Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3139312e352e3134332e302f32342d3234203d3e20323633353336.roa
File:                     3139312e352e3134332e302f32342d3234203d3e20323633353336.roa (raw, json)
Hash identifier:          WRaVAXsyJuKWHLBqY/qE2CSbWP6YeBjr9ayWk5y4NC4=
Subject key identifier:   80:6C:5A:F1:B3:E0:EC:CD:9E:CB:53:07:62:E3:C0:98:6F:C5:80:67
Certificate issuer:       /CN=D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0
Certificate serial:       505AB93B01B47D89A94D5BB8D32B1B29B2D0C324
Authority key identifier: D1:1A:BF:5E:A0:73:36:38:B4:A2:FC:EB:EA:C9:51:7B:56:83:AD:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3139312e352e3134332e302f32342d3234203d3e20323633353336.roa
Signing time:             Tue 09 Sep 2025 16:46:50 +0000
ROA not before:           Tue 09 Sep 2025 16:41:50 +0000
ROA not after:            Tue 08 Sep 2026 16:46:50 +0000
asID:                     263536
IP address blocks:        191.5.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.crl
                          rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 03:34:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:5a:b9:3b:01:b4:7d:89:a9:4d:5b:b8:d3:2b:1b:29:b2:d0:c3:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0
        Validity
            Not Before: Sep  9 16:41:50 2025 GMT
            Not After : Sep  8 16:46:50 2026 GMT
        Subject: CN=806C5AF1B3E0ECCD9ECB530762E3C0986FC58067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d3:36:d6:e5:d3:b6:ec:c3:7b:bc:1a:50:ae:
                    64:29:ce:af:8f:8a:dc:e8:50:66:52:5e:fe:38:19:
                    3b:0b:31:66:59:5f:2d:04:37:b5:19:30:5d:1c:be:
                    3d:da:45:0b:23:09:ac:25:85:82:84:0b:0e:f1:15:
                    de:36:57:88:ae:ed:e2:ac:c3:f0:89:6a:29:cb:1a:
                    e8:dd:af:98:15:68:d9:22:d1:26:05:ea:f6:ef:d5:
                    f6:86:dd:f6:46:cc:69:4f:36:38:dc:46:fb:e1:3e:
                    d6:0c:7a:29:54:84:c7:1e:0c:72:4c:a5:4c:ea:0f:
                    ac:fd:4e:06:0a:67:88:0b:fb:c1:ac:9c:6b:d6:8d:
                    20:07:65:47:96:60:a6:36:7d:45:3d:ad:8f:39:b2:
                    58:91:d4:b9:a6:31:22:7b:ff:ec:d5:e4:00:77:ab:
                    b0:f3:63:9e:f3:dd:da:24:18:33:7c:da:33:84:6d:
                    e9:9b:3a:b3:1d:f9:45:61:b8:98:f0:f2:0b:31:f1:
                    f4:51:b0:fd:63:82:69:58:9f:e3:e9:3f:86:92:72:
                    e1:e8:c8:1c:a6:8b:fd:91:53:98:23:7e:17:31:3c:
                    01:1d:ce:b8:85:68:69:a5:7f:29:1c:b8:a9:dc:f9:
                    e4:4f:27:52:92:e3:9e:6b:b9:07:be:73:59:f5:4d:
                    19:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:6C:5A:F1:B3:E0:EC:CD:9E:CB:53:07:62:E3:C0:98:6F:C5:80:67
            X509v3 Authority Key Identifier:
                keyid:D1:1A:BF:5E:A0:73:36:38:B4:A2:FC:EB:EA:C9:51:7B:56:83:AD:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3139312e352e3134332e302f32342d3234203d3e20323633353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:1e:ff:02:2f:37:36:b5:db:a9:1e:1e:b1:db:69:e8:cf:17:
         d5:73:e5:8f:7d:d7:fe:18:8d:27:c1:5a:0a:d6:6d:d5:24:b6:
         5d:0a:89:1b:aa:06:25:57:77:68:ab:57:24:fb:5b:3f:de:46:
         5e:76:ef:e3:50:ce:9c:6a:7b:78:d1:a1:7a:16:18:46:a2:a3:
         6a:1a:1b:2d:bd:28:eb:29:b4:9c:1b:9e:dc:94:3f:f1:e0:08:
         bd:a5:53:ca:51:f0:4e:fa:03:3e:35:f4:16:82:33:f7:22:fa:
         d2:fc:7f:cb:93:92:f5:1c:86:a1:06:b3:fa:b7:5a:42:7d:e9:
         ea:02:86:f1:51:7b:d0:f7:00:7f:75:b4:49:37:08:11:18:df:
         f0:ca:2d:cc:dc:22:20:75:fd:48:53:47:9d:9e:18:5b:1b:a1:
         17:b6:7c:89:c2:51:2c:cc:3e:41:2f:89:10:c1:4f:30:76:29:
         f2:68:88:79:b6:ef:f9:63:ec:29:af:72:05:ae:f7:57:4a:e9:
         1e:3c:8d:f0:9c:a2:50:0a:4c:93:e7:83:52:72:e7:87:84:56:
         b6:65:72:36:32:e6:f2:f3:85:b3:44:b3:0d:e1:e2:c9:0d:23:
         bc:73:b2:45:8e:08:37:df:d5:63:34:3d:b5:1f:56:32:72:61:
         41:6b:51:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:55:47 2025 by rpki-client