Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34322e302f32342d3332203d3e20323632373038.roa
File:                     3138362e3139332e34322e302f32342d3332203d3e20323632373038.roa (raw, json)
Hash identifier:          mAlKX6Ynvi5P/nvHYscStvGGPFBPu6nvmFQnyHqIrgc=
Subject key identifier:   DA:BE:F8:1E:13:FF:71:DA:EA:20:06:E3:33:69:6A:9A:27:A6:50:AD
Certificate issuer:       /CN=78346DE4E6250B19E47E9CC8008E76CF94DC04D7
Certificate serial:       2A9020F7419F3F4DEC59CF3DCBF78262373C2FB6
Authority key identifier: 78:34:6D:E4:E6:25:0B:19:E4:7E:9C:C8:00:8E:76:CF:94:DC:04:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34322e302f32342d3332203d3e20323632373038.roa
Signing time:             Fri 24 Oct 2025 02:47:45 +0000
ROA not before:           Fri 24 Oct 2025 02:42:45 +0000
ROA not after:            Fri 23 Oct 2026 02:47:45 +0000
asID:                     262708
IP address blocks:        186.193.42.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.crl
                          rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 23:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:90:20:f7:41:9f:3f:4d:ec:59:cf:3d:cb:f7:82:62:37:3c:2f:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78346DE4E6250B19E47E9CC8008E76CF94DC04D7
        Validity
            Not Before: Oct 24 02:42:45 2025 GMT
            Not After : Oct 23 02:47:45 2026 GMT
        Subject: CN=DABEF81E13FF71DAEA2006E333696A9A27A650AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4f:31:87:36:45:74:d4:dd:10:96:c7:a0:16:
                    9f:f2:f1:87:a4:ea:a3:15:9c:3c:13:07:e4:da:27:
                    8e:17:5e:db:7e:ba:2c:91:7b:c0:40:12:16:52:f8:
                    46:f0:32:ac:0e:2f:e6:0d:bc:c2:e6:b7:61:ea:77:
                    8e:16:cf:1c:45:80:78:e7:0d:57:a2:4e:92:68:38:
                    65:a8:0f:c4:bf:19:69:d4:a7:85:be:dd:f2:25:b7:
                    c1:cc:aa:31:c8:cd:66:bb:68:5c:a0:3f:08:3b:aa:
                    6e:74:65:40:f5:2b:82:94:f7:66:1e:f8:12:da:eb:
                    58:48:af:39:c5:5c:b5:2d:33:58:2f:4a:d1:5b:15:
                    6f:c2:32:e3:e7:a7:1a:54:df:af:bb:20:0c:37:d0:
                    0b:ca:f8:0d:b5:55:22:76:31:bb:6c:31:13:49:3f:
                    49:e2:a5:d9:08:ce:58:29:00:be:b5:27:4b:8c:29:
                    87:e7:51:a6:ad:b8:94:ab:6c:70:c7:86:c0:f6:58:
                    41:76:93:dc:82:64:3a:cd:c0:02:68:a8:a2:13:3c:
                    e7:79:27:69:64:bb:be:40:aa:62:42:aa:2b:c8:55:
                    2c:31:18:dd:c4:bd:ba:33:96:e1:90:1f:66:04:34:
                    97:bb:e5:19:41:8e:df:81:38:c7:81:8e:a8:d6:21:
                    03:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:BE:F8:1E:13:FF:71:DA:EA:20:06:E3:33:69:6A:9A:27:A6:50:AD
            X509v3 Authority Key Identifier:
