Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34322e302f32342d3332203d3e20323632373038.roa
File:                     3138362e3139332e34322e302f32342d3332203d3e20323632373038.roa (raw, json)
Hash identifier:          4+pRkOFTpBZ8ZQ92YVoFNyUOivSDoGGBQ6c1nmqqK6E=
Subject key identifier:   BE:29:CD:FA:C9:10:A1:AE:45:67:F3:73:2E:E9:5D:AD:4D:BF:F5:26
Certificate issuer:       /CN=78346DE4E6250B19E47E9CC8008E76CF94DC04D7
Certificate serial:       72684AE1029B270034C585C30B04E047EDC89693
Authority key identifier: 78:34:6D:E4:E6:25:0B:19:E4:7E:9C:C8:00:8E:76:CF:94:DC:04:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34322e302f32342d3332203d3e20323632373038.roa
Signing time:             Fri 25 Sep 2026 03:19:46 +0000
ROA not before:           Fri 25 Sep 2026 03:14:46 +0000
ROA not after:            Fri 24 Sep 2027 03:19:46 +0000
asID:                     262708
IP address blocks:        186.193.42.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.crl
                          rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 01:45:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:68:4a:e1:02:9b:27:00:34:c5:85:c3:0b:04:e0:47:ed:c8:96:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78346DE4E6250B19E47E9CC8008E76CF94DC04D7
        Validity
            Not Before: Sep 25 03:14:46 2026 GMT
            Not After : Sep 24 03:19:46 2027 GMT
        Subject: CN=BE29CDFAC910A1AE4567F3732EE95DAD4DBFF526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f2:22:a2:fe:52:2f:5d:a2:21:14:74:84:7e:
                    70:fb:66:f9:38:4b:e5:87:39:8d:dd:9f:0f:28:f4:
                    2c:c3:29:b3:cb:5d:84:23:e9:71:b6:4b:47:93:4c:
                    91:5a:41:47:8d:56:0a:9e:a1:ee:92:74:4c:49:18:
                    57:c4:aa:92:71:c5:27:cd:0c:e4:e3:8d:c5:ca:64:
                    09:2c:45:5e:86:1b:6d:1d:ea:be:81:b7:ef:c5:c2:
                    16:04:26:1a:a9:6b:62:e9:3d:28:44:b9:17:60:df:
                    58:c0:92:0f:96:2e:7b:55:ce:a4:eb:52:f4:51:69:
                    99:71:a0:fe:28:38:64:ca:b0:78:d0:e7:49:8f:79:
                    83:cc:51:8b:ca:1e:09:c9:cc:eb:97:aa:18:db:86:
                    0c:3f:73:ef:20:bf:ee:ae:30:d6:5e:03:f5:c1:1b:
                    08:86:10:54:4d:8b:7f:7f:85:8a:1d:d9:71:14:98:
                    2e:cd:98:f3:9d:ab:3e:80:fd:6b:f9:79:fd:c4:3b:
                    b4:0e:29:0a:89:ec:63:e8:bd:99:06:8e:32:3c:b5:
                    6b:c3:ec:80:fa:f9:a1:cf:b0:08:a7:31:97:2e:e0:
                    07:15:69:d2:09:f0:63:67:99:1e:57:3b:6b:e3:76:
                    f0:aa:38:15:5d:88:7b:75:a0:27:7d:1a:55:0e:f0:
                    8e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:29:CD:FA:C9:10:A1:AE:45:67:F3:73:2E:E9:5D:AD:4D:BF:F5:26
            X509v3 Authority Key Identifier:
                keyid:78:34:6D:E4:E6:25:0B:19:E4:7E:9C:C8:00:8E:76:CF:94:DC:04:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34322e302f32342d3332203d3e20323632373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:bb:3d:6b:b0:76:2f:d2:4d:49:99:74:72:68:28:f4:fc:1a:
         87:4b:9a:d1:95:65:10:ff:92:36:07:94:b8:64:ed:a7:d9:70:
         4d:7a:0c:10:b9:b2:6e:64:d9:70:4f:2c:aa:cb:03:d7:9d:f0:
         a3:a0:56:e9:95:0e:d4:1e:26:8c:af:45:75:5d:9d:78:15:74:
         af:59:e3:99:8a:f4:90:73:a6:46:60:f2:63:60:d3:f8:63:ad:
         35:4c:d6:e5:a6:d5:7f:8e:75:8c:ba:c0:ef:d0:3d:ca:f4:83:
         56:2b:37:f6:cb:66:32:77:73:23:43:c9:3e:d5:49:06:94:bc:
         73:63:3c:c3:82:60:1d:ec:b9:76:49:ef:c4:50:56:03:a5:5a:
         1f:08:62:3b:2c:a8:6a:d7:19:91:c3:48:08:d2:26:e1:5b:a8:
         7a:36:4f:5f:65:6c:ca:24:c4:ef:fe:04:91:9b:0a:74:c2:5f:
         3c:86:4e:2a:21:29:02:de:0f:1e:df:ab:ba:b4:4c:7d:c1:6c:
         99:c0:27:9d:25:64:25:e6:7a:fa:48:3d:10:25:53:3c:df:bb:
         4e:fd:9b:2e:1d:8c:aa:bf:1b:94:ac:95:a8:72:11:d8:ef:77:
         c0:dd:cc:31:33:2e:1f:cd:4d:a1:df:fe:bb:f9:25:da:ee:8e:
         24:d6:4c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:25:48 2026 by rpki-client