Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34302e302f32312d3332203d3e20323632373038.roa
File:                     3138362e3139332e34302e302f32312d3332203d3e20323632373038.roa (raw, json)
Hash identifier:          dcx0KFR5Mefzfi5G0f6cirCujDEr7UZ2qWzBJ8aE3A8=
Subject key identifier:   16:20:6E:9F:4D:A0:D1:9D:DC:3E:22:28:28:D7:F7:59:E1:46:78:29
Certificate issuer:       /CN=78346DE4E6250B19E47E9CC8008E76CF94DC04D7
Certificate serial:       1813914CDF9BFCEE6D006C0E8E1B818F1ED2FC57
Authority key identifier: 78:34:6D:E4:E6:25:0B:19:E4:7E:9C:C8:00:8E:76:CF:94:DC:04:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34302e302f32312d3332203d3e20323632373038.roa
Signing time:             Fri 24 Oct 2025 02:22:45 +0000
ROA not before:           Fri 24 Oct 2025 02:17:45 +0000
ROA not after:            Fri 23 Oct 2026 02:22:45 +0000
asID:                     262708
IP address blocks:        186.193.40.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.crl
                          rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 18:22:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:13:91:4c:df:9b:fc:ee:6d:00:6c:0e:8e:1b:81:8f:1e:d2:fc:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78346DE4E6250B19E47E9CC8008E76CF94DC04D7
        Validity
            Not Before: Oct 24 02:17:45 2025 GMT
            Not After : Oct 23 02:22:45 2026 GMT
        Subject: CN=16206E9F4DA0D19DDC3E222828D7F759E1467829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4f:9b:d3:e8:b1:09:0d:eb:5b:92:80:ad:51:
                    71:e2:66:4a:f7:de:96:55:a2:5b:27:93:3a:df:2c:
                    38:d2:2d:f1:03:aa:57:5a:61:e1:72:c8:6b:c0:f1:
                    b2:f6:d3:ef:72:8f:01:d0:8d:df:06:fb:a9:3c:69:
                    25:95:3b:26:c5:7c:76:1f:8a:0f:f9:21:5d:18:57:
                    c1:64:36:d2:08:2b:47:93:15:90:0a:9a:8d:52:24:
                    72:d8:f4:6d:ee:d5:eb:bc:13:c0:86:2d:fc:94:af:
                    16:6f:30:b5:86:6b:87:e6:3e:44:2c:88:d5:0e:f5:
                    56:10:1c:32:ac:9f:40:14:6c:5b:78:e5:25:4b:37:
                    a4:5d:53:21:05:37:82:aa:9f:a5:e0:31:61:31:60:
                    ec:4a:d9:6e:5b:5a:4b:05:36:8b:9b:7c:49:00:2f:
                    b1:43:f1:8e:e3:79:16:be:59:1e:25:d1:b8:91:4b:
                    62:14:69:b4:f3:ec:ca:52:69:c3:25:13:c2:af:5e:
                    0d:25:0e:f7:43:11:87:c6:7c:68:23:34:68:9e:79:
                    72:8f:36:d6:6f:e0:77:c1:e1:2b:c2:ba:f5:c1:59:
                    94:d2:49:07:5d:5c:ed:35:6f:61:d6:83:a3:2c:c1:
                    ee:d6:d5:88:e8:dc:5a:0e:25:60:de:a8:c5:65:2d:
                    3c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:20:6E:9F:4D:A0:D1:9D:DC:3E:22:28:28:D7:F7:59:E1:46:78:29
            X509v3 Authority Key Identifier:
                keyid:78:34:6D:E4:E6:25:0B:19:E4:7E:9C:C8:00:8E:76:CF:94:DC:04:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34302e302f32312d3332203d3e20323632373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8c:42:00:d3:09:c0:e3:00:96:e1:e1:95:02:4c:bf:04:d6:d0:
         78:64:e0:b7:ba:74:4d:dc:21:00:76:d7:ca:70:46:9c:9e:a2:
         34:48:6d:2d:13:b3:6a:f5:02:96:69:66:34:80:9d:90:cd:b3:
         50:c9:66:fc:d4:6e:09:c5:ed:49:75:b8:72:39:ec:46:19:e5:
         2d:fc:81:58:d8:6d:e6:15:4d:c2:48:22:67:d2:17:7f:e0:88:
         27:05:d2:00:dc:02:c3:5f:14:4f:63:ef:e5:2e:00:e4:02:67:
         1b:c2:e5:8a:a2:f1:5d:01:48:ea:09:f5:11:f4:7b:63:83:a8:
         39:c2:54:0b:58:fc:ce:62:cf:42:eb:8d:43:40:2a:8d:67:2a:
         d5:d5:03:bd:5a:d4:86:c9:3c:5c:0d:b8:cf:0b:8b:df:66:9d:
         45:5b:07:7e:32:e6:c8:43:bb:d1:d7:b0:0d:5c:73:3f:8a:85:
         6d:7c:3e:d5:18:43:c7:76:8a:24:13:e7:71:db:85:31:a6:c2:
         5a:ae:32:4f:6b:4f:e5:7b:82:3c:6e:6e:be:b5:8b:1b:2a:4c:
         6c:52:9d:c7:7c:0b:87:24:83:76:e0:63:fc:bf:54:c6:63:fe:
         4f:a7:07:1f:0a:1f:3f:2b:15:4c:4e:7b:40:ee:ab:40:29:31:
         9b:70:78:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:15:34 2025 by rpki-client