe:1b:13:35:4f:42:d9:ab:77:c0:
         1e:b1:71:f3:fd:dc:eb:a3:bb:84:9e:c1:ec:7c:78:43:9f:e9:
         55:d1:56:18:38:15:56:5e:23:2a:5d:f7:a5:2b:66:40:28:24:
         50:9f:0f:ce:4c:fe:47:7c:40:e8:f1:26:5f:2c:11:fd:3d:d0:
         c4:c7:91:29:2a:67:cb:9d:c1:84:e2:85:d6:39:d9:4f:6d:6c:
         86:4d:84:f6:3f:05:93:02:75:d2:14:c1:d2:a5:75:5b:f5:3f:
         6c:35:83:21:15:3e:32:62:6c:27:fd:04:f1:1a:10:ad:01:8e:
         40:52:1c:50:00:6a:28:b1:30:0f:96:5e:7b:88:7e:cf:18:22:
         06:c1:d6:8c:b6:59:ab:1d:e2:6f:1d:78:7e:57:59:6a:25:7b:
         8d:e5:97:49:25:fd:41:a0:d8:48:5d:aa:c4:7a:66:d9:54:90:
         00:ae:ef:35:de:79:70:ab:57:d1:12:ae:22:d3:a8:68:09:f3:
         0f:e3:b5:3d:cd:13:d2:bb:35:0c:3c:ff:99:17:14:43:d9:87:
         17:ac:ec:c0:54:f4:51:4c:bf:b0:81:fa:fe:54:06:e8:98:cc:
         68:1a:55:a2:08:ff:c8:d3:72:4a:51:18:cb:ca:d6:24:b1:2b:
         2c:0f:4d:da
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULXegBiJASoYyieS4yUWNkDa1NNkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzgzNDZERTRFNjI1MEIxOUU0N0U5Q0M4MDA4RTc2Q0Y5
NERDMDRENzAeFw0yNjA5MjUwMzE0MzZaFw0yNzA5MjQwMzE5MzZaMDMxMTAvBgNV
BAMTKDBFQUVENERCRkMxQUI4QkQ0RDBFNTU2MDkwNjA1MDkyMTRCQzg3MkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk6N0zLj1SxJwY2M59wieyOdNa
K6m+YoNOECbcHSDq1GqESkPN5DoXUN5HFK4os6fSWRuS48GWJt+4Uj+2WqJfZVl0
XS+iKawLOwkmvyNOSktthMWUQrOkcgNhWKeveYDKiogF05aD3C2O27ZStUpPvLbc
BzFQfHgPY8jMZ6uAqNpIxhHzyNeQLljKMHMaAyyyhfFZG16JVatqDphxKAEd0RFb
OV8RqXH9xJk+MnOiTGhjs88dYM9S04qStZQEqJdqs5TNQ/4whvivim1fK1JWEJtd
9snGlVIe0ONulabxt7RBbrKHhW4F8636oSQ+L8SIng9EFZie0X0+U87nRftxAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUDq7U2/wauL1NDlVgkGBQkhS8hyswHwYDVR0j
BBgwFoAUeDRt5OYlCxnkfpzIAI52z5TcBNcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUxmV2JwZDZUcFZVcFp2ckM2RHV5ZFYxemVUZnV2c1E4MnZZS2ZSaG44
cG0vMC83ODM0NkRFNEU2MjUwQjE5RTQ3RTlDQzgwMDhFNzZDRjk0REMwNEQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc4MzQ2REU0RTYyNTBCMTlF
NDdFOUNDODAwOEU3NkNGOTREQzA0RDcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVMZldicGQ2VHBWVXBadnJDNkR1eWRWMXplVGZ1dnNRODJ2WUtmUmhuOHBtLzAv
MzEzODM2MmUzMTM5MzMyZTMzMzYyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzMjM2
MzIzNzMwMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC6wSQwDQYJKoZIhvcNAQELBQADggEBAM8gjBBQ
W71i/hsTNU9C2at3wB6xcfP93Ouju4Sewex8eEOf6VXRVhg4FVZeIypd96UrZkAo
JFCfD85M/kd8QOjxJl8sEf090MTHkSkqZ8udwYTihdY52U9tbIZNhPY/BZMCddIU
wdKldVv1P2w1gyEVPjJibCf9BPEaEK0BjkBSHFAAaiixMA+WXnuIfs8YIgbB1oy2
Wasd4m8deH5XWWole43ll0kl/UGg2EhdqsR6ZtlUkACu7zXeeXCrV9ESriLTqGgJ
8w/jtT3NE9K7NQw8/5kXFEPZhxes7MBU9FFMv7CB+v5UBuiYzGgaVaII/8jTckpR
GMvK1iSxKywPTdo=
-----END CERTIFICATE-----
Generated at Fri Oct 30 11:27:55 2026 by rpki-client