                keyid:78:34:6D:E4:E6:25:0B:19:E4:7E:9C:C8:00:8E:76:CF:94:DC:04:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34322e302f32342d3332203d3e20323632373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:6f:98:d0:f2:c7:15:5d:81:ac:33:49:8e:97:fc:a6:24:a7:
         21:a2:5b:45:54:e7:6f:44:f5:9b:46:ea:37:80:c1:22:23:7c:
         cd:5c:1f:34:31:c6:9b:5d:7f:8c:16:6e:ab:d0:34:8c:40:12:
         06:0e:fb:9f:d0:07:0a:b8:86:9a:6b:5e:8f:e0:55:13:13:d6:
         de:f7:66:02:a8:93:69:4d:d4:98:29:92:e0:93:52:85:3e:2f:
         b2:2f:e0:c0:79:cb:13:8e:72:ee:fa:01:3e:89:7d:ee:f1:b3:
         4b:4f:94:4e:c5:aa:e6:90:90:e4:c4:1e:c1:ef:3d:14:4d:88:
         4e:c1:8f:cf:98:f9:8d:49:9c:9f:b2:ec:1c:66:f5:87:ed:e0:
         04:2c:03:b4:ee:18:66:96:24:43:9b:ad:77:98:c1:8f:34:39:
         f5:46:e9:ee:e4:a0:d4:ce:0e:54:0e:fd:10:02:4e:a4:68:a7:
         f9:25:f2:72:6c:4e:77:ac:13:07:be:17:37:56:84:ee:9e:94:
         4a:e1:d8:ab:da:3f:01:b5:c3:4f:e8:4d:39:79:10:6e:6f:da:
         a9:02:e3:89:dc:26:19:e0:99:53:72:54:9c:4a:ef:8a:b1:5c:
         aa:32:2f:12:02:af:a4:30:85:d9:9b:81:3b:c4:52:15:0f:18:
         af:4e:72:61
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKpAg90GfP03sWc89y/eCYjc8L7YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzgzNDZERTRFNjI1MEIxOUU0N0U5Q0M4MDA4RTc2Q0Y5
NERDMDRENzAeFw0yNTEwMjQwMjQyNDVaFw0yNjEwMjMwMjQ3NDVaMDMxMTAvBgNV
BAMTKERBQkVGODFFMTNGRjcxREFFQTIwMDZFMzMzNjk2QTlBMjdBNjUwQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7TzGHNkV01N0QlsegFp/y8Yek
6qMVnDwTB+TaJ44XXtt+uiyRe8BAEhZS+EbwMqwOL+YNvMLmt2Hqd44WzxxFgHjn
DVeiTpJoOGWoD8S/GWnUp4W+3fIlt8HMqjHIzWa7aFygPwg7qm50ZUD1K4KU92Ye
+BLa61hIrznFXLUtM1gvStFbFW/CMuPnpxpU36+7IAw30AvK+A21VSJ2MbtsMRNJ
P0nipdkIzlgpAL61J0uMKYfnUaatuJSrbHDHhsD2WEF2k9yCZDrNwAJoqKITPOd5
J2lku75AqmJCqivIVSwxGN3EvbozluGQH2YENJe75RlBjt+BOMeBjqjWIQNpAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU2r74HhP/cdrqIAbjM2lqmiemUK0wHwYDVR0j
BBgwFoAUeDRt5OYlCxnkfpzIAI52z5TcBNcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUxmV2JwZDZUcFZVcFp2ckM2RHV5ZFYxemVUZnV2c1E4MnZZS2ZSaG44
cG0vMC83ODM0NkRFNEU2MjUwQjE5RTQ3RTlDQzgwMDhFNzZDRjk0REMwNEQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc4MzQ2REU0RTYyNTBCMTlF
NDdFOUNDODAwOEU3NkNGOTREQzA0RDcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVMZldicGQ2VHBWVXBadnJDNkR1eWRWMXplVGZ1dnNRODJ2WUtmUmhuOHBtLzAv
MzEzODM2MmUzMTM5MzMyZTM0MzIyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzMjM2
MzIzNzMwMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC6wSowDQYJKoZIhvcNAQELBQADggEBALNvmNDy
xxVdgawzSY6X/KYkpyGiW0VU529E9ZtG6jeAwSIjfM1cHzQxxptdf4wWbqvQNIxA
EgYO+5/QBwq4hpprXo/gVRMT1t73ZgKok2lN1JgpkuCTUoU+L7Iv4MB5yxOOcu76
AT6Jfe7xs0tPlE7FquaQkOTEHsHvPRRNiE7Bj8+Y+Y1JnJ+y7Bxm9Yft4AQsA7Tu
GGaWJEObrXeYwY80OfVG6e7koNTODlQO/RACTqRop/kl8nJsTnesEwe+FzdWhO6e
lErh2KvaPwG1w0/oTTl5EG5v2qkC44ncJhngmVNyVJxK74qxXKoyLxICr6Qwhdmb
gTvEUhUPGK9OcmE=
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:47:16 2025 by rpki-client