Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3138372e3131302e39312e302f32342d3234203d3e203238363234.roa
File:                     3138372e3131302e39312e302f32342d3234203d3e203238363234.roa (raw, json)
Hash identifier:          6gYaVzpHg98vqumnTnOEffN36WZ3JpzKLZE+5VC9H/I=
Subject key identifier:   2F:83:A1:07:8F:B1:5D:EF:6F:58:BA:FC:AC:5E:08:19:52:84:CC:CF
Certificate issuer:       /CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
Certificate serial:       6370616576D5ED0A6604F846A1377D0256D23738
Authority key identifier: C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3138372e3131302e39312e302f32342d3234203d3e203238363234.roa
Signing time:             Thu 30 Oct 2025 02:45:07 +0000
ROA not before:           Thu 30 Oct 2025 02:40:07 +0000
ROA not after:            Thu 29 Oct 2026 02:45:07 +0000
asID:                     28624
IP address blocks:        187.110.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl
                          rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 23:38:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:70:61:65:76:d5:ed:0a:66:04:f8:46:a1:37:7d:02:56:d2:37:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
        Validity
            Not Before: Oct 30 02:40:07 2025 GMT
            Not After : Oct 29 02:45:07 2026 GMT
        Subject: CN=2F83A1078FB15DEF6F58BAFCAC5E08195284CCCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:7c:72:80:45:64:5a:eb:88:b5:dc:61:13:1b:
                    72:d1:d5:e1:af:d3:17:07:c3:d7:a7:15:44:cf:2a:
                    ec:fb:6f:fc:ff:49:fc:0c:e0:22:8e:c9:3a:c7:f3:
                    1d:d8:23:56:26:22:3a:18:39:21:6e:bd:66:8a:f1:
                    c5:b2:52:1c:9b:2d:ee:81:70:dc:51:72:26:d2:d3:
                    31:5e:c8:06:28:0a:8b:03:e9:7f:30:fb:6a:a2:4a:
                    39:96:d5:fd:13:29:0f:63:6d:1c:87:a0:7b:45:45:
                    6c:ab:fa:3d:ea:73:c5:aa:8b:84:1e:7c:20:19:89:
                    5e:aa:0b:a2:84:94:7d:67:b8:84:bb:02:ba:e1:fd:
                    b8:fd:e0:8d:10:34:75:41:5c:db:89:3e:ac:18:02:
                    b5:f6:53:bb:17:26:f3:00:5c:04:6a:f0:ad:5b:e2:
                    3e:3d:ad:7e:f9:0d:76:9e:f8:a7:9a:e2:35:af:51:
                    36:a1:54:7f:d3:27:07:53:a2:98:ff:4e:78:bf:65:
                    71:33:00:24:f2:54:d0:6c:0f:3c:6e:65:38:9c:8f:
                    cc:91:60:d6:6a:e5:6d:f2:95:94:2d:e0:22:10:f7:
                    03:24:6d:e7:a3:89:14:23:a3:37:bd:15:77:33:c8:
                    fe:9d:c5:e2:bd:b9:c0:a6:63:ed:12:f3:a9:60:9b:
                    7b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:83:A1:07:8F:B1:5D:EF:6F:58:BA:FC:AC:5E:08:19:52:84:CC:CF
            X509v3 Authority Key Identifier:
                keyid:C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3138372e3131302e39312e302f32342d3234203d3e203238363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:15:65:d8:f2:88:f7:e7:a7:7a:2b:23:39:34:2f:fc:ec:08:
         91:6b:e6:03:30:cf:53:d9:84:3f:39:3e:b4:0f:55:56:d7:74:
         1e:6a:e7:10:41:64:0b:96:5c:46:09:35:a2:2a:e8:61:e8:2c:
         3b:71:47:78:be:38:9d:dc:28:23:2a:9c:a3:08:cb:c4:9f:5d:
         09:82:c1:e8:ce:8f:0e:7b:c7:a7:aa:18:63:5f:b1:d3:2a:da:
         fc:81:0e:9f:15:40:77:4f:88:6d:a8:95:bf:f5:50:76:04:ef:
         0c:91:05:76:c6:f5:95:7d:2c:7f:d5:0b:68:41:c1:fb:e2:23:
         88:ea:50:2b:49:1e:e4:6f:4d:f6:bd:85:31:8e:d7:6f:22:a1:
         d2:a2:36:36:75:f5:db:a7:dd:06:12:58:b7:55:28:46:44:cd:
         56:ba:69:c8:d9:c7:76:91:1b:b1:e4:55:3a:fe:98:1e:3e:fd:
         67:99:f2:fc:28:c7:14:e8:94:f4:15:06:67:5d:a5:d7:dc:13:
         7c:ab:0c:82:92:94:98:1c:7d:3a:fb:b4:ec:40:47:41:de:1e:
         69:6b:38:59:01:ed:64:ff:fd:7e:c8:d4:11:1d:b7:f5:f6:ab:
         31:92:7c:e3:a4:15:65:fb:28:8a:ff:de:ad:35:43:04:53:80:
         df:af:b6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:31:47 2025 by rpki-client