Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3138372e3131302e3130322e302f32342d3234203d3e203238363234.roa
File:                     3138372e3131302e3130322e302f32342d3234203d3e203238363234.roa (raw, json)
Hash identifier:          4tVQCWFdqE9L/+I/dNtpaJSIdycko61U1uYKaF5V+RI=
Subject key identifier:   DA:70:F2:2E:42:47:81:38:0E:B7:6C:9D:D6:DF:EF:2B:94:B0:A4:29
Certificate issuer:       /CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
Certificate serial:       10E45ED1A3F23D2F2141EC42660A12E6C12B1C
Authority key identifier: C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3138372e3131302e3130322e302f32342d3234203d3e203238363234.roa
Signing time:             Thu 30 Oct 2025 02:45:20 +0000
ROA not before:           Thu 30 Oct 2025 02:40:20 +0000
ROA not after:            Thu 29 Oct 2026 02:45:20 +0000
asID:                     28624
IP address blocks:        187.110.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl
                          rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 23:38:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:e4:5e:d1:a3:f2:3d:2f:21:41:ec:42:66:0a:12:e6:c1:2b:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
        Validity
            Not Before: Oct 30 02:40:20 2025 GMT
            Not After : Oct 29 02:45:20 2026 GMT
        Subject: CN=DA70F22E424781380EB76C9DD6DFEF2B94B0A429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:10:00:7c:35:3d:64:15:3d:0b:2f:51:b1:55:
                    64:c1:35:92:49:25:7d:82:2f:33:5c:08:75:00:b0:
                    d1:ad:46:a7:80:48:22:63:b3:84:ee:c8:2a:11:ea:
                    52:e0:b0:ba:f0:c2:5c:96:42:ca:84:1a:37:4e:44:
                    c8:9f:36:41:72:67:0f:7f:ba:5b:53:3c:d6:8b:9c:
                    56:1a:09:59:d5:67:1b:38:52:6c:e5:46:0c:fe:d7:
                    66:d0:62:77:54:58:fc:fa:1f:dc:f6:82:33:42:8f:
                    a3:ec:52:15:79:fa:53:3f:3d:59:26:61:9f:3c:b1:
                    a3:52:34:73:cb:b1:3b:1e:0a:34:d9:ad:d9:d2:70:
                    08:21:f4:2d:4d:ec:bf:87:f2:80:fb:82:e1:93:f9:
                    95:15:83:df:24:1b:5b:a6:13:5e:6b:ae:de:fa:b2:
                    82:3f:92:82:e2:ee:ac:03:ff:6b:b1:16:1e:22:0a:
                    05:99:74:47:e6:36:ee:3b:95:eb:95:b1:80:e2:96:
                    df:3c:fe:22:e4:bc:d8:78:c6:e0:28:0f:de:e2:2b:
                    88:4f:27:3e:c5:08:6f:33:92:bd:d0:7d:8e:97:8e:
                    51:66:98:94:e9:68:47:cf:b9:fe:1e:de:95:27:50:
                    b3:66:a3:14:8f:3a:19:f2:c6:30:fc:a7:2b:61:fb:
                    26:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:70:F2:2E:42:47:81:38:0E:B7:6C:9D:D6:DF:EF:2B:94:B0:A4:29
            X509v3 Authority Key Identifier:
                keyid:C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3138372e3131302e3130322e302f32342d3234203d3e203238363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:65:17:0a:c8:49:7b:a2:81:7c:22:13:da:fe:33:1e:43:45:
         a5:23:69:21:a4:fe:48:fb:5e:93:11:ee:87:31:4f:9b:f1:bc:
         31:a4:57:52:2c:9f:49:1f:48:79:d3:2c:23:5e:ca:83:e2:b4:
         fe:97:06:7c:8e:3f:64:07:ef:46:6e:d6:e8:5e:25:7c:d5:96:
         59:00:96:26:8c:1b:cf:95:6c:cc:5a:4b:a8:7e:49:04:24:ef:
         a3:66:84:52:c5:e1:ab:08:c0:e1:9e:e4:da:ed:6d:56:e5:29:
         7c:13:81:41:77:d3:7d:90:a5:f0:7f:f4:a5:ac:d1:1c:e2:e9:
         5a:52:3a:65:29:6f:32:01:1a:22:33:52:bf:7e:1e:cc:48:e8:
         ca:a1:27:43:39:7b:57:73:ea:59:1c:e0:a6:2d:d6:a9:7c:06:
         8a:34:75:96:a2:f5:80:60:00:13:05:91:2a:e6:f8:e8:9d:5a:
         4e:e5:ea:0a:d5:c3:5c:16:b1:26:fd:d1:29:1a:6f:39:10:55:
         59:73:31:da:59:28:64:79:55:75:19:42:ad:16:71:f2:b8:40:
         7b:3a:8a:c3:a5:07:67:ec:93:dd:8f:da:c5:9d:e6:c2:83:44:
         7d:cc:ec:c6:89:aa:89:1e:fb:f0:e7:ee:68:0e:39:52:ca:f1:
         ba:93:42:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:31:46 2025 by rpki-client