Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230302e3233372e3133312e302f32342d3234203d3e203238363234.roa
File:                     3230302e3233372e3133312e302f32342d3234203d3e203238363234.roa (raw, json)
Hash identifier:          f47NknihffUC47HgyToC537fZVN6FBOcB4BcEoqhA9o=
Subject key identifier:   9D:2C:9C:0C:9D:42:79:66:C2:D5:D2:B1:0C:74:63:FA:FE:38:16:EB
Certificate issuer:       /CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
Certificate serial:       21A0312C0868AD32D5B716686B69F9046A545C0A
Authority key identifier: C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230302e3233372e3133312e302f32342d3234203d3e203238363234.roa
Signing time:             Thu 30 Oct 2025 02:45:17 +0000
ROA not before:           Thu 30 Oct 2025 02:40:17 +0000
ROA not after:            Thu 29 Oct 2026 02:45:17 +0000
asID:                     28624
IP address blocks:        200.237.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl
                          rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 23:38:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:a0:31:2c:08:68:ad:32:d5:b7:16:68:6b:69:f9:04:6a:54:5c:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
        Validity
            Not Before: Oct 30 02:40:17 2025 GMT
            Not After : Oct 29 02:45:17 2026 GMT
        Subject: CN=9D2C9C0C9D427966C2D5D2B10C7463FAFE3816EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9e:c1:d1:f9:3c:dc:60:39:ce:c1:58:42:0e:
                    17:ff:bf:9e:d0:ca:78:63:54:a4:d7:e7:99:28:46:
                    e4:92:de:b8:88:83:a9:2a:10:29:f8:a8:15:90:7b:
                    38:89:3b:d4:f5:be:d7:a1:99:2f:68:02:55:0d:7c:
                    d6:a7:87:33:a4:58:cc:5e:23:7d:05:f2:a9:77:7f:
                    02:80:ba:35:2e:71:21:6d:84:3b:2b:1e:49:23:81:
                    8e:b4:c6:87:3d:b0:ef:d9:9a:79:88:21:c1:5a:42:
                    46:29:21:43:63:0b:1e:de:fc:f8:cf:5d:af:54:6a:
                    4a:f5:c6:82:a9:2f:27:1c:91:58:8d:cb:0c:ed:0b:
                    42:70:51:aa:97:a6:64:c4:54:75:6c:93:2e:95:19:
                    f5:fc:51:83:83:a7:71:0e:b2:35:21:5d:83:47:1f:
                    a3:bf:5c:f6:b2:5c:42:c3:79:08:8a:ce:d6:68:26:
                    a1:b5:b4:25:3e:96:fe:72:71:b0:17:5b:e8:4b:2f:
                    cc:3c:bd:0e:95:c5:22:61:e9:cd:8d:4d:f0:5b:e8:
                    18:36:fe:63:5d:11:89:03:c6:e7:0f:c3:8f:94:f2:
                    65:cc:c0:89:a3:53:13:2d:5d:b8:b4:1d:49:f9:3f:
                    8a:98:20:af:5e:96:3b:2c:67:97:5c:63:25:b8:8b:
                    20:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:2C:9C:0C:9D:42:79:66:C2:D5:D2:B1:0C:74:63:FA:FE:38:16:EB
            X509v3 Authority Key Identifier:
                keyid:C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230302e3233372e3133312e302f32342d3234203d3e203238363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.237.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:5b:09:5b:a3:9c:fa:50:8a:18:5a:f8:bc:4c:7d:14:59:7c:
         cf:56:34:86:2c:5a:68:6e:31:d0:c9:dd:e5:6c:4a:9b:a2:a1:
         90:0e:6d:9f:7d:18:4a:a4:9c:e5:97:50:2a:be:d7:c5:10:71:
         12:2d:83:ad:c9:eb:ee:d7:3b:0c:15:8e:92:7c:ca:5a:a0:2b:
         f3:53:d1:1f:b6:fd:a4:0f:79:c3:89:c4:b9:eb:fe:4a:59:6f:
         9f:22:90:7b:28:99:21:d5:45:d8:34:bd:82:cd:e7:86:c2:3e:
         30:05:3a:38:88:c7:58:b4:b4:b1:ba:cf:fd:00:0c:a6:56:4b:
         06:46:04:ba:06:40:bf:5a:66:fe:21:4f:15:3e:5d:b3:1f:b2:
         f3:ee:e2:74:12:4c:be:1b:fb:b5:49:b3:36:37:f7:24:ea:40:
         b3:21:6a:f8:dc:94:80:2c:45:eb:8e:f2:a7:0f:e8:3d:b9:9c:
         b5:77:b2:62:e9:13:e6:21:eb:ca:dd:71:9a:fb:a2:60:b9:12:
         d2:b5:b1:0e:cd:36:b1:28:30:89:54:55:b2:43:3b:b3:54:5f:
         ca:8a:d0:f0:bc:90:f3:dd:67:f6:15:c4:12:d6:23:f2:08:34:
         92:77:96:b3:39:94:5e:eb:a1:7e:65:43:05:05:48:84:c6:7c:
         9e:af:95:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:31:45 2025 by rpki-client