Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3138372e3131302e38352e302f32342d3234203d3e203238363234.roa
File:                     3138372e3131302e38352e302f32342d3234203d3e203238363234.roa (raw, json)
Hash identifier:          YHVrOCRxMc7dABkvu2F21QRY1ucMCq2gnY7wtG0ztbg=
Subject key identifier:   8F:5E:CA:98:1D:C0:C1:80:AC:8A:58:DD:6B:00:71:33:D1:45:0B:5A
Certificate issuer:       /CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
Certificate serial:       3398AEFC69B4092DBA2DA265A45D00C10D5BA55E
Authority key identifier: C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3138372e3131302e38352e302f32342d3234203d3e203238363234.roa
Signing time:             Thu 30 Oct 2025 02:45:20 +0000
ROA not before:           Thu 30 Oct 2025 02:40:20 +0000
ROA not after:            Thu 29 Oct 2026 02:45:20 +0000
asID:                     28624
IP address blocks:        187.110.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl
                          rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 23:38:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:98:ae:fc:69:b4:09:2d:ba:2d:a2:65:a4:5d:00:c1:0d:5b:a5:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
        Validity
            Not Before: Oct 30 02:40:20 2025 GMT
            Not After : Oct 29 02:45:20 2026 GMT
        Subject: CN=8F5ECA981DC0C180AC8A58DD6B007133D1450B5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4e:ea:a8:e6:66:b7:a4:37:7e:c0:e6:27:08:
                    e1:cb:6f:93:7e:f2:7e:e8:8e:7c:bf:de:b6:1b:f6:
                    8c:69:c9:98:76:87:0f:d3:fa:ee:41:b7:4b:a2:f2:
                    7d:55:38:8c:65:ff:e0:5a:20:5e:5a:b6:91:c4:5a:
                    eb:55:e9:46:95:8e:f0:93:74:19:3e:f5:eb:21:b3:
                    bc:4d:7b:aa:24:a9:70:6a:d2:67:47:d6:be:cf:7e:
                    0e:d8:6c:4d:41:9e:6f:7c:4c:57:ae:07:8f:dd:e1:
                    c0:95:1e:86:5a:39:e4:6a:c5:ba:24:55:42:8e:e4:
                    5b:15:62:d3:f6:72:21:81:a9:8f:1c:98:45:aa:7f:
                    6b:e7:d2:bf:0e:d1:1b:58:f3:3a:58:f3:cd:31:39:
                    e9:11:1e:fd:3c:f3:b8:74:d3:15:7c:db:2d:44:1a:
                    56:db:bb:0e:27:94:56:11:1e:12:76:18:19:ff:48:
                    ee:7c:9d:ae:67:d6:5e:96:99:bb:ab:b6:41:ef:d5:
                    42:54:3e:af:42:cb:51:a7:c4:7c:d5:d8:61:7c:10:
                    cb:a8:d0:aa:28:1b:04:f8:13:60:df:dd:3e:07:31:
                    1f:e7:f4:95:3a:49:37:d3:5b:b8:be:29:ba:3d:07:
                    a1:4a:d1:98:6a:b1:ed:4b:f6:b6:2e:e8:b4:04:39:
                    d1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:5E:CA:98:1D:C0:C1:80:AC:8A:58:DD:6B:00:71:33:D1:45:0B:5A
            X509v3 Authority Key Identifier:
                keyid:C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3138372e3131302e38352e302f32342d3234203d3e203238363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:20:9a:e0:0f:23:39:cd:93:c6:be:9e:b6:85:b8:e2:ab:00:
         e5:6a:c9:f6:c6:e7:59:e0:63:02:31:3f:be:ed:c0:09:60:4c:
         3b:73:a0:27:a9:9a:e5:fc:0f:57:4a:31:1a:47:f5:47:a4:4c:
         92:ab:4e:76:3c:d7:7c:e0:a4:46:67:42:40:5e:60:f8:fa:32:
         3a:ae:e9:e0:05:76:02:b0:a7:6d:c0:c6:84:fe:20:8e:e6:60:
         47:42:bc:a4:95:a7:12:be:16:78:02:43:c0:f5:f5:38:71:80:
         3b:3e:66:0b:8f:1a:19:ae:5b:57:30:cc:d2:78:f0:13:73:59:
         0b:f5:eb:08:95:06:ba:6d:8c:7f:8d:f4:c4:15:08:d3:eb:ee:
         7a:14:10:48:02:16:52:97:ba:11:83:1a:c3:43:49:12:a4:a3:
         f7:e3:65:ed:80:fb:fd:39:e8:53:52:0a:2a:2a:38:b4:d0:d4:
         ad:6c:86:b1:8f:7b:0f:c3:ea:4b:d0:17:15:5c:93:7e:b0:a7:
         99:27:6b:24:1d:33:b7:dd:2b:f8:30:76:96:19:47:c6:37:40:
         f9:dd:41:6a:35:7a:d0:4d:20:3c:d2:98:01:59:13:4b:19:62:
         87:91:bd:cc:c4:50:e7:ba:72:ed:09:bd:f2:ca:a2:9a:63:69:
         40:4c:4b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:27:10 2025 by rpki-client