Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3138372e3131302e39302e302f32342d3234203d3e203238363234.roa
File:                     3138372e3131302e39302e302f32342d3234203d3e203238363234.roa (raw, json)
Hash identifier:          5tFrgvbYj2fxYgEj4xetAyqN0UZZzGBkwlopmIZKcJo=
Subject key identifier:   2B:68:FA:52:96:DB:A5:B3:FB:F4:6A:76:48:EA:D5:D0:08:BD:F2:27
Certificate issuer:       /CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
Certificate serial:       63988F9409658AC2CB7BACCABAC443A10FCD6823
Authority key identifier: C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3138372e3131302e39302e302f32342d3234203d3e203238363234.roa
Signing time:             Thu 30 Oct 2025 02:45:27 +0000
ROA not before:           Thu 30 Oct 2025 02:40:27 +0000
ROA not after:            Thu 29 Oct 2026 02:45:27 +0000
asID:                     28624
IP address blocks:        187.110.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl
                          rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 23:38:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:98:8f:94:09:65:8a:c2:cb:7b:ac:ca:ba:c4:43:a1:0f:cd:68:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
        Validity
            Not Before: Oct 30 02:40:27 2025 GMT
            Not After : Oct 29 02:45:27 2026 GMT
        Subject: CN=2B68FA5296DBA5B3FBF46A7648EAD5D008BDF227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7e:a6:84:d0:76:2d:9d:b1:1a:a8:4a:60:82:
                    f1:56:a0:f9:7c:39:0b:01:d2:45:6b:bb:c2:9e:a4:
                    ab:7a:85:f7:30:6a:25:8c:10:63:5c:83:21:ba:24:
                    e0:14:ff:cd:13:30:ac:e4:68:7b:3d:7b:5c:2c:29:
                    9f:2b:d5:1a:44:28:ae:2d:5f:c9:27:c3:4d:5c:06:
                    0c:c8:c8:88:1c:51:89:9e:a0:4d:e6:12:d2:1e:43:
                    7e:c2:fd:90:0b:6d:2f:87:6c:26:91:12:ef:2a:6b:
                    9a:9a:7e:fe:2b:8c:c6:36:12:ac:1c:a4:e8:19:5f:
                    3f:fb:15:5f:67:3f:69:93:7e:b2:a2:a0:13:26:6d:
                    ec:89:ef:eb:41:18:bc:55:96:54:c3:05:3b:74:e8:
                    68:d5:b1:37:22:ee:30:20:68:89:2e:cf:84:a6:6c:
                    36:ec:57:b1:95:3a:d9:7d:d4:18:53:41:ec:3d:6e:
                    f5:8c:c3:d8:66:15:dc:e7:b4:f1:94:71:78:bd:8a:
                    fc:c1:b5:c1:34:9d:e4:61:a0:12:01:ef:2e:f3:a2:
                    82:23:b6:ce:e3:f3:cc:2f:3c:f8:9f:26:35:a9:4e:
                    cb:fe:83:51:c4:10:83:d7:a9:76:18:6f:aa:a2:05:
                    ae:09:53:c8:3c:42:fc:44:f2:79:e6:f9:27:f9:12:
                    34:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:68:FA:52:96:DB:A5:B3:FB:F4:6A:76:48:EA:D5:D0:08:BD:F2:27
            X509v3 Authority Key Identifier:
                keyid:C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3138372e3131302e39302e302f32342d3234203d3e203238363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:67:aa:74:51:7d:dc:19:65:50:64:54:ae:3f:93:9c:41:f8:
         f4:27:20:2a:8d:b7:36:16:0b:e0:87:a7:5b:b2:c1:1d:84:3b:
         ca:ea:9b:d8:d8:d1:10:f7:4a:7a:de:81:b0:cd:4a:e7:fd:09:
         27:30:70:21:eb:14:27:df:23:27:3f:d5:8a:0e:f6:6d:c2:58:
         4c:1d:e6:10:1b:ed:ac:12:0e:53:31:43:8b:44:cc:81:76:47:
         66:ee:c0:38:aa:85:67:35:ad:8d:fb:44:e8:95:0c:20:a7:d3:
         d8:dd:ce:25:4e:7e:e4:16:36:68:15:1c:67:f1:80:fe:68:94:
         f4:ff:43:0f:49:11:f3:4e:c5:61:ef:45:a1:8c:fe:63:ac:c5:
         17:40:cf:10:bf:57:e5:81:3e:3b:81:88:77:c1:dd:24:87:57:
         31:78:d2:77:b3:d7:a8:21:11:6d:b0:3b:1e:de:cf:32:b6:2c:
         42:42:07:4c:de:f4:12:09:94:1c:03:4b:44:cc:4f:97:de:6d:
         76:dd:8a:92:d8:74:7d:88:b4:75:4b:28:93:28:2d:ba:38:20:
         ec:a8:d6:bf:d7:bf:b0:93:79:ba:c9:80:ce:1e:7b:d7:0d:96:
         13:bf:9f:c3:f5:14:a0:af:8f:c8:af:92:52:9e:0a:92:47:70:
         4b:da:3d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:31:49 2025 by rpki-client