Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34372e302f32342d3332203d3e20323632373038.roa
File:                     3138362e3139332e34372e302f32342d3332203d3e20323632373038.roa (raw, json)
Hash identifier:          cWKAGPN0f2Zl5YFVPAv1w4blHwEeKB3t0r1at58tPgk=
Subject key identifier:   C9:E8:51:A8:A7:8E:BB:2A:9F:13:D3:7C:94:80:B5:B1:D6:D1:09:D4
Certificate issuer:       /CN=78346DE4E6250B19E47E9CC8008E76CF94DC04D7
Certificate serial:       3053A7FB1B507EBD32E76CC0F6FA537EFA7872A6
Authority key identifier: 78:34:6D:E4:E6:25:0B:19:E4:7E:9C:C8:00:8E:76:CF:94:DC:04:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34372e302f32342d3332203d3e20323632373038.roa
Signing time:             Fri 25 Sep 2026 03:19:45 +0000
ROA not before:           Fri 25 Sep 2026 03:14:45 +0000
ROA not after:            Fri 24 Sep 2027 03:19:45 +0000
asID:                     262708
IP address blocks:        186.193.47.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.crl
                          rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 01:45:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:53:a7:fb:1b:50:7e:bd:32:e7:6c:c0:f6:fa:53:7e:fa:78:72:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78346DE4E6250B19E47E9CC8008E76CF94DC04D7
        Validity
            Not Before: Sep 25 03:14:45 2026 GMT
            Not After : Sep 24 03:19:45 2027 GMT
        Subject: CN=C9E851A8A78EBB2A9F13D37C9480B5B1D6D109D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b1:17:4a:e2:05:a7:ba:dd:04:01:1e:24:a7:
                    9d:e3:ee:d4:3f:2b:39:a1:f8:9d:67:79:90:3d:e4:
                    7c:85:cc:a8:05:8a:46:ff:47:67:04:01:ba:27:4a:
                    0c:eb:0f:37:7a:cf:b4:24:e1:45:b5:28:be:df:61:
                    3d:78:25:97:52:8b:fd:bb:ae:f6:12:dd:9a:b4:56:
                    53:84:1d:77:57:04:c3:34:41:1c:89:44:a1:46:ca:
                    fd:b7:60:11:ac:aa:1f:d1:15:dc:c9:18:87:27:1e:
                    fd:32:51:2e:ad:1e:3f:ee:df:e4:07:66:89:a4:ee:
                    f5:6e:55:24:fb:0f:3d:5b:04:45:6e:a2:e8:a4:31:
                    38:1b:5e:e2:cc:ae:9c:17:d1:15:42:20:b3:b4:b6:
                    38:84:86:53:c4:e3:85:ba:d7:ab:cd:e6:b6:60:79:
                    37:31:94:e5:f4:32:5b:8f:49:6c:6d:d5:e5:70:3a:
                    cb:a0:a6:1d:96:96:dc:5d:3b:50:82:64:58:e4:70:
                    09:44:a3:55:ef:2f:c5:bd:de:31:da:df:25:6e:7b:
                    3d:73:6d:a1:77:9c:2c:bf:1f:4e:b0:b5:60:11:a4:
                    2e:fb:4f:7f:dc:0f:63:b9:32:79:f6:50:38:fd:d2:
                    71:2a:32:85:b1:9d:36:28:c0:6e:6a:fe:dc:ee:6c:
                    c5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E8:51:A8:A7:8E:BB:2A:9F:13:D3:7C:94:80:B5:B1:D6:D1:09:D4
            X509v3 Authority Key Identifier:
                keyid:78:34:6D:E4:E6:25:0B:19:E4:7E:9C:C8:00:8E:76:CF:94:DC:04:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78346DE4E6250B19E47E9CC8008E76CF94DC04D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34372e302f32342d3332203d3e20323632373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:7a:22:45:44:0c:65:3c:25:78:30:ff:0e:e2:4d:41:53:ec:
         e0:ce:f2:85:0e:c7:2e:1d:46:32:05:4b:8f:de:24:a3:5c:06:
         5b:34:5b:9b:46:a9:41:e6:36:71:f0:80:52:40:a3:bc:10:38:
         30:26:73:23:4d:f9:89:c2:bf:25:a6:7b:ef:ce:53:a8:e0:31:
         40:24:f4:58:eb:2d:41:02:bf:bd:73:15:b7:1a:00:9a:bc:c0:
         5d:f3:ab:87:ae:53:70:73:50:39:c1:b8:d4:e7:b3:df:f7:f7:
         70:71:e1:71:11:f7:56:a6:ff:18:39:e5:1c:6f:22:63:2d:bd:
         a6:b0:4b:ea:8f:8f:5f:bf:09:5b:79:64:5c:1a:6e:7d:19:6b:
         49:a7:66:2b:73:0f:fa:61:67:83:b9:57:14:8d:50:55:00:20:
         44:9a:e4:a3:91:5a:9e:0d:7e:52:fd:f1:8e:07:e3:08:4c:85:
         4f:6b:fd:2d:95:97:02:c2:ec:5c:3e:bb:e7:f1:0b:9a:14:11:
         e2:8c:da:08:f4:02:3b:15:1d:44:0c:21:c7:4a:fd:5f:dc:ee:
         4b:46:b9:1c:0b:1e:70:8b:f1:0e:ef:35:8d:ba:e4:7e:c6:b5:
         c8:61:0d:13:b2:41:c1:8d:50:b2:08:f5:7b:10:bf:95:66:23:
         43:ed:79:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:39:19 2026 by rpki-client