Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230302e3233372e3132382e302f31392d3139203d3e203238363234.roa
File:                     3230302e3233372e3132382e302f31392d3139203d3e203238363234.roa (raw, json)
Hash identifier:          jrUkB5ro7IGyLwRQPndyCCUIP4YU53V7f9LJutWjptg=
Subject key identifier:   CC:65:6E:40:8C:08:B1:7C:6B:B5:88:9C:BD:E3:DF:DC:DA:82:74:AA
Certificate issuer:       /CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
Certificate serial:       0AC404E9A952965F037317135FF3982AD24211B7
Authority key identifier: C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230302e3233372e3132382e302f31392d3139203d3e203238363234.roa
Signing time:             Thu 30 Oct 2025 02:45:18 +0000
ROA not before:           Thu 30 Oct 2025 02:40:18 +0000
ROA not after:            Thu 29 Oct 2026 02:45:18 +0000
asID:                     28624
IP address blocks:        200.237.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl
                          rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 23:38:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:c4:04:e9:a9:52:96:5f:03:73:17:13:5f:f3:98:2a:d2:42:11:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
        Validity
            Not Before: Oct 30 02:40:18 2025 GMT
            Not After : Oct 29 02:45:18 2026 GMT
        Subject: CN=CC656E408C08B17C6BB5889CBDE3DFDCDA8274AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d2:88:93:9f:5f:19:3e:5a:f0:d1:b0:9f:2d:
                    6c:bb:81:db:29:9b:92:50:a6:07:af:81:4d:e5:42:
                    74:86:ff:21:68:d0:d6:d0:01:fc:90:cf:44:89:6d:
                    47:e1:1a:3c:a5:8a:f9:60:87:79:39:a8:9c:5b:9f:
                    bc:cb:6f:3a:bd:ee:28:a0:0c:d9:d6:0c:cb:14:9d:
                    02:3f:6b:79:0c:aa:ce:79:28:d1:eb:5c:e6:d6:b4:
                    0f:82:2c:89:bf:e6:b7:f0:23:c9:be:5a:09:62:10:
                    95:00:81:19:12:83:01:e7:37:64:63:a5:54:46:b2:
                    f1:f5:0c:86:ae:67:0e:a8:84:e0:0d:33:0d:d9:18:
                    1f:09:05:61:20:42:ed:ac:d0:9f:fc:f8:40:c2:74:
                    63:73:1b:86:8d:3d:ab:c3:47:23:4c:05:07:ff:c7:
                    cc:b5:0a:5a:ef:8a:a0:05:9c:be:ff:58:1f:59:6f:
                    dd:73:b3:47:fb:02:b2:ed:a0:d4:10:5a:ca:8c:b4:
                    74:14:1c:86:1f:f7:45:37:fe:3b:77:8f:24:1e:1f:
                    c5:72:d8:de:47:61:89:67:a0:1f:dc:58:8f:c2:d2:
                    6e:bb:a6:fb:c7:56:5b:b3:18:3b:ee:ee:e6:39:34:
                    63:3b:78:3d:2e:47:fe:9b:d2:ce:ec:8e:fa:8f:42:
                    1b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:65:6E:40:8C:08:B1:7C:6B:B5:88:9C:BD:E3:DF:DC:DA:82:74:AA
            X509v3 Authority Key Identifier:
                keyid:C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230302e3233372e3132382e302f31392d3139203d3e203238363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.237.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2a:ef:7d:bd:55:4c:87:7d:2b:9f:9a:7e:43:4b:c7:f4:52:37:
         cf:15:49:c1:70:d8:07:51:69:c6:54:54:df:35:b5:51:1c:62:
         76:51:09:24:f5:84:93:72:21:82:26:e2:a4:d3:0a:48:74:5c:
         19:d8:3f:9f:30:0b:65:c7:08:93:90:33:df:50:3a:bf:96:94:
         10:57:46:41:7f:39:a0:77:19:a5:90:79:e0:43:24:ac:3c:e2:
         f3:6b:16:e9:2e:8e:1a:25:a9:9e:18:32:8f:fd:d6:8e:89:94:
         10:c1:49:b8:b7:4f:a3:9d:19:93:27:7e:55:02:e6:21:cd:df:
         7d:22:d9:59:ec:9f:05:23:14:6d:58:af:13:3b:6f:61:8c:89:
         5e:a5:bd:19:d4:cd:3b:a7:41:4b:5c:e6:19:9b:d6:23:e3:38:
         27:b8:2e:e9:31:e0:de:a0:cb:7f:cc:8e:94:76:13:3d:03:fb:
         0f:3a:02:c0:1c:0c:0b:a2:25:77:c9:e6:09:f6:f8:03:d2:3a:
         58:ae:32:6d:9c:1c:b0:43:6f:db:8f:64:06:bb:9d:24:b4:53:
         d0:2e:0b:60:f6:c8:26:3d:c1:cd:bf:bb:97:6b:52:7f:71:a2:
         ea:ba:fd:64:c9:3b:9e:71:18:17:f7:45:46:05:f7:6f:56:0c:
         81:7c:ec:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:27:14 2025 by rpki-client