Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33342e302f32342d3332203d3e20323632373038.roa
File:                     3138362e3139332e33342e302f32342d3332203d3e20323632373038.roa (raw, json)
Hash identifier:          u0iBJoMG1ifV2eWCOlTSyOR7mBHJe2gXZyT5cl5/sgo=
Subject key identifier:   1B:3E:1E:08:03:07:CF:1E:DF:8E:8D:1E:17:D1:4A:38:38:84:F8:EA
Certificate issuer:       /CN=78346DE4E6250B19E47E9CC8008E76CF94DC04D7
Certificate serial:       169D7030641A38A3CDB729B15950BAE6F462A3D5
Authority key identifier: 78:34:6D:E4:E6:25:0B:19:E4:7E:9C:C8:00:8E:76:CF:94:DC:04:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33342e302f32342d3332203d3e20323632373038.roa
Signing time:             Fri 24 Oct 2025 02:36:50 +0000
ROA not before:           Fri 24 Oct 2025 02:31:50 +0000
ROA not after:            Fri 23 Oct 2026 02:36:50 +0000
asID:                     262708
IP address blocks:        186.193.34.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.crl
                          rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 23:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:9d:70:30:64:1a:38:a3:cd:b7:29:b1:59:50:ba:e6:f4:62:a3:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78346DE4E6250B19E47E9CC8008E76CF94DC04D7
        Validity
            Not Before: Oct 24 02:31:50 2025 GMT
            Not After : Oct 23 02:36:50 2026 GMT
        Subject: CN=1B3E1E080307CF1EDF8E8D1E17D14A383884F8EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f5:8d:dc:c6:a4:94:8c:b3:ce:77:6c:c6:50:
                    26:f1:59:c3:1a:b6:4a:11:aa:12:06:09:a6:43:7d:
                    ce:83:f3:61:cc:00:2e:e8:fb:0c:6d:1a:45:5b:89:
                    8d:d1:76:d0:8a:67:d2:41:af:bc:71:f8:4a:7c:67:
                    48:e9:58:e5:b0:21:5f:de:fe:06:28:5c:14:b4:c9:
                    22:26:f1:f2:13:5e:d5:b5:57:bb:51:22:a8:67:c6:
                    8d:94:c9:62:bc:cb:f1:39:b8:a0:f3:e0:22:ee:29:
                    24:2e:9b:66:6c:00:8c:5a:f8:7f:75:bd:b3:2d:d6:
                    47:4d:e8:8f:1f:3c:5e:15:bf:1e:7c:f5:8e:5b:14:
                    8d:80:d7:42:e7:6b:d8:bc:67:7a:fe:e6:be:01:ef:
                    a7:a7:ae:23:29:e2:af:1f:d3:e2:d4:92:e0:91:dd:
                    fa:e2:4d:91:79:2d:7f:55:44:b2:53:81:2f:72:58:
                    57:c5:e0:7d:2e:c4:81:4d:db:c1:b6:3d:9a:6e:79:
                    52:e8:61:57:e5:a1:37:42:1f:3d:30:d5:8c:d1:a9:
                    ff:4d:f9:82:eb:0f:cd:44:ba:16:53:0a:cb:79:d3:
                    70:57:c2:69:ff:69:c5:8c:94:67:4b:68:d2:6b:06:
                    d8:41:69:b4:52:c0:d2:61:1f:63:02:9f:2e:d6:2c:
                    44:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:3E:1E:08:03:07:CF:1E:DF:8E:8D:1E:17:D1:4A:38:38:84:F8:EA
            X509v3 Authority Key Identifier:
