Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33322e302f32322d3332203d3e20323632373038.roa
File:                     3138362e3139332e33322e302f32322d3332203d3e20323632373038.roa (raw, json)
Hash identifier:          ZZXvGA+udthxeLVZ6MoV8KNOdHd+aBHg1wsXZ9sGuns=
Subject key identifier:   0C:65:AA:81:DB:F7:40:48:85:5C:79:64:50:24:CD:B5:73:23:07:92
Certificate issuer:       /CN=78346DE4E6250B19E47E9CC8008E76CF94DC04D7
Certificate serial:       3E7B69DD269A5279C1CDFC72D6271798E73CB57E
Authority key identifier: 78:34:6D:E4:E6:25:0B:19:E4:7E:9C:C8:00:8E:76:CF:94:DC:04:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33322e302f32322d3332203d3e20323632373038.roa
Signing time:             Fri 24 Oct 2025 02:23:05 +0000
ROA not before:           Fri 24 Oct 2025 02:18:05 +0000
ROA not after:            Fri 23 Oct 2026 02:23:05 +0000
asID:                     262708
IP address blocks:        186.193.32.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.crl
                          rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 17:30:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:7b:69:dd:26:9a:52:79:c1:cd:fc:72:d6:27:17:98:e7:3c:b5:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78346DE4E6250B19E47E9CC8008E76CF94DC04D7
        Validity
            Not Before: Oct 24 02:18:05 2025 GMT
            Not After : Oct 23 02:23:05 2026 GMT
        Subject: CN=0C65AA81DBF74048855C79645024CDB573230792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f9:b4:d0:5f:36:c2:13:c2:b2:f3:9e:16:a5:
                    82:e5:13:2f:54:5d:7c:8c:03:38:ed:13:14:52:2d:
                    78:2c:ac:87:92:7d:3c:6f:5c:64:86:29:85:85:3c:
                    e2:27:d8:73:83:20:d4:52:ed:58:0c:5f:b8:fd:42:
                    31:0f:a4:83:1c:b5:7d:c9:3b:6f:1c:c8:7f:a0:c2:
                    18:9c:99:bf:fe:20:28:f9:53:14:91:52:1f:94:d7:
                    11:3e:3b:ec:24:b0:a9:a5:c8:fd:16:7c:5b:69:b4:
                    ea:ab:a6:5d:f9:6f:cd:56:d3:c0:66:98:34:a0:14:
                    53:b3:7c:8f:b5:0f:0a:c8:ac:f3:54:76:3c:c9:e2:
                    a8:c5:3d:dc:d3:4d:ff:19:05:aa:40:e8:3e:b3:ae:
                    ea:dd:7c:7b:a4:81:19:6d:8c:26:46:ed:88:49:49:
                    e2:e8:5e:cc:9f:86:76:5c:6f:26:5f:bc:da:bd:82:
                    2d:31:33:d2:0d:2b:bf:3b:00:4e:1f:b2:25:c6:7b:
                    09:9d:74:06:06:67:64:d5:6c:f9:60:dc:37:4e:64:
                    b0:f5:47:fb:76:8e:83:27:9f:d6:ac:18:f9:8b:bf:
                    59:59:5c:d3:36:53:75:e9:4a:49:2a:35:ee:a6:f2:
                    9e:3f:09:08:d5:9d:9e:f6:90:96:15:60:6c:4f:e5:
                    33:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:65:AA:81:DB:F7:40:48:85:5C:79:64:50:24:CD:B5:73:23:07:92
            X509v3 Authority Key Identifier:
                keyid:78:34:6D:E4:E6:25:0B:19:E4:7E:9C:C8:00:8E:76:CF:94:DC:04:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33322e302f32322d3332203d3e20323632373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:d3:47:a5:35:fc:90:de:a1:b1:46:2c:13:ee:fe:5e:5b:e9:
         da:2d:76:83:ef:71:2f:11:c1:df:d6:e3:f7:e3:e3:69:72:8d:
         58:5e:8a:00:ff:dd:c3:df:9f:55:25:fa:55:9c:93:76:e7:39:
         6c:f9:fe:e0:c2:df:bc:87:74:ee:26:eb:52:27:fb:13:46:2c:
         6b:70:50:1f:ed:c4:dd:58:cd:e4:ed:bd:c7:a9:e1:36:5a:60:
         e2:39:79:19:b3:0f:94:28:00:45:22:6a:bd:29:5c:5d:ec:f1:
         3a:16:76:ee:54:a0:0b:ea:8a:0d:46:5b:de:31:34:69:c5:60:
         fa:1c:c7:5a:5f:ad:26:c1:72:d4:a8:ed:55:dc:74:2d:da:b9:
         5f:c5:f9:e5:6e:3d:f1:86:f7:56:5a:f3:cb:d6:07:94:bb:56:
         7f:85:a3:14:f8:c3:d7:be:0f:2f:c1:0d:f6:64:32:5a:a5:da:
         78:81:7f:90:13:3f:18:6a:7d:0b:2d:44:ec:ab:f3:51:32:f9:
         cc:94:cb:f9:a0:d7:21:a0:e1:bf:7e:5a:cb:97:13:e2:d3:16:
         2b:2b:f2:db:dc:f4:1f:d9:fb:db:96:95:fa:ff:67:d5:2e:75:
         c9:7d:7a:58:af:4d:53:e3:c6:26:22:c7:14:b1:64:37:78:4d:
         7f:4a:1c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:41:40 2025 by rpki-client