Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33362e302f32332d3332203d3e20323632373038.roa
File:                     3138362e3139332e33362e302f32332d3332203d3e20323632373038.roa (raw, json)
Hash identifier:          NmCA7m/4Kp4VE1wErxcpPljLSibtGpKuaGRmy0t+gB0=
Subject key identifier:   22:9A:F0:40:B9:B4:DD:8A:6D:E1:48:37:E0:82:BF:41:9B:3F:53:FD
Certificate issuer:       /CN=78346DE4E6250B19E47E9CC8008E76CF94DC04D7
Certificate serial:       5E6446A4EEB19A4C938112ECDB567F13538BA0C5
Authority key identifier: 78:34:6D:E4:E6:25:0B:19:E4:7E:9C:C8:00:8E:76:CF:94:DC:04:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33362e302f32332d3332203d3e20323632373038.roa
Signing time:             Fri 24 Oct 2025 02:26:20 +0000
ROA not before:           Fri 24 Oct 2025 02:21:20 +0000
ROA not after:            Fri 23 Oct 2026 02:26:20 +0000
asID:                     262708
IP address blocks:        186.193.36.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.crl
                          rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 23:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:64:46:a4:ee:b1:9a:4c:93:81:12:ec:db:56:7f:13:53:8b:a0:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78346DE4E6250B19E47E9CC8008E76CF94DC04D7
        Validity
            Not Before: Oct 24 02:21:20 2025 GMT
            Not After : Oct 23 02:26:20 2026 GMT
        Subject: CN=229AF040B9B4DD8A6DE14837E082BF419B3F53FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fb:78:96:11:5a:f5:36:dd:98:dd:cd:0e:8f:
                    97:5a:fc:84:32:ca:4f:84:c4:2b:0b:9c:3c:49:3e:
                    c3:8f:27:20:be:67:e7:b1:df:07:50:ca:16:25:c5:
                    f5:11:dc:da:7d:38:38:47:93:34:f0:c4:ac:60:ac:
                    66:05:8d:2b:91:5d:5b:bc:ed:b4:67:40:05:77:fa:
                    14:ea:f8:87:42:2b:3e:a5:b2:89:9c:2f:fb:d9:61:
                    13:70:ee:2b:64:1a:2e:29:a5:1a:dc:fd:83:63:d1:
                    0f:a1:ec:9d:66:2e:3c:45:9c:a8:50:33:14:11:2a:
                    16:e6:0a:df:53:fc:77:95:98:30:33:b3:96:5b:c7:
                    1a:58:64:67:50:3e:32:7e:a6:0d:1d:d6:0d:6f:14:
                    43:a7:5d:ab:10:1b:fa:28:89:95:2d:43:36:45:86:
                    f1:7b:0d:18:29:7e:a1:eb:4c:95:70:93:36:06:5c:
                    75:19:9c:f9:93:15:63:83:6d:25:63:bb:f8:44:d7:
                    e0:54:1d:78:c4:a0:70:d1:19:63:ca:66:21:4b:ab:
                    07:61:37:f8:26:3d:49:0f:2c:7a:9c:ea:66:f4:e0:
                    43:ff:6c:46:11:5d:fa:bf:1a:dd:be:47:a7:b1:e4:
                    7e:b5:57:8c:7c:ac:a3:21:8b:5c:f5:08:10:bb:82:
                    9f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:9A:F0:40:B9:B4:DD:8A:6D:E1:48:37:E0:82:BF:41:9B:3F:53:FD
            X509v3 Authority Key Identifier:
                keyid:78:34:6D:E4:E6:25:0B:19:E4:7E:9C:C8:00:8E:76:CF:94:DC:04:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33362e302f32332d3332203d3e20323632373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c1:bb:30:f3:cf:5e:f8:40:26:0e:17:42:11:b0:42:cf:db:f0:
         e1:49:8f:5c:59:6a:57:a3:f4:cc:1d:46:78:7e:b3:e3:8f:df:
         dc:62:c2:18:60:e3:23:b3:15:b2:ee:15:0f:68:40:a5:2a:2a:
         cb:0a:17:20:74:68:7d:86:93:71:92:8d:c7:a4:b9:27:dd:26:
         2d:50:56:d4:d0:a4:f2:ee:2f:09:00:8f:14:43:77:7e:28:d0:
         c5:3e:78:20:74:19:8a:b5:94:a8:57:36:dd:c9:53:8b:fc:a6:
         81:d0:c0:d8:46:10:7d:a3:63:68:9e:f6:21:6d:20:5b:f3:3e:
         0a:bf:b4:c1:ec:08:eb:f3:5c:10:f2:82:1d:ea:34:4d:4a:02:
         03:03:3d:0b:8e:9f:dd:38:b7:61:cd:07:8e:f3:54:e4:a4:48:
         58:c0:85:62:25:9d:e4:0a:7e:47:d2:63:0a:c5:ea:94:ce:a5:
         05:2b:bd:0b:60:a1:d0:8d:5d:e2:06:98:6e:a1:d8:fc:a2:47:
         38:ee:53:96:9c:84:b5:dc:11:91:38:81:91:ae:b4:d3:ce:17:
         98:62:50:8d:8f:95:ee:6f:ba:46:5c:6a:8d:69:12:5a:9d:dc:
         72:df:be:bd:2e:fe:f5:ff:c2:a6:33:69:9b:bc:de:47:9f:9a:
         77:2c:9d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:17:44 2025 by rpki-client