Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34322e302f32332d3332203d3e20323632373038.roa
File:                     3138362e3139332e34322e302f32332d3332203d3e20323632373038.roa (raw, json)
Hash identifier:          IJhcOxZYxYQTlL6OmKYntmOSsR6Y2m3419poy1FgyZ4=
Subject key identifier:   F6:0E:68:74:DE:2D:66:AB:6C:A9:19:12:BB:D6:B9:79:C8:A2:36:D1
Certificate issuer:       /CN=78346DE4E6250B19E47E9CC8008E76CF94DC04D7
Certificate serial:       0FB009FBAE4982DC197977600C373D73383B5821
Authority key identifier: 78:34:6D:E4:E6:25:0B:19:E4:7E:9C:C8:00:8E:76:CF:94:DC:04:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34322e302f32332d3332203d3e20323632373038.roa
Signing time:             Fri 25 Sep 2026 03:19:41 +0000
ROA not before:           Fri 25 Sep 2026 03:14:41 +0000
ROA not after:            Fri 24 Sep 2027 03:19:41 +0000
asID:                     262708
IP address blocks:        186.193.42.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.crl
                          rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 01:45:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:b0:09:fb:ae:49:82:dc:19:79:77:60:0c:37:3d:73:38:3b:58:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78346DE4E6250B19E47E9CC8008E76CF94DC04D7
        Validity
            Not Before: Sep 25 03:14:41 2026 GMT
            Not After : Sep 24 03:19:41 2027 GMT
        Subject: CN=F60E6874DE2D66AB6CA91912BBD6B979C8A236D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c9:37:7b:99:1c:46:d5:31:fc:86:4b:21:dd:
                    fb:2f:22:19:e6:3a:a4:45:ef:43:42:a5:64:fd:94:
                    d7:ac:6a:36:1c:71:e6:63:7c:80:c0:04:a2:0d:7e:
                    0c:b3:d1:0a:e0:49:3a:48:9a:7c:05:84:bc:ab:1e:
                    f4:90:bb:8b:af:58:19:90:b1:70:f9:6c:6d:15:cd:
                    3b:4f:72:f3:ac:b1:5a:43:e0:15:2f:3f:e9:a8:85:
                    19:d5:2f:fb:a2:f5:d9:bb:3e:67:36:3b:16:90:c5:
                    40:a5:d7:06:93:42:b3:62:9f:2e:08:9e:be:3c:53:
                    ed:f7:f1:0d:4f:bd:82:f9:12:61:ed:c0:79:26:e4:
                    ae:17:56:f0:3c:1a:4d:00:65:35:9c:58:fb:72:42:
                    13:f6:24:4b:21:72:5a:6c:be:fc:9d:bb:76:f1:8c:
                    cd:92:df:a7:87:b9:fa:96:0b:14:f3:41:00:a2:1a:
                    46:aa:23:28:2a:72:62:bc:9e:fc:e0:5b:3a:40:8c:
                    44:19:93:51:e0:30:19:14:fa:03:0e:32:7b:58:7a:
                    ff:15:38:ee:84:fa:8a:5a:11:da:cc:c6:5c:a1:a3:
                    f7:24:f1:f7:de:d1:5b:fc:3d:67:30:47:88:09:ef:
                    18:08:e8:de:37:d4:53:05:09:9f:94:0b:71:ad:fa:
                    9e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:0E:68:74:DE:2D:66:AB:6C:A9:19:12:BB:D6:B9:79:C8:A2:36:D1
            X509v3 Authority Key Identifier:
                keyid:78:34:6D:E4:E6:25:0B:19:E4:7E:9C:C8:00:8E:76:CF:94:DC:04:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34322e302f32332d3332203d3e20323632373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:03:c6:bd:3c:f6:11:ab:5f:07:d8:56:70:e7:b9:82:a1:00:
         8f:ae:ec:33:0b:cd:aa:67:b0:1e:1b:5c:ad:48:1a:4c:cf:14:
         d5:c4:2a:fa:8e:83:4f:dc:36:2f:33:db:28:c9:47:4e:94:c3:
         ce:be:63:61:f6:15:63:cc:8d:ac:db:08:5b:0b:96:d9:a6:e5:
         55:d9:11:fc:a0:4a:27:1b:be:4a:82:8f:f3:6a:05:52:01:a8:
         bf:10:b8:8b:4f:91:7a:60:ec:23:3f:dc:b4:e5:e2:87:b7:28:
         c0:f2:f5:77:22:9a:b9:9a:75:16:48:1b:d8:3c:9d:00:9a:dc:
         38:3a:9c:dd:d7:65:ba:67:25:4a:bd:ea:ac:c5:2a:30:4c:81:
         26:c0:1d:4b:e7:71:96:58:70:f2:8a:2f:60:53:d7:3c:81:9d:
         19:9e:ce:a8:a9:32:7a:74:86:8f:69:71:8c:ac:0f:ac:0d:4b:
         f8:43:0c:fc:e7:a1:99:05:83:78:fc:5c:39:1e:9b:4a:13:f4:
         ad:4a:04:a5:e1:3b:db:ae:53:41:bf:29:82:f8:31:bd:9b:39:
         35:de:d3:1b:43:51:9d:21:93:01:94:e7:c6:14:b3:7d:0c:65:
         45:17:9e:7c:e2:42:cc:1e:a6:6e:a4:83:4f:9d:3c:14:ed:90:
         95:cb:9e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:25:29 2026 by rpki-client