Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34312e302f32342d3332203d3e20323632373038.roa
File:                     3138362e3139332e34312e302f32342d3332203d3e20323632373038.roa (raw, json)
Hash identifier:          mEfiWkdoZHv/1OG9aHeH5/Va0QrhblfhjR5rBHHRxig=
Subject key identifier:   F8:A2:81:E8:B3:B6:CB:2F:87:A8:9B:53:CB:8F:89:A3:EE:6A:34:26
Certificate issuer:       /CN=78346DE4E6250B19E47E9CC8008E76CF94DC04D7
Certificate serial:       69948BA6E847CF66A020F93F745107C272848671
Authority key identifier: 78:34:6D:E4:E6:25:0B:19:E4:7E:9C:C8:00:8E:76:CF:94:DC:04:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34312e302f32342d3332203d3e20323632373038.roa
Signing time:             Fri 25 Sep 2026 03:19:45 +0000
ROA not before:           Fri 25 Sep 2026 03:14:45 +0000
ROA not after:            Fri 24 Sep 2027 03:19:45 +0000
asID:                     262708
IP address blocks:        186.193.41.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.crl
                          rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 01:19:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:94:8b:a6:e8:47:cf:66:a0:20:f9:3f:74:51:07:c2:72:84:86:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78346DE4E6250B19E47E9CC8008E76CF94DC04D7
        Validity
            Not Before: Sep 25 03:14:45 2026 GMT
            Not After : Sep 24 03:19:45 2027 GMT
        Subject: CN=F8A281E8B3B6CB2F87A89B53CB8F89A3EE6A3426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:74:3e:46:c9:2b:9d:3d:e6:f9:86:54:85:19:
                    8c:cc:82:7d:76:4b:2f:e9:c9:52:6a:0d:56:27:d6:
                    69:a4:62:5a:31:da:ac:9e:d6:a0:3d:1c:96:cf:81:
                    a1:de:5f:bf:f5:a9:ec:f1:9c:b4:57:f5:53:45:ec:
                    45:44:40:80:d0:82:ce:bd:50:90:da:be:d7:89:e7:
                    33:78:55:f7:e0:ed:38:b2:6c:f1:68:5c:d7:cc:a6:
                    0a:7a:4b:0f:08:78:53:1c:9e:f1:5d:f0:97:c2:a9:
                    f7:5a:c4:0e:63:8b:c8:c5:eb:3c:25:7a:33:50:6d:
                    f9:8c:66:4e:f2:cd:46:16:21:c5:cc:2b:96:f0:64:
                    b4:01:d7:b0:cc:62:8a:91:de:2d:5a:d9:38:85:27:
                    16:cf:1a:b9:80:9a:02:e7:99:a0:05:9e:c1:89:02:
                    2d:36:7c:65:e4:af:3c:12:79:c0:ff:af:aa:1f:8a:
                    fc:09:a3:24:34:3b:2d:eb:81:85:d2:62:26:0d:00:
                    96:5e:f5:0c:f5:c9:da:71:1d:46:ae:d9:23:2e:12:
                    21:37:43:85:d5:25:c3:45:dc:4c:a9:d3:35:0e:78:
                    0c:4b:24:02:10:98:56:26:09:22:38:52:fd:d5:b7:
                    1a:d6:a3:9a:de:cf:51:e2:0d:2d:74:e4:8e:0d:18:
                    96:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A2:81:E8:B3:B6:CB:2F:87:A8:9B:53:CB:8F:89:A3:EE:6A:34:26
            X509v3 Authority Key Identifier:
                keyid:78:34:6D:E4:E6:25:0B:19:E4:7E:9C:C8:00:8E:76:CF:94:DC:04:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34312e302f32342d3332203d3e20323632373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:8a:c3:b7:93:34:42:8d:18:27:eb:0a:d9:69:15:1a:f3:9f:
         30:00:42:38:03:b9:68:0a:37:16:78:da:f9:99:d8:00:0b:2b:
         be:7e:27:c7:f3:97:e1:ee:7f:90:9f:b1:62:9f:00:45:71:90:
         24:f5:f8:11:07:ec:6f:e1:a7:d5:e8:7b:aa:d1:bf:be:8f:f1:
         54:bc:a0:dc:e0:ab:15:ec:77:4e:8b:15:c9:52:7e:0b:4f:2a:
         44:a1:92:f4:9c:cb:7b:af:35:18:df:86:69:ef:56:2f:31:af:
         6e:de:aa:de:53:de:c5:fe:d9:e5:be:7f:a0:94:78:db:b4:58:
         4c:17:55:46:e3:b8:7e:bd:e1:b5:69:72:a0:3b:c4:56:8d:7a:
         5d:ff:6b:fb:f5:9c:40:6f:51:b1:18:09:15:47:32:7e:95:86:
         59:8e:f7:ee:6c:b6:38:bb:71:59:7a:31:ef:2f:55:57:0e:7e:
         fd:17:0e:42:4a:ea:dd:ce:34:c3:fc:e0:80:70:8d:c3:87:92:
         26:f4:9c:2d:32:83:2f:93:49:95:cd:7a:f3:26:9f:72:bd:12:
         e0:3f:d0:ad:d0:04:e5:35:ce:74:78:41:1d:4d:e9:0f:64:b7:
         d3:55:2f:68:9a:7d:76:5e:50:39:91:70:a0:f0:59:d3:4a:9f:
         64:28:77:ee
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUaZSLpuhHz2agIPk/dFEHwnKEhnEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzgzNDZERTRFNjI1MEIxOUU0N0U5Q0M4MDA4RTc2Q0Y5
NERDMDRENzAeFw0yNjA5MjUwMzE0NDVaFw0yNzA5MjQwMzE5NDVaMDMxMTAvBgNV
BAMTKEY4QTI4MUU4QjNCNkNCMkY4N0E4OUI1M0NCOEY4OUEzRUU2QTM0MjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1dD5GySudPeb5hlSFGYzMgn12
Sy/pyVJqDVYn1mmkYlox2qye1qA9HJbPgaHeX7/1qezxnLRX9VNF7EVEQIDQgs69
UJDavteJ5zN4Vffg7TiybPFoXNfMpgp6Sw8IeFMcnvFd8JfCqfdaxA5ji8jF6zwl
ejNQbfmMZk7yzUYWIcXMK5bwZLQB17DMYoqR3i1a2TiFJxbPGrmAmgLnmaAFnsGJ
Ai02fGXkrzwSecD/r6ofivwJoyQ0Oy3rgYXSYiYNAJZe9Qz1ydpxHUau2SMuEiE3
Q4XVJcNF3Eyp0zUOeAxLJAIQmFYmCSI4Uv3VtxrWo5rez1HiDS105I4NGJYTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU+KKB6LO2yy+HqJtTy4+Jo+5qNCYwHwYDVR0j
BBgwFoAUeDRt5OYlCxnkfpzIAI52z5TcBNcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUxmV2JwZDZUcFZVcFp2ckM2RHV5ZFYxemVUZnV2c1E4MnZZS2ZSaG44
cG0vMC83ODM0NkRFNEU2MjUwQjE5RTQ3RTlDQzgwMDhFNzZDRjk0REMwNEQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc4MzQ2REU0RTYyNTBCMTlF
NDdFOUNDODAwOEU3NkNGOTREQzA0RDcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVMZldicGQ2VHBWVXBadnJDNkR1eWRWMXplVGZ1dnNRODJ2WUtmUmhuOHBtLzAv
MzEzODM2MmUzMTM5MzMyZTM0MzEyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzMjM2
MzIzNzMwMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC6wSkwDQYJKoZIhvcNAQELBQADggEBAJuKw7eT
NEKNGCfrCtlpFRrznzAAQjgDuWgKNxZ42vmZ2AALK75+J8fzl+Huf5CfsWKfAEVx
kCT1+BEH7G/hp9Xoe6rRv76P8VS8oNzgqxXsd06LFclSfgtPKkShkvScy3uvNRjf
hmnvVi8xr27eqt5T3sX+2eW+f6CUeNu0WEwXVUbjuH694bVpcqA7xFaNel3/a/v1
nEBvUbEYCRVHMn6VhlmO9+5stji7cVl6Me8vVVcOfv0XDkJK6t3ONMP84IBwjcOH
kib0nC0ygy+TSZXNevMmn3K9EuA/0K3QBOU1znR4QR1N6Q9kt9NVL2iafXZeUDmR
cKDwWdNKn2Qod+4=
-----END CERTIFICATE-----
Generated at Fri Oct 30 06:24:25 2026 by rpki-client