Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3138372e3131302e37332e302f32342d3234203d3e203238363234.roa
File:                     3138372e3131302e37332e302f32342d3234203d3e203238363234.roa (raw, json)
Hash identifier:          ZzfMk/RW1p/yQ0gla6JhxZgqTSw7sR9o0lWLqtKK7ac=
Subject key identifier:   87:4B:AB:4E:03:83:55:BA:14:95:35:32:0F:06:5A:83:21:F6:47:CD
Certificate issuer:       /CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
Certificate serial:       11DA0ED14B110B5806F1BEBF43E91ADF7D82E129
Authority key identifier: C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3138372e3131302e37332e302f32342d3234203d3e203238363234.roa
Signing time:             Thu 30 Oct 2025 02:45:24 +0000
ROA not before:           Thu 30 Oct 2025 02:40:24 +0000
ROA not after:            Thu 29 Oct 2026 02:45:24 +0000
asID:                     28624
IP address blocks:        187.110.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl
                          rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 23:38:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:da:0e:d1:4b:11:0b:58:06:f1:be:bf:43:e9:1a:df:7d:82:e1:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
        Validity
            Not Before: Oct 30 02:40:24 2025 GMT
            Not After : Oct 29 02:45:24 2026 GMT
        Subject: CN=874BAB4E038355BA149535320F065A8321F647CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c1:4b:77:c3:16:06:45:54:5c:ab:58:fc:96:
                    da:5a:ca:11:3e:96:51:b2:4a:5d:fb:13:4b:d1:d0:
                    10:4b:df:c7:bb:fb:2a:32:fe:55:29:f5:d3:9b:73:
                    f3:5e:d9:cf:1e:58:1d:63:fc:c4:b8:af:6e:e4:7b:
                    4a:9f:92:cf:61:39:cc:ee:f1:6d:92:71:e1:4d:cf:
                    fc:33:38:27:74:f8:19:e1:28:69:32:2f:78:ad:39:
                    79:e7:9b:8a:16:39:a3:51:ae:f4:89:b0:8b:b0:ec:
                    3a:13:93:79:24:8d:af:f3:53:c6:77:3a:57:3c:84:
                    dc:30:08:50:9d:4f:04:37:80:b5:b9:ff:36:d6:fb:
                    50:01:7f:c1:ef:af:85:6a:bd:21:23:9d:18:87:4e:
                    64:e3:f1:bf:38:8c:5d:ed:4b:75:73:e1:eb:6e:db:
                    9e:db:6a:ed:08:35:f1:d5:28:10:62:22:33:ee:de:
                    a4:ca:3c:62:c4:34:4b:19:42:a8:f6:43:9e:92:5d:
                    9b:5c:38:0c:e3:bd:7c:af:84:4f:2c:1d:be:dc:80:
                    fd:49:a2:65:fc:20:6a:da:46:dc:10:07:04:4d:a7:
                    ae:f3:a9:08:f4:cd:71:2b:ae:21:3c:d7:da:6f:20:
                    8e:38:75:25:61:37:1a:a6:8b:96:12:da:4e:22:e1:
                    06:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:4B:AB:4E:03:83:55:BA:14:95:35:32:0F:06:5A:83:21:F6:47:CD
            X509v3 Authority Key Identifier:
