Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33392e302f32342d3332203d3e20323632373038.roa
File:                     3138362e3139332e33392e302f32342d3332203d3e20323632373038.roa (raw, json)
Hash identifier:          Q26qHbowGUQGW2Qz+KIhsfdP8ouSdd8f9AwXzpzPtFQ=
Subject key identifier:   5D:15:49:0D:7C:3F:F9:6C:8F:16:A3:55:F1:B7:19:6E:45:13:24:19
Certificate issuer:       /CN=78346DE4E6250B19E47E9CC8008E76CF94DC04D7
Certificate serial:       7F72D1A27EC857AA4FE7E7DDC7FDD50880F1384E
Authority key identifier: 78:34:6D:E4:E6:25:0B:19:E4:7E:9C:C8:00:8E:76:CF:94:DC:04:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33392e302f32342d3332203d3e20323632373038.roa
Signing time:             Fri 25 Sep 2026 03:19:44 +0000
ROA not before:           Fri 25 Sep 2026 03:14:44 +0000
ROA not after:            Fri 24 Sep 2027 03:19:44 +0000
asID:                     262708
IP address blocks:        186.193.39.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.crl
                          rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 17:23:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:72:d1:a2:7e:c8:57:aa:4f:e7:e7:dd:c7:fd:d5:08:80:f1:38:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78346DE4E6250B19E47E9CC8008E76CF94DC04D7
        Validity
            Not Before: Sep 25 03:14:44 2026 GMT
            Not After : Sep 24 03:19:44 2027 GMT
        Subject: CN=5D15490D7C3FF96C8F16A355F1B7196E45132419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bb:33:85:e4:57:d0:b4:d1:8b:d1:f7:2e:32:
                    c6:97:08:96:c5:f4:6e:d6:6d:0a:bf:83:97:4c:bf:
                    52:71:9a:42:50:77:92:e0:bc:44:78:e5:bc:3c:84:
                    1a:8d:51:1b:b0:b3:f1:a8:64:24:85:39:42:d1:f4:
                    5e:ee:e1:99:97:dd:cc:df:21:af:0b:d8:de:35:62:
                    d9:75:8e:32:56:28:20:5b:af:54:d3:93:a8:c7:a8:
                    07:44:46:fd:3e:7b:07:c2:f0:ca:4b:34:ff:58:ab:
                    9b:ad:2a:c6:30:71:b7:a1:ec:28:66:01:93:fb:15:
                    33:8d:c6:4e:da:60:8c:4f:16:55:38:bd:1d:4a:4d:
                    3c:4b:ef:19:fb:f1:ec:2a:30:7b:60:06:79:7d:1c:
                    a7:e7:56:cc:d1:fa:f2:47:44:37:7f:48:e1:aa:df:
                    a0:ca:5f:03:53:3b:b1:d1:04:fb:4f:77:99:e3:54:
                    8e:c3:f7:17:3a:dd:0c:e8:bd:83:3f:44:b9:70:63:
                    8d:f9:42:9e:38:82:85:3c:fa:8a:b9:7a:ab:58:32:
                    47:80:be:1b:d2:4f:ff:4e:1e:0a:24:b2:81:b5:36:
                    fc:da:0a:6c:da:b0:fc:31:94:e9:43:c3:d5:86:45:
                    04:3e:15:ec:ee:0c:e1:1e:3c:f0:76:44:2b:6e:98:
                    b0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:15:49:0D:7C:3F:F9:6C:8F:16:A3:55:F1:B7:19:6E:45:13:24:19
            X509v3 Authority Key Identifier:
                keyid:78:34:6D:E4:E6:25:0B:19:E4:7E:9C:C8:00:8E:76:CF:94:DC:04:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33392e302f32342d3332203d3e20323632373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:95:e0:4c:fc:0d:3e:b6:8a:7c:22:8b:39:58:c8:3f:05:e8:
         d0:a9:92:0f:44:ba:16:d8:bf:d8:cf:dd:23:05:2b:f6:eb:5d:
         a3:91:18:e9:ec:85:a1:d6:9b:ea:e6:19:19:66:d1:94:17:c0:
         41:11:d9:e3:08:97:a9:f0:95:05:89:3e:07:ba:70:8e:1c:4e:
         8b:86:41:97:9f:e4:c5:58:c1:ae:2a:8c:1e:23:b7:cf:4e:d4:
         8b:5f:4d:92:92:6d:5d:17:09:59:23:42:6c:a9:25:1c:11:81:
         4f:49:97:93:32:0b:62:5b:84:c7:2c:75:6a:bb:51:02:ef:b8:
         6b:98:2c:77:0d:83:d0:64:1d:bf:5a:0a:7e:99:38:47:34:a8:
         30:67:a7:33:4f:c4:d5:c1:17:83:fd:e3:32:11:a7:a4:7b:d5:
         58:e8:d3:7d:72:4f:68:f4:cb:ad:b0:3e:d4:1f:00:09:c6:28:
         cc:8c:8c:39:fa:44:1e:ce:84:5c:79:33:bd:62:d3:37:d9:4b:
         07:f4:36:5d:cb:df:9e:58:4b:f1:d5:d6:79:71:6f:8c:5f:37:
         e1:a8:04:fa:81:49:61:a9:f8:da:e2:e2:a1:94:ac:51:e5:9b:
         1f:8c:51:68:ce:97:8a:ff:2f:f5:79:23:11:61:b4:e6:a0:b4:
         c5:f8:3e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 03:01:28 2026 by rpki-client