                keyid:78:34:6D:E4:E6:25:0B:19:E4:7E:9C:C8:00:8E:76:CF:94:DC:04:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33342e302f32342d3332203d3e20323632373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:aa:9b:ca:79:3d:6a:57:3f:4f:3f:06:27:41:70:3e:93:66:
         c2:f0:45:aa:01:6d:a8:58:7e:46:83:7d:23:da:c5:6a:78:d9:
         0a:ab:1b:f7:69:76:e8:30:3c:bb:12:ed:2a:fd:f0:4d:96:36:
         c8:43:60:5b:e4:ac:c4:bd:9b:d2:8a:a0:ad:02:e9:7f:6c:fc:
         f2:e8:0c:47:1c:57:cb:f7:b8:06:b6:38:be:01:ae:cb:94:65:
         65:ea:e3:39:d9:6c:78:7b:f2:6e:40:de:ef:be:6c:b0:8e:a8:
         6c:83:ae:4b:29:b9:e1:76:3c:ac:ab:71:05:57:d4:7d:e3:0b:
         78:0e:f3:7e:de:20:95:d5:7c:67:a2:01:97:e5:ab:f2:93:b0:
         cf:fe:a9:4c:13:e7:71:c1:6d:ff:74:9d:c9:d4:10:92:95:85:
         31:e6:bb:0a:10:c6:49:d4:39:3a:8c:6b:4f:47:d9:2b:15:52:
         74:f4:a3:9f:cc:10:49:15:0d:e1:af:51:b4:28:b6:81:2e:4f:
         fc:ca:e4:0f:e3:fc:ca:20:21:b7:5f:86:67:60:8a:04:aa:98:
         48:bb:bc:4f:7e:a6:a1:e1:82:34:fc:9f:26:46:83:0d:59:4d:
         86:1b:f5:e4:5c:21:0a:1a:ad:c0:67:3a:dc:f4:9c:26:b4:8f:
         38:f8:f0:5f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFp1wMGQaOKPNtymxWVC65vRio9UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzgzNDZERTRFNjI1MEIxOUU0N0U5Q0M4MDA4RTc2Q0Y5
NERDMDRENzAeFw0yNTEwMjQwMjMxNTBaFw0yNjEwMjMwMjM2NTBaMDMxMTAvBgNV
BAMTKDFCM0UxRTA4MDMwN0NGMUVERjhFOEQxRTE3RDE0QTM4Mzg4NEY4RUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe9Y3cxqSUjLPOd2zGUCbxWcMa
tkoRqhIGCaZDfc6D82HMAC7o+wxtGkVbiY3RdtCKZ9JBr7xx+Ep8Z0jpWOWwIV/e
/gYoXBS0ySIm8fITXtW1V7tRIqhnxo2UyWK8y/E5uKDz4CLuKSQum2ZsAIxa+H91
vbMt1kdN6I8fPF4Vvx589Y5bFI2A10Lna9i8Z3r+5r4B76enriMp4q8f0+LUkuCR
3friTZF5LX9VRLJTgS9yWFfF4H0uxIFN28G2PZpueVLoYVfloTdCHz0w1YzRqf9N
+YLrD81EuhZTCst503BXwmn/acWMlGdLaNJrBthBabRSwNJhH2MCny7WLESbAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUGz4eCAMHzx7fjo0eF9FKODiE+OowHwYDVR0j
BBgwFoAUeDRt5OYlCxnkfpzIAI52z5TcBNcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUxmV2JwZDZUcFZVcFp2ckM2RHV5ZFYxemVUZnV2c1E4MnZZS2ZSaG44
cG0vMC83ODM0NkRFNEU2MjUwQjE5RTQ3RTlDQzgwMDhFNzZDRjk0REMwNEQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc4MzQ2REU0RTYyNTBCMTlF
NDdFOUNDODAwOEU3NkNGOTREQzA0RDcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVMZldicGQ2VHBWVXBadnJDNkR1eWRWMXplVGZ1dnNRODJ2WUtmUmhuOHBtLzAv
MzEzODM2MmUzMTM5MzMyZTMzMzQyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzMjM2
MzIzNzMwMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC6wSIwDQYJKoZIhvcNAQELBQADggEBAFmqm8p5
PWpXP08/BidBcD6TZsLwRaoBbahYfkaDfSPaxWp42QqrG/dpdugwPLsS7Sr98E2W
NshDYFvkrMS9m9KKoK0C6X9s/PLoDEccV8v3uAa2OL4BrsuUZWXq4znZbHh78m5A
3u++bLCOqGyDrkspueF2PKyrcQVX1H3jC3gO837eIJXVfGeiAZflq/KTsM/+qUwT
53HBbf90ncnUEJKVhTHmuwoQxknUOTqMa09H2SsVUnT0o5/MEEkVDeGvUbQotoEu
T/zK5A/j/MogIbdfhmdgigSqmEi7vE9+pqHhgjT8nyZGgw1ZTYYb9eRcIQoarcBn
Otz0nCa0jzj48F8=
-----END CERTIFICATE-----
Generated at Wed Nov 5 15:04:04 2025 by rpki-client