                keyid:C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3138372e3131302e37332e302f32342d3234203d3e203238363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:a6:44:88:86:7e:8f:df:17:d5:79:43:ca:3f:10:c6:ad:86:
         f4:72:e4:dd:c1:cb:c0:b8:a7:b0:13:42:8a:75:4e:b3:33:9e:
         b2:e6:71:b9:0d:b5:b7:d1:f0:b1:96:72:70:63:c0:98:ac:c9:
         cf:13:26:f2:15:81:1f:65:b7:8c:7f:04:09:f1:00:eb:29:bd:
         17:7c:d4:8a:53:58:b3:03:9c:76:5c:db:b3:b6:85:4a:26:97:
         3f:b8:2e:cd:5f:ad:08:7a:0b:e1:a1:e0:29:08:54:d6:c4:0c:
         f5:b6:de:4c:1e:f0:07:c2:9d:59:e1:ec:70:fc:c4:c5:11:80:
         e6:02:d9:02:23:ba:2a:18:32:9a:25:1c:14:b6:16:40:6a:1e:
         9d:7b:6a:81:58:15:34:97:df:25:e1:e1:7f:fe:27:8d:ab:d3:
         2f:60:70:65:70:e9:a1:b0:da:51:20:9f:ae:c1:95:93:3e:93:
         aa:d2:34:64:48:04:f4:0f:d2:b3:11:e3:b2:f9:23:9f:f9:f0:
         3b:dc:0b:51:d2:a0:ed:56:74:ef:a4:0d:8d:2a:f8:f8:56:c7:
         6c:ea:a2:b1:f6:f9:a5:c2:60:98:23:c3:7e:8c:82:99:37:ec:
         dd:9b:86:a2:e1:1b:78:82:93:db:92:6d:a6:2c:00:fd:bd:dc:
         33:a3:e7:66
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUEdoO0UsRC1gG8b6/Q+ka332C4SkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzc5ODhBRTZBNzlFNzhERDcxMjM1MDk2RTlCQUUyRTQy
OUJBMDZDNDAeFw0yNTEwMzAwMjQwMjRaFw0yNjEwMjkwMjQ1MjRaMDMxMTAvBgNV
BAMTKDg3NEJBQjRFMDM4MzU1QkExNDk1MzUzMjBGMDY1QTgzMjFGNjQ3Q0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVwUt3wxYGRVRcq1j8ltpayhE+
llGySl37E0vR0BBL38e7+yoy/lUp9dObc/Ne2c8eWB1j/MS4r27ke0qfks9hOczu
8W2SceFNz/wzOCd0+BnhKGkyL3itOXnnm4oWOaNRrvSJsIuw7DoTk3kkja/zU8Z3
Olc8hNwwCFCdTwQ3gLW5/zbW+1ABf8Hvr4VqvSEjnRiHTmTj8b84jF3tS3Vz4etu
257bau0INfHVKBBiIjPu3qTKPGLENEsZQqj2Q56SXZtcOAzjvXyvhE8sHb7cgP1J
omX8IGraRtwQBwRNp67zqQj0zXErriE819pvII44dSVhNxqmi5YS2k4i4QbtAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUh0urTgODVboUlTUyDwZagyH2R80wHwYDVR0j
BBgwFoAUx5iK5qeeeN1xI1CW6bri5Cm6BsQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUxjNmR5OWl3d1d0MmE4VzNBcXhhN21lNDRVRzJ2b21nZ000Wm11MlF2
S3EvMC9DNzk4OEFFNkE3OUU3OERENzEyMzUwOTZFOUJBRTJFNDI5QkEwNkM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M3OTg4QUU2QTc5RTc4REQ3
MTIzNTA5NkU5QkFFMkU0MjlCQTA2QzQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVMYzZkeTlpd3dXdDJhOFczQXF4YTdtZTQ0VUcydm9tZ2dNNFptdTJRdktxLzAv
MzEzODM3MmUzMTMxMzAyZTM3MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzYzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAu25JMA0GCSqGSIb3DQEBCwUAA4IBAQBXpkSIhn6P
3xfVeUPKPxDGrYb0cuTdwcvAuKewE0KKdU6zM56y5nG5DbW30fCxlnJwY8CYrMnP
EybyFYEfZbeMfwQJ8QDrKb0XfNSKU1izA5x2XNuztoVKJpc/uC7NX60IegvhoeAp
CFTWxAz1tt5MHvAHwp1Z4exw/MTFEYDmAtkCI7oqGDKaJRwUthZAah6de2qBWBU0
l98l4eF//ieNq9MvYHBlcOmhsNpRIJ+uwZWTPpOq0jRkSAT0D9KzEeOy+SOf+fA7
3AtR0qDtVnTvpA2NKvj4Vsds6qKx9vmlwmCYI8N+jIKZN+zdm4ai4Rt4gpPbkm2m
LAD9vdwzo+dm
-----END CERTIFICATE-----
Generated at Tue Nov 4 05:27:14 2025 by rpki-client