Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3138372e3131302e3130362e302f32342d3234203d3e203238363234.roa
File:                     3138372e3131302e3130362e302f32342d3234203d3e203238363234.roa (raw, json)
Hash identifier:          gjijRRjGGO5oeWnEmQ0pSdt/NVOoCbeIEHmiVHr+3VA=
Subject key identifier:   33:5B:59:0F:AE:65:A3:D7:E4:5D:6B:21:4E:39:63:8F:B6:84:47:6C
Certificate issuer:       /CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
Certificate serial:       2B56FCF0448F38260247B67ED0C87AFD109A0D5A
Authority key identifier: C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3138372e3131302e3130362e302f32342d3234203d3e203238363234.roa
Signing time:             Thu 30 Oct 2025 02:45:22 +0000
ROA not before:           Thu 30 Oct 2025 02:40:22 +0000
ROA not after:            Thu 29 Oct 2026 02:45:22 +0000
asID:                     28624
IP address blocks:        187.110.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl
                          rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 23:38:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:56:fc:f0:44:8f:38:26:02:47:b6:7e:d0:c8:7a:fd:10:9a:0d:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
        Validity
            Not Before: Oct 30 02:40:22 2025 GMT
            Not After : Oct 29 02:45:22 2026 GMT
        Subject: CN=335B590FAE65A3D7E45D6B214E39638FB684476C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:2c:15:e1:e8:6c:e0:a7:67:40:1f:f9:14:53:
                    96:a8:1a:e7:10:4c:50:50:03:f1:db:09:c1:a3:3f:
                    1d:2f:e5:9a:7c:6d:9e:f8:8b:19:0e:86:57:98:f9:
                    75:d8:28:f6:e5:23:58:f5:38:8e:fc:dc:f3:4d:4a:
                    2d:d4:07:03:fb:9e:ee:a2:f4:a3:82:05:37:8f:78:
                    18:38:4c:a4:9c:a6:d4:87:56:ec:c9:77:1e:64:46:
                    50:9e:70:3f:33:7c:97:0d:36:f6:f3:ac:27:89:30:
                    bd:d2:d0:13:3e:e2:cb:ea:58:6e:ef:7d:ca:21:31:
                    20:6f:58:93:0b:67:ea:62:4c:99:1f:e5:1d:c4:7f:
                    9a:b2:38:92:b8:0c:39:77:09:88:e4:39:b3:85:2e:
                    42:0f:d8:5e:3e:fd:0b:06:de:5f:a6:94:67:da:32:
                    51:e8:28:cd:2d:c4:0a:69:4f:9b:d3:4e:29:11:52:
                    a6:43:aa:31:2f:ff:12:a4:5a:5d:b6:a8:d8:76:71:
                    1d:c4:9f:6a:a3:e7:a0:70:96:d2:49:04:0f:20:07:
                    3e:8a:3c:90:08:c0:3c:2b:f2:97:10:6a:da:09:ed:
                    87:cc:f9:f1:90:77:bc:29:97:c3:e9:ce:d2:51:2f:
                    b2:7a:13:9b:f2:2e:32:d5:29:50:3b:50:de:95:4e:
                    f9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:5B:59:0F:AE:65:A3:D7:E4:5D:6B:21:4E:39:63:8F:B6:84:47:6C
            X509v3 Authority Key Identifier:
                keyid:C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3138372e3131302e3130362e302f32342d3234203d3e203238363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:92:2f:c7:ee:72:7f:16:5b:ca:92:75:d3:38:fd:1d:ba:87:
         45:98:99:56:cf:af:be:19:66:b8:05:73:91:84:52:25:c1:77:
         9f:9a:0d:9e:49:df:9c:06:ee:b2:cc:81:04:93:01:e3:1b:0e:
         98:bc:d1:27:4c:66:55:8e:7c:04:70:1c:54:c3:39:0d:e2:60:
         1d:c5:16:b8:26:5d:e9:a3:f8:8e:94:2d:ae:22:36:85:f2:bb:
         c6:0b:2d:ea:71:a4:e7:a1:73:76:43:83:76:06:8f:15:5c:53:
         72:8c:2b:99:3c:7d:9b:76:6a:f5:3f:a2:ac:2d:3d:3b:ee:fd:
         44:db:d5:fc:92:41:bd:87:89:7b:66:a1:2b:ad:5d:fd:5c:b8:
         07:91:41:a8:79:9a:b0:ed:dc:00:8f:26:27:c2:d7:63:59:e2:
         f2:72:c3:2d:8e:52:34:07:10:94:2d:3d:28:18:c5:a9:01:7c:
         13:48:b6:c4:21:1c:50:0b:fa:ef:f0:40:e6:ea:fc:23:6c:d3:
         a7:e9:6a:db:c2:1a:c7:96:45:29:1d:08:ec:ee:2a:5b:b7:80:
         99:b6:7f:41:84:96:2b:d2:1e:9a:12:d0:12:3c:9b:a7:54:de:
         57:f6:8e:22:1e:62:80:62:a3:99:66:ed:4f:5f:36:3e:e5:0c:
         6d:b2:07:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:31:47 2025 by rpki-client