Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3138372e3131302e3131322e302f32302d3230203d3e203238363234.roa
File:                     3138372e3131302e3131322e302f32302d3230203d3e203238363234.roa (raw, json)
Hash identifier:          ufBU8O9svvSnCjrwppGNnKz7pn8kRl+0SNbh5TOyuy4=
Subject key identifier:   74:15:C3:91:5E:F2:8A:8A:9C:33:FB:BE:86:5C:2D:AE:31:6D:2C:EE
Certificate issuer:       /CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
Certificate serial:       31D5B4D83F4BFACB0FFB0B3095D4F3768228F756
Authority key identifier: C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3138372e3131302e3131322e302f32302d3230203d3e203238363234.roa
Signing time:             Thu 30 Oct 2025 02:45:21 +0000
ROA not before:           Thu 30 Oct 2025 02:40:21 +0000
ROA not after:            Thu 29 Oct 2026 02:45:21 +0000
asID:                     28624
IP address blocks:        187.110.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl
                          rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 23:38:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:d5:b4:d8:3f:4b:fa:cb:0f:fb:0b:30:95:d4:f3:76:82:28:f7:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
        Validity
            Not Before: Oct 30 02:40:21 2025 GMT
            Not After : Oct 29 02:45:21 2026 GMT
        Subject: CN=7415C3915EF28A8A9C33FBBE865C2DAE316D2CEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:cd:dc:a8:16:ca:f6:6c:7d:1b:ec:76:ed:d2:
                    dc:9f:16:03:43:ce:28:f0:93:a2:1a:2b:a3:98:39:
                    e0:64:02:70:0d:08:ce:16:a1:55:de:bb:81:0d:c4:
                    bd:cb:be:65:2d:ec:98:d4:b6:6c:9e:b5:8c:ea:2b:
                    78:53:9f:00:28:58:d9:55:a4:48:44:59:cd:cb:5a:
                    96:ba:a9:ab:d9:2f:a2:4c:3e:80:0b:c2:75:68:5a:
                    40:4c:02:df:d3:6c:2f:41:0a:12:bf:87:d1:20:4f:
                    99:c3:36:2c:6b:75:3d:c8:d9:27:f6:a6:04:71:02:
                    4c:6e:18:4b:22:a7:32:5b:8b:a8:dd:d9:3b:96:6d:
                    23:6b:d3:ae:e7:ad:94:bf:db:38:60:20:0d:40:94:
                    01:05:2b:c6:1e:06:8d:ae:17:76:92:ff:b9:3f:88:
                    d4:39:6c:ff:6e:33:1f:f2:c6:f3:40:24:1d:1f:c6:
                    be:e2:f3:cb:7c:84:21:c6:9a:1e:ae:b6:a9:ed:5b:
                    c8:a6:d7:bd:97:10:f0:67:c0:57:a0:1f:a5:48:ed:
                    a9:e3:95:98:4f:bf:c1:60:65:61:3e:de:39:67:67:
                    8e:30:5b:82:4a:48:60:9c:8c:0f:36:65:82:7e:e7:
                    b0:e5:db:27:85:24:d1:91:20:95:4c:8f:62:14:67:
                    46:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:15:C3:91:5E:F2:8A:8A:9C:33:FB:BE:86:5C:2D:AE:31:6D:2C:EE
            X509v3 Authority Key Identifier:
                keyid:C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3138372e3131302e3131322e302f32302d3230203d3e203238363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         66:a4:45:75:6f:83:5d:27:a1:6b:b1:31:bb:be:a9:33:bf:7e:
         3c:3e:e7:0a:b3:30:28:e2:c4:56:f2:f6:0e:0b:01:45:63:1b:
         60:23:ad:f4:2f:96:ed:6f:c3:84:51:83:5d:81:63:f4:20:58:
         2f:fc:93:dd:3b:8f:15:b1:aa:33:38:30:a4:f0:9b:93:58:9a:
         bb:68:92:df:5c:9e:7e:29:78:69:89:36:ec:ca:f5:0b:e6:87:
         74:a3:08:d1:bf:10:c1:68:b0:0c:4f:ff:c9:c3:7e:d4:03:03:
         1a:39:8b:61:ad:7d:da:14:2f:56:2b:7c:02:b3:12:4b:4a:e0:
         a1:2a:16:85:23:56:3d:8b:c6:02:c9:39:97:fe:1e:94:91:b6:
         a1:08:66:89:bc:d0:95:e3:26:da:d4:3d:fa:6f:36:24:fc:80:
         1b:f7:ca:ba:2a:bb:70:ae:a5:a7:a4:8b:6d:f8:fc:ef:53:d6:
         e0:f2:85:75:60:53:8f:75:3c:fc:88:03:8a:6f:8f:fe:1d:22:
         51:ff:04:f0:eb:21:ad:2c:ef:0e:15:ec:ef:0a:8e:3b:45:7f:
         a3:9e:ad:aa:50:9c:b6:b8:1d:21:ac:a2:45:da:22:2b:01:f3:
         9d:e0:1e:7c:d9:df:9f:40:86:8a:83:a2:b5:c2:6d:35:e1:98:
         9e:f7:89:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:31:45 2025 by rpki-client