Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3139312e352e3133392e302f32342d3234203d3e20323633353336.roa
File:                     3139312e352e3133392e302f32342d3234203d3e20323633353336.roa (raw, json)
Hash identifier:          LxRUOxoWII/ZZVcGaHLuYGixDJ9bz58tLR3ezjjryo0=
Subject key identifier:   80:11:C4:D5:60:13:11:FC:FE:B3:F0:06:A7:E8:C7:FA:2B:EE:51:37
Certificate issuer:       /CN=D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0
Certificate serial:       5E439EBFE030B7ADD0E48C6E8655B8E0015D1C3A
Authority key identifier: D1:1A:BF:5E:A0:73:36:38:B4:A2:FC:EB:EA:C9:51:7B:56:83:AD:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3139312e352e3133392e302f32342d3234203d3e20323633353336.roa
Signing time:             Tue 09 Sep 2025 18:16:08 +0000
ROA not before:           Tue 09 Sep 2025 18:11:08 +0000
ROA not after:            Tue 08 Sep 2026 18:16:08 +0000
asID:                     263536
IP address blocks:        191.5.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.crl
                          rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 03:34:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:43:9e:bf:e0:30:b7:ad:d0:e4:8c:6e:86:55:b8:e0:01:5d:1c:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0
        Validity
            Not Before: Sep  9 18:11:08 2025 GMT
            Not After : Sep  8 18:16:08 2026 GMT
        Subject: CN=8011C4D5601311FCFEB3F006A7E8C7FA2BEE5137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:0c:eb:ab:96:37:1f:c3:3e:30:eb:03:f9:6b:
                    6c:00:d0:de:04:01:67:70:a2:d4:d5:fa:c7:1c:50:
                    2f:8e:63:61:13:d3:33:c2:14:97:8a:94:89:0a:97:
                    14:85:09:f1:1c:6d:ed:e6:9d:73:28:8a:55:22:3e:
                    b0:33:15:af:24:35:d5:c9:ee:a6:b0:5b:ee:b9:19:
                    ab:6a:71:e3:82:2c:01:06:04:ce:ec:50:18:11:3f:
                    ef:50:d9:4a:71:0e:3b:24:89:8a:58:00:ca:aa:d9:
                    bf:78:3b:19:fc:05:7f:79:33:19:66:92:1d:2d:55:
                    89:72:c3:dd:a2:6a:13:fc:13:06:77:25:45:53:64:
                    68:81:d6:b0:4f:43:ea:16:66:e8:5b:17:e9:40:da:
                    91:fa:3a:1e:35:95:8c:ed:d5:b4:0e:6f:a5:86:62:
                    48:85:d3:6e:e0:db:49:27:43:f8:c0:1c:c7:8d:e9:
                    0c:28:2a:b3:79:fc:b1:3e:b8:69:d5:06:57:72:f7:
                    89:77:eb:02:f2:86:18:93:05:4b:80:a3:bb:7a:a7:
                    29:0d:b3:01:83:0b:39:94:57:d4:7e:90:0c:e5:53:
                    d5:ff:db:03:49:4a:87:66:69:aa:b7:d7:7e:cf:dc:
                    d9:14:40:60:aa:ad:59:c2:57:43:3e:fe:88:71:bf:
                    08:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:11:C4:D5:60:13:11:FC:FE:B3:F0:06:A7:E8:C7:FA:2B:EE:51:37
            X509v3 Authority Key Identifier:
                keyid:D1:1A:BF:5E:A0:73:36:38:B4:A2:FC:EB:EA:C9:51:7B:56:83:AD:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3139312e352e3133392e302f32342d3234203d3e20323633353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:a5:14:0a:86:c5:97:ba:4e:c5:a8:8f:e0:65:74:12:bb:c6:
         f6:2d:3e:f7:66:58:98:c1:d0:a1:65:20:83:23:42:55:03:e8:
         d0:dc:70:6c:cd:87:8f:05:03:91:cf:4b:2c:fc:d6:b7:31:b9:
         b4:3e:86:fe:70:b4:99:7d:63:ad:80:f7:1e:fa:5e:f9:58:84:
         91:5f:67:a3:ef:d3:82:0a:e3:bc:70:e8:c5:a9:06:52:fc:2b:
         1a:ee:58:20:b5:7f:6e:7a:d5:44:4c:b5:85:26:97:6d:29:f8:
         fe:1f:82:09:b6:69:0d:46:7f:82:0b:0e:83:41:9b:1b:56:bf:
         45:e5:0f:bb:88:cf:d2:5b:2e:59:47:d0:ec:f2:3c:f1:83:2e:
         a5:d0:d2:16:45:ec:54:ff:87:09:b5:c7:54:10:e7:f3:ca:48:
         6a:d2:de:93:7d:62:d4:e8:9e:52:a1:8c:35:3a:b1:e6:c7:a3:
         da:d5:77:4d:19:34:22:1e:b1:c3:59:c8:25:38:46:df:66:21:
         85:01:65:09:8e:58:29:26:82:50:59:cd:dd:22:16:0b:ab:b5:
         0c:e6:0d:d8:87:00:17:71:65:d5:bc:88:93:0b:d6:85:f8:3c:
         46:59:e3:69:7b:cf:df:f1:96:18:37:ea:7e:87:e6:47:22:a9:
         b5:aa:4b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:55:51 2025 by rpki-client