Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3139312e352e3133302e302f32342d3234203d3e20323633353336.roa
File:                     3139312e352e3133302e302f32342d3234203d3e20323633353336.roa (raw, json)
Hash identifier:          5hQ3/ZF5v4KT9qkxKPJ7B2B0n6Drj80xYHOmd6B6YLI=
Subject key identifier:   6C:CA:BD:59:31:8E:AB:78:98:AC:53:55:23:D9:CD:9E:2D:C3:EC:95
Certificate issuer:       /CN=D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0
Certificate serial:       78277495731B4D4D503EE9E3DD88C77E0ADE9019
Authority key identifier: D1:1A:BF:5E:A0:73:36:38:B4:A2:FC:EB:EA:C9:51:7B:56:83:AD:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3139312e352e3133302e302f32342d3234203d3e20323633353336.roa
Signing time:             Tue 09 Sep 2025 18:15:32 +0000
ROA not before:           Tue 09 Sep 2025 18:10:32 +0000
ROA not after:            Tue 08 Sep 2026 18:15:32 +0000
asID:                     263536
IP address blocks:        191.5.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.crl
                          rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 03:34:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:27:74:95:73:1b:4d:4d:50:3e:e9:e3:dd:88:c7:7e:0a:de:90:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0
        Validity
            Not Before: Sep  9 18:10:32 2025 GMT
            Not After : Sep  8 18:15:32 2026 GMT
        Subject: CN=6CCABD59318EAB7898AC535523D9CD9E2DC3EC95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d0:61:9a:1d:47:37:14:4d:de:15:cb:75:bc:
                    fb:83:bd:7c:83:89:9c:cf:36:81:a8:d8:c5:d8:36:
                    39:37:3f:64:09:fc:74:2f:05:0e:76:58:ba:e3:e5:
                    f6:50:be:8f:5c:77:ce:74:0a:c3:6b:16:07:04:21:
                    fb:52:56:f6:96:c3:d6:27:6b:4c:19:6b:5f:34:ec:
                    f4:05:a4:f2:ed:b3:58:af:b9:9e:09:a5:4a:7b:d8:
                    20:17:82:8a:bd:9f:27:a9:20:ec:ec:03:39:04:03:
                    80:7e:1e:ea:f6:2e:ec:c0:e1:17:e4:7b:3f:79:c2:
                    aa:78:69:17:2f:64:bf:3e:a4:1a:26:34:cd:12:a7:
                    20:fa:70:55:09:1e:c8:fd:e8:7b:cb:5c:ee:ba:b8:
                    a2:35:a7:9b:8e:9c:82:0a:fa:79:00:04:78:af:5e:
                    d6:93:c0:34:9d:52:3b:49:08:c5:d1:99:ce:7a:73:
                    9b:dd:e2:89:4d:61:9d:14:2f:10:da:4d:31:8f:a3:
                    70:2c:21:5b:01:52:91:94:1a:af:c1:e1:f9:03:2c:
                    f3:59:91:b2:84:58:04:50:36:12:34:d7:22:5e:ed:
                    56:c5:93:4e:de:9a:83:5d:b8:29:b9:77:ce:55:f4:
                    ae:3c:0a:b9:19:6a:2b:ad:14:8b:b5:22:f1:cf:a0:
                    c9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:CA:BD:59:31:8E:AB:78:98:AC:53:55:23:D9:CD:9E:2D:C3:EC:95
            X509v3 Authority Key Identifier:
