Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230302e3233372e3134302e302f32342d3234203d3e203238363234.roa
File:                     3230302e3233372e3134302e302f32342d3234203d3e203238363234.roa (raw, json)
Hash identifier:          lSHh0036dPcPZsWrWj8iH+0Sm3qtblIypr6cPRhI3XU=
Subject key identifier:   92:C9:95:40:7E:6E:AA:A2:52:21:4A:2A:AD:22:26:74:21:05:7C:59
Certificate issuer:       /CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
Certificate serial:       5455A22B5BCB0558CF71CF6FBDF61017DABBD380
Authority key identifier: C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230302e3233372e3134302e302f32342d3234203d3e203238363234.roa
Signing time:             Thu 30 Oct 2025 02:45:12 +0000
ROA not before:           Thu 30 Oct 2025 02:40:12 +0000
ROA not after:            Thu 29 Oct 2026 02:45:12 +0000
asID:                     28624
IP address blocks:        200.237.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl
                          rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 23:38:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:55:a2:2b:5b:cb:05:58:cf:71:cf:6f:bd:f6:10:17:da:bb:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
        Validity
            Not Before: Oct 30 02:40:12 2025 GMT
            Not After : Oct 29 02:45:12 2026 GMT
        Subject: CN=92C995407E6EAAA252214A2AAD22267421057C59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e9:3a:3a:af:40:89:53:d0:6a:17:10:5b:58:
                    4c:76:8c:4f:a9:c4:79:74:ff:a3:ed:c5:ce:0c:4c:
                    97:b1:86:c1:31:61:9a:94:2f:53:b7:92:e0:a9:1c:
                    2b:4b:42:6a:aa:e5:cd:1a:2a:4f:8f:00:57:8f:25:
                    30:8d:22:42:9d:fb:d6:4d:32:5b:aa:56:a1:9a:7c:
                    c1:e9:b6:14:10:40:40:d4:46:bc:0d:1e:87:0d:0a:
                    bb:ee:1a:44:79:cf:61:0f:61:