Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3138372e3131302e38362e302f32342d3234203d3e203238363234.roa
File:                     3138372e3131302e38362e302f32342d3234203d3e203238363234.roa (raw, json)
Hash identifier:          TJtUW+FTdpp933LgtaZg+14KvphIi2/4EgkuYZgxbr8=
Subject key identifier:   AB:92:E9:51:B4:A1:85:26:55:49:9B:86:45:A2:14:E0:2E:7E:F9:97
Certificate issuer:       /CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
Certificate serial:       37944584FC0E4A74BE8F44662BE2191D1ACF703F
Authority key identifier: C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3138372e3131302e38362e302f32342d3234203d3e203238363234.roa
Signing time:             Thu 30 Oct 2025 02:45:26 +0000
ROA not before:           Thu 30 Oct 2025 02:40:26 +0000
ROA not after:            Thu 29 Oct 2026 02:45:26 +0000
asID:                     28624
IP address blocks:        187.110.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl
                          rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 23:38:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:94:45:84:fc:0e:4a:74:be:8f:44:66:2b:e2:19:1d:1a:cf:70:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
        Validity
            Not Before: Oct 30 02:40:26 2025 GMT
            Not After : Oct 29 02:45:26 2026 GMT
        Subject: CN=AB92E951B4A1852655499B8645A214E02E7EF997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:06:dc:11:08:60:15:71:93:87:46:fb:eb:26:
                    b4:1d:06:9a:31:07:f5:89:e0:4b:4b:ac:40:29:72:
                    47:14:26:70:bc:c7:88:de:b7:23:f2:fa:0f:f9:76:
                    75:3b:6a:e1:e6:1c:d9:af:61:74:8d:17:e2:68:66:
                    8b:7a:c8:91:cf:30:ce:2f:4f:aa:00:38:97:2d:e6:
                    17:27:18:f1:ff:2d:f0:76:6a:4c:2d:8c:a3:02:c5:
                    81:bb:65:b5:3f:cb:60:15:8e:f4:db:00:5d:ca:c9:
                    ad:75:81:53:2f:7d:02:09:89:be:82:a6:a3:99:56:
                    98:ec:3c:81:fd:a8:48:29:ef:2e:e7:99:0a:23:9c:
                    69:41:17:72:0a:58:46:7b:f3:ac:eb:2a:00:a3:41:
                    0a:c7:ca:f5:0f:d0:fa:fb:bc:a4:c6:ca:40:30:56:
                    45:f9:a0:30:7b:2f:27:ae:b4:de:8c:24:10:58:f4:
                    f9:10:b6:35:c8:18:81:9d:bb:e7:43:94:7b:f8:9f:
                    da:41:dc:8e:85:95:a4:7e:b0:b8:60:93:43:90:ce:
                    4e:08:3c:b3:cc:4d:fd:e9:20:25:30:93:16:f9:e4:
                    49:74:e8:2a:3e:72:13:1b:e7:11:80:52:e9:54:5d:
                    a5:d0:96:ad:6e:31:35:8c:aa:56:41:5e:ed:47:81:
                    78:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:92:E9:51:B4:A1:85:26:55:49:9B:86:45:A2:14:E0:2E:7E:F9:97
            X509v3 Authority Key Identifier:
                keyid:C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3138372e3131302e38362e302f32342d3234203d3e203238363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:f1:bb:69:40:a0:e0:11:b5:e2:6f:34:e5:a7:c9:3e:89:88:
         ac:1a:44:c7:e4:b0:87:14:49:94:f4:7d:15:fd:3e:e1:be:ee:
         3a:d6:b5:cc:7f:4e:d1:dd:94:23:f7:c2:8c:74:c8:d2:d8:0f:
         99:a9:3b:ec:96:27:8a:49:bf:5a:46:13:49:4a:e6:ed:51:16:
         10:94:a9:d5:8e:9a:16:5a:46:0a:18:8d:17:c8:70:2f:6e:e5:
         8d:f4:b8:54:0f:b1:97:9f:24:1c:2e:c6:64:62:4e:b5:6f:e2:
         c5:4a:5e:55:d5:16:3a:f2:31:cb:42:c7:08:ad:02:cf:0f:df:
         8f:3e:9d:7c:3e:4e:b1:5b:cb:a1:4a:38:1f:ba:e9:14:3b:8c:
         96:a6:ee:d0:24:62:e9:d8:ec:de:22:80:cd:bb:d7:7b:e1:a6:
         19:22:94:f6:20:a8:fa:f4:97:f5:58:b5:51:a6:0d:e6:d5:af:
         a9:00:51:f9:e8:9b:b6:65:bb:42:db:a5:bf:03:e4:eb:a5:f9:
         36:f3:ed:ca:b5:dc:92:ac:f5:0a:cc:22:8f:54:17:65:97:a8:
         d3:f8:87:46:8a:bb:f9:00:22:c4:da:cd:12:8c:72:02:ff:53:
         47:a6:07:1c:8d:60:d0:16:c4:0a:73:4b:c4:18:b4:5f:5b:93:
         25:88:64:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:31:48 2025 by rpki-client