Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33382e302f32342d3332203d3e20323632373038.roa
File:                     3138362e3139332e33382e302f32342d3332203d3e20323632373038.roa (raw, json)
Hash identifier:          z77x6H26I+9oRNtbYpwBKP7H0E9aqYARzxS4NJBKjx0=
Subject key identifier:   9D:A6:CF:77:C2:D3:9F:7C:39:C6:D6:CA:EA:93:30:CD:08:2C:D6:6A
Certificate issuer:       /CN=78346DE4E6250B19E47E9CC8008E76CF94DC04D7
Certificate serial:       3AA60F764F6418E1A1B128C4533463EAECB89450
Authority key identifier: 78:34:6D:E4:E6:25:0B:19:E4:7E:9C:C8:00:8E:76:CF:94:DC:04:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33382e302f32342d3332203d3e20323632373038.roa
Signing time:             Fri 25 Sep 2026 03:19:42 +0000
ROA not before:           Fri 25 Sep 2026 03:14:42 +0000
ROA not after:            Fri 24 Sep 2027 03:19:42 +0000
asID:                     262708
IP address blocks:        186.193.38.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.crl
                          rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 01:03:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:a6:0f:76:4f:64:18:e1:a1:b1:28:c4:53:34:63:ea:ec:b8:94:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78346DE4E6250B19E47E9CC8008E76CF94DC04D7
        Validity
            Not Before: Sep 25 03:14:42 2026 GMT
            Not After : Sep 24 03:19:42 2027 GMT
        Subject: CN=9DA6CF77C2D39F7C39C6D6CAEA9330CD082CD66A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:78:c3:3a:42:52:f8:ed:c6:de:0f:5b:24:e7:
                    1a:0e:16:65:93:59:f2:f9:21:69:19:35:1a:4a:d3:
                    8e:bc:a2:12:ca:e7:49:c0:af:98:a3:06:e8:59:e7:
                    71:31:08:16:fd:a7:3a:cd:72:0b:4c:14:2e:a7:2c:
                    0b:82:d8:3a:d4:1a:cf:82:b6:c6:71:7d:59:2c:13:
                    f1:d4:03:58:3c:a7:e6:f5:d1:a1:dc:6b:e7:bf:14:
                    65:ee:4a:97:9e:50:66:7d:82:d5:61:63:7f:e2:d9:
                    e8:63:79:bd:f9:60:89:6c:7b:d4:01:cd:0f:0d:e9:
                    59:f9:82:7f:98:85:cb:f9:80:44:cc:de:ce:1a:c9:
                    10:c9:d5:2a:eb:21:4d:54:58:c4:2a:10:9f:42:68:
                    ca:3c:56:6e:12:49:e9:d2:94:47:ba:e6:18:b5:6b:
                    a1:dc:02:eb:5b:49:e4:ed:ed:07:82:fb:f7:f3:03:
                    70:13:99:1c:62:a8:aa:36:4b:ca:d0:b2:c6:b9:ba:
                    37:af:62:16:20:49:bf:6b:ea:d7:d7:e6:82:7f:79:
                    c2:35:c0:7a:5a:f6:67:6a:b0:87:94:d8:99:52:12:
                    e8:bd:cf:c2:00:1d:dd:51:9d:5d:85:42:71:0a:5c:
                    6e:61:47:59:e5:46:73:e9:2d:73:76:68:76:d9:0f:
                    a9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:A6:CF:77:C2:D3:9F:7C:39:C6:D6:CA:EA:93:30:CD:08:2C:D6:6A
            X509v3 Authority Key Identifier:
