Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3139312e352e3133382e302f32342d3234203d3e20323633353336.roa
File:                     3139312e352e3133382e302f32342d3234203d3e20323633353336.roa (raw, json)
Hash identifier:          Gokrs2TKM+Nn7bMvXS9erxgCYbrPWaP9Ssv+I18paLo=
Subject key identifier:   00:62:09:03:ED:CE:18:F2:68:1C:92:7B:DA:0E:90:BA:05:07:FC:27
Certificate issuer:       /CN=D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0
Certificate serial:       2837AF063F4F753C36AD107326138655626B9427
Authority key identifier: D1:1A:BF:5E:A0:73:36:38:B4:A2:FC:EB:EA:C9:51:7B:56:83:AD:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3139312e352e3133382e302f32342d3234203d3e20323633353336.roa
Signing time:             Tue 09 Sep 2025 16:46:49 +0000
ROA not before:           Tue 09 Sep 2025 16:41:49 +0000
ROA not after:            Tue 08 Sep 2026 16:46:49 +0000
asID:                     263536
IP address blocks:        191.5.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.crl
                          rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 03:34:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:37:af:06:3f:4f:75:3c:36:ad:10:73:26:13:86:55:62:6b:94:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0
        Validity
            Not Before: Sep  9 16:41:49 2025 GMT
            Not After : Sep  8 16:46:49 2026 GMT
        Subject: CN=00620903EDCE18F2681C927BDA0E90BA0507FC27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:29:6e:62:70:8e:aa:10:a7:82:6d:bb:04:9a:
                    b8:8e:c8:d6:19:db:ca:c4:36:c9:8d:a3:26:b1:14:
                    f7:ee:e0:ae:81:8b:b3:a7:b0:83:57:9a:75:61:85:
                    b2:6a:2e:57:c9:d8:69:b5:1a:81:4c:de:2d:7f:c4:
                    98:f6:cc:56:9f:9d:b3:0f:21:70:02:26:8b:fa:24:
                    3f:22:c9:32:7d:6d:8f:41:d7:d5:ad:4e:ee:c0:15:
                    1a:3b:17:df:fe:dc:6f:30:c7:13:11:d5:1c:b1:57:
                    29:bc:0d:c3:72:5e:58:94:fe:92:8e:c2:81:a2:37:
                    59:69:fd:ed:40:30:cf:74:e0:a4:6a:43:1d:10:16:
                    1f:a6:d3:a1:0d:77:be:64:16:8e:b9:ef:4f:b1:d6:
                    2e:c1:ea:12:3c:38:17:51:30:9d:39:30:39:75:d8:
                    ff:d7:6b:80:48:0f:ce:ee:08:18:27:f7:4c:3e:2a:
                    e9:bb:4b:b6:a5:16:c2:ea:ef:29:fd:2d:ad:56:df:
                    99:1c:b4:5d:bd:9d:93:c3:be:d9:18:23:02:3b:9a:
                    e9:69:88:72:fa:ad:52:2b:19:6f:ec:d7:e3:99:d5:
                    9f:8c:ce:9c:fa:3d:d4:49:22:ff:47:4b:16:4b:6e:
                    bb:ad:d8:6c:a8:eb:2e:c4:0a:1b:16:2e:95:b1:64:
                    00:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:62:09:03:ED:CE:18:F2:68:1C:92:7B:DA:0E:90:BA:05:07:FC:27
            X509v3 Authority Key Identifier:
                keyid:D1:1A:BF:5E:A0:73:36:38:B4:A2:FC:EB:EA:C9:51:7B:56:83:AD:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3139312e352e3133382e302f32342d3234203d3e20323633353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:1b:93:f3:6d:72:06:28:6e:fd:4a:77:84:40:ac:77:51:ad:
         21:9d:4b:99:28:df:45:27:b1:0a:b0:7e:36:34:08:96:32:70:
         e8:0e:c3:ee:aa:ee:5d:e1:1f:90:a0:0e:28:9b:2c:d3:a8:d5:
         a4:08:7e:91:a8:de:40:b0:77:5c:e2:81:a9:b3:b5:bb:2b:76:
         1a:cb:47:e4:c6:9c:0d:b1:bc:5e:06:3c:37:e0:9b:ff:04:63:
         c9:c9:7b:01:a3:43:0a:f7:ea:35:26:56:ee:cc:77:3e:7b:af:
         27:f6:74:a2:c9:00:78:c7:96:17:66:f0:9d:4b:d6:a9:42:54:
         aa:56:82:13:0c:be:17:6b:f0:36:2f:3c:1a:26:0a:a0:02:26:
         01:73:31:0b:20:ce:0a:c7:48:aa:f0:3b:de:3a:36:2c:8a:ca:
         93:dc:dd:2e:da:6e:34:93:7e:05:f6:4e:77:68:6b:c7:3a:d7:
         91:92:49:e8:b6:e3:b3:cc:9b:3c:51:d6:d2:05:b2:f8:c2:a6:
         59:67:1b:fb:d5:4f:ba:52:c5:2d:a5:78:54:63:e9:a9:d4:79:
         f9:4d:c2:9c:c6:f5:ac:d3:ea:c6:fb:64:29:d6:0a:7b:7d:5e:
         66:a5:09:f5:0d:05:99:3f:76:b2:ea:b8:38:61:ed:39:c0:71:
         6a:67:74:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:55:47 2025 by rpki-client