                keyid:D1:1A:BF:5E:A0:73:36:38:B4:A2:FC:EB:EA:C9:51:7B:56:83:AD:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3139312e352e3133302e302f32342d3234203d3e20323633353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:5b:a6:85:bb:a7:c1:61:49:48:73:d1:18:e9:ab:82:bc:39:
         53:61:e1:e6:da:fa:5e:1d:d3:ce:e2:c9:8a:f8:55:08:df:aa:
         99:38:09:18:8c:ca:8c:fd:f1:78:db:08:f5:36:bf:0b:eb:ab:
         75:e1:52:55:51:15:16:de:33:57:ce:16:15:2e:19:de:5e:fb:
         06:91:95:ca:28:80:76:49:ae:86:12:28:44:e5:ac:2e:24:39:
         ec:80:77:e1:9e:77:4f:46:f5:bf:8c:79:86:11:26:27:e3:ea:
         02:87:07:2e:be:d9:a6:0e:09:b7:62:05:a4:15:ba:90:44:ad:
         9d:93:07:a0:96:b9:e5:05:78:61:29:ac:7c:52:12:20:94:4c:
         66:91:0a:93:3a:df:79:1d:b1:33:fa:06:b3:3a:6d:b4:65:4a:
         cb:bd:8b:7a:c0:f3:43:eb:88:27:26:cb:9e:7b:7d:60:75:e7:
         89:a2:10:1b:7e:48:f0:74:c1:6d:5c:cd:e1:49:25:35:d6:5f:
         a0:44:3d:8d:31:85:38:ba:51:28:ca:24:f9:ce:17:2a:6d:e6:
         3d:fc:29:3b:d1:a7:de:d4:0e:57:ce:f4:2f:7d:25:0c:55:7f:
         96:e9:a2:d5:7e:47:62:fe:72:3a:35:bd:c5:85:87:d5:85:e5:
         72:69:53:7d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUeCd0lXMbTU1QPunj3YjHfgrekBkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDExQUJGNUVBMDczMzYzOEI0QTJGQ0VCRUFDOTUxN0I1
NjgzQUREMDAeFw0yNTA5MDkxODEwMzJaFw0yNjA5MDgxODE1MzJaMDMxMTAvBgNV
BAMTKDZDQ0FCRDU5MzE4RUFCNzg5OEFDNTM1NTIzRDlDRDlFMkRDM0VDOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC50GGaHUc3FE3eFct1vPuDvXyD
iZzPNoGo2MXYNjk3P2QJ/HQvBQ52WLrj5fZQvo9cd850CsNrFgcEIftSVvaWw9Yn
a0wZa1807PQFpPLts1ivuZ4JpUp72CAXgoq9nyepIOzsAzkEA4B+Hur2LuzA4Rfk
ez95wqp4aRcvZL8+pBomNM0SpyD6cFUJHsj96HvLXO66uKI1p5uOnIIK+nkABHiv
XtaTwDSdUjtJCMXRmc56c5vd4olNYZ0ULxDaTTGPo3AsIVsBUpGUGq/B4fkDLPNZ
kbKEWARQNhI01yJe7VbFk07emoNduCm5d85V9K48CrkZaiutFIu1IvHPoMlRAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUbMq9WTGOq3iYrFNVI9nNni3D7JUwHwYDVR0j
BBgwFoAU0Rq/XqBzNji0ovzr6slRe1aDrdAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzhiSEQ5clBiNlZ1bXZFcnpQMjNGRzFVN2ZIb3VQVFk1eUpaWEpDMUhw
OGIvMS9EMTFBQkY1RUEwNzMzNjM4QjRBMkZDRUJFQUM5NTE3QjU2ODNBREQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxMUFCRjVFQTA3MzM2MzhC
NEEyRkNFQkVBQzk1MTdCNTY4M0FERDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc4YkhEOXJQYjZWdW12RXJ6UDIzRkcxVTdmSG91UFRZNXlKWlhKQzFIcDhiLzEv
MzEzOTMxMmUzNTJlMzEzMzMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMz
MzUzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAvwWCMA0GCSqGSIb3DQEBCwUAA4IBAQCmW6aFu6fB
YUlIc9EY6auCvDlTYeHm2vpeHdPO4smK+FUI36qZOAkYjMqM/fF42wj1Nr8L66t1
4VJVURUW3jNXzhYVLhneXvsGkZXKKIB2Sa6GEihE5awuJDnsgHfhnndPRvW/jHmG
ESYn4+oChwcuvtmmDgm3YgWkFbqQRK2dkweglrnlBXhhKax8UhIglExmkQqTOt95
HbEz+gazOm20ZUrLvYt6wPND64gnJsuee31gdeeJohAbfkjwdMFtXM3hSSU11l+g
RD2NMYU4ulEoyiT5zhcqbeY9/Ck70afe1A5XzvQvfSUMVX+W6aLVfkdi/nI6Nb3F
hYfVheVyaVN9
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:55:48 2025 by rpki-client