                keyid:78:34:6D:E4:E6:25:0B:19:E4:7E:9C:C8:00:8E:76:CF:94:DC:04:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33382e302f32342d3332203d3e20323632373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:d9:57:12:c7:71:6f:fb:79:a1:20:dc:fe:79:2d:8f:59:27:
         c2:93:dd:e7:f6:86:59:d0:54:18:23:59:f7:97:05:56:d0:0b:
         98:01:ba:64:51:d5:bb:e9:0a:09:02:ee:12:4e:dd:da:1b:d3:
         c7:8f:ab:62:76:24:45:0a:47:56:a0:70:b9:13:e3:a2:b9:4a:
         32:e9:56:af:24:a8:07:b4:17:2b:31:97:85:41:61:d7:87:15:
         e2:c0:dc:63:10:85:b1:21:c9:f0:4d:68:af:21:aa:ab:7f:3a:
         e0:7d:b2:fb:03:c5:60:da:89:e3:20:f0:18:00:0d:0c:6f:f9:
         cb:7c:a1:1b:6b:05:6f:cd:92:c2:6c:67:64:c9:72:b7:ae:82:
         96:65:32:97:24:9a:5c:7f:3d:3f:40:db:07:bb:12:65:43:3b:
         c6:c1:9d:55:d3:3d:8d:3a:b6:87:6c:0a:a4:d9:15:ad:fd:79:
         ad:75:02:91:e8:65:aa:fe:7d:e4:c0:ac:98:d4:1d:17:49:f0:
         1b:c6:91:b1:a1:4a:5a:ac:3f:47:45:18:8e:32:33:69:d2:43:
         bd:c2:01:6b:74:c8:e1:7d:c5:83:ff:fd:44:ac:20:19:c2:c6:
         bf:66:de:0d:1f:2e:78:e4:64:7f:66:52:b4:ce:6b:01:3a:25:
         e1:c2:31:0c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOqYPdk9kGOGhsSjEUzRj6uy4lFAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzgzNDZERTRFNjI1MEIxOUU0N0U5Q0M4MDA4RTc2Q0Y5
NERDMDRENzAeFw0yNjA5MjUwMzE0NDJaFw0yNzA5MjQwMzE5NDJaMDMxMTAvBgNV
BAMTKDlEQTZDRjc3QzJEMzlGN0MzOUM2RDZDQUVBOTMzMENEMDgyQ0Q2NkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5eMM6QlL47cbeD1sk5xoOFmWT
WfL5IWkZNRpK0468ohLK50nAr5ijBuhZ53ExCBb9pzrNcgtMFC6nLAuC2DrUGs+C
tsZxfVksE/HUA1g8p+b10aHca+e/FGXuSpeeUGZ9gtVhY3/i2ehjeb35YIlse9QB
zQ8N6Vn5gn+Yhcv5gETM3s4ayRDJ1SrrIU1UWMQqEJ9CaMo8Vm4SSenSlEe65hi1
a6HcAutbSeTt7QeC+/fzA3ATmRxiqKo2S8rQssa5ujevYhYgSb9r6tfX5oJ/ecI1
wHpa9mdqsIeU2JlSEui9z8IAHd1RnV2FQnEKXG5hR1nlRnPpLXN2aHbZD6lnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUnabPd8LTn3w5xtbK6pMwzQgs1mowHwYDVR0j
BBgwFoAUeDRt5OYlCxnkfpzIAI52z5TcBNcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUxmV2JwZDZUcFZVcFp2ckM2RHV5ZFYxemVUZnV2c1E4MnZZS2ZSaG44
cG0vMC83ODM0NkRFNEU2MjUwQjE5RTQ3RTlDQzgwMDhFNzZDRjk0REMwNEQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc4MzQ2REU0RTYyNTBCMTlF
NDdFOUNDODAwOEU3NkNGOTREQzA0RDcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVMZldicGQ2VHBWVXBadnJDNkR1eWRWMXplVGZ1dnNRODJ2WUtmUmhuOHBtLzAv
MzEzODM2MmUzMTM5MzMyZTMzMzgyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzMjM2
MzIzNzMwMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC6wSYwDQYJKoZIhvcNAQELBQADggEBADvZVxLH
cW/7eaEg3P55LY9ZJ8KT3ef2hlnQVBgjWfeXBVbQC5gBumRR1bvpCgkC7hJO3dob
08ePq2J2JEUKR1agcLkT46K5SjLpVq8kqAe0Fysxl4VBYdeHFeLA3GMQhbEhyfBN
aK8hqqt/OuB9svsDxWDaieMg8BgADQxv+ct8oRtrBW/NksJsZ2TJcreugpZlMpck
mlx/PT9A2we7EmVDO8bBnVXTPY06todsCqTZFa39ea11ApHoZar+feTArJjUHRdJ
8BvGkbGhSlqsP0dFGI4yM2nSQ73CAWt0yOF9xYP//USsIBnCxr9m3g0fLnjkZH9m
UrTOawE6JeHCMQw=
-----END CERTIFICATE-----
Generated at Sun Oct 18 13:08:57 2026 by rpki-client