Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33342e302f32342d3332203d3e20323632373038.roa
File:                     3138362e3139332e33342e302f32342d3332203d3e20323632373038.roa (raw, json)
Hash identifier:          YSsJSdECCCloi5HHLDXjh1+N5psTFswkKTwM/kFbvrQ=
Subject key identifier:   5C:F9:5F:3D:AC:09:3E:67:ED:55:1F:0A:C4:56:D1:52:B6:B0:EA:67
Certificate issuer:       /CN=78346DE4E6250B19E47E9CC8008E76CF94DC04D7
Certificate serial:       66A1366EE66E97D3A977B2EF5B4FDEBDF5470BBA
Authority key identifier: 78:34:6D:E4:E6:25:0B:19:E4:7E:9C:C8:00:8E:76:CF:94:DC:04:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33342e302f32342d3332203d3e20323632373038.roa
Signing time:             Fri 25 Sep 2026 03:19:39 +0000
ROA not before:           Fri 25 Sep 2026 03:14:39 +0000
ROA not after:            Fri 24 Sep 2027 03:19:39 +0000
asID:                     262708
IP address blocks:        186.193.34.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.crl
                          rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 17:30:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:a1:36:6e:e6:6e:97:d3:a9:77:b2:ef:5b:4f:de:bd:f5:47:0b:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78346DE4E6250B19E47E9CC8008E76CF94DC04D7
        Validity
            Not Before: Sep 25 03:14:39 2026 GMT
            Not After : Sep 24 03:19:39 2027 GMT
        Subject: CN=5CF95F3DAC093E67ED551F0AC456D152B6B0EA67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0a:d2:ef:08:51:2f:be:96:64:17:da:1e:8e:
                    e5:e3:cf:97:38:bb:cc:61:75:0e:25:ff:fc:e0:14:
                    d6:76:ce:4e:4c:1c:93:53:ae:37:bd:6d:ad:ab:df:
                    c3:11:ec:59:83:88:5e:89:90:b4:1c:54:bd:b4:51:
                    51:a9:54:ec:5a:56:84:f8:fe:da:7e:75:5f:58:b8:
                    02:dd:c9:51:ab:b6:34:77:64:2e:6c:e4:78:12:5b:
                    d5:b6:a1:26:00:74:89:84:96:b7:b1:bc:0e:00:51:
                    d2:80:ce:6c:1b:3f:fa:d6:e6:9c:a9:68:fc:a1:d1:
                    76:5d:6c:78:17:b3:e8:55:6a:d5:3a:15:10:cd:04:
                    cc:6b:dd:d3:49:2a:6e:ae:60:6b:c4:00:b5:fa:34:
                    8f:52:72:41:c3:30:cb:43:10:f3:78:0a:82:1c:60:
                    85:4a:c6:b1:70:5b:d8:57:60:06:85:4b:e2:f4:16:
                    8d:07:5a:44:5c:c9:13:41:9a:b1:3b:7f:9b:f9:c7:
                    2c:4b:e9:8e:10:55:f1:5f:30:da:78:e3:df:a6:3c:
                    6f:25:54:e6:3f:f9:26:af:ec:c5:5e:db:57:ff:b1:
                    d0:da:40:7f:27:09:a4:8f:1f:ed:bb:12:2b:44:7c:
                    74:ee:45:eb:93:1e:6d:e5:7a:96:9c:19:4b:0f:4a:
                    18:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:F9:5F:3D:AC:09:3E:67:ED:55:1F:0A:C4:56:D1:52:B6:B0:EA:67
            X509v3 Authority Key Identifier:
                keyid:78:34:6D:E4:E6:25:0B:19:E4:7E:9C:C8:00:8E:76:CF:94:DC:04:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33342e302f32342d3332203d3e20323632373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:20:8e:ea:af:e5:ce:a3:53:21:dd:0b:35:58:af:69:17:40:
         1b:3c:de:98:e0:50:5b:27:7a:18:80:a5:21:2a:af:25:49:c3:
         b7:ef:3e:d1:a4:14:02:98:83:cd:90:2f:b4:ab:c9:57:af:63:
         34:c7:10:42:0c:33:ee:ab:40:79:60:7c:67:a5:b3:00:8f:0f:
         25:58:99:9d:51:81:e1:c7:db:ac:5f:64:dd:6a:05:dc:e9:c0:
         05:88:9f:a6:56:33:06:c4:b6:23:80:d7:c6:9a:fe:5b:ad:b7:
         84:59:de:aa:1a:c8:88:a1:ff:9d:04:5c:31:52:27:da:81:ad:
         f2:2d:bd:a5:54:1e:0c:15:f1:69:b4:df:12:aa:6d:dc:4e:6d:
         06:14:d3:4d:5d:b3:c8:e9:dc:4e:79:d2:84:37:06:e8:d0:8c:
         f4:ad:82:c2:5f:10:9a:47:d2:f1:bf:ea:41:51:8a:a4:05:28:
         72:4b:ce:5a:86:88:8e:dc:e8:3b:a2:43:d7:8f:87:70:df:3c:
         94:8b:af:9d:05:99:d6:63:68:6e:85:3a:34:71:2b:00:77:eb:
         24:ce:af:a5:e3:b9:7e:4f:e6:95:a5:23:2a:1c:0b:f0:a8:b8:
         1a:d7:e5:7c:50:c0:b9:e7:94:b1:d1:ef:96:c0:ac:28:88:d1:
         9b:76:70:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 09:22:36 2026 by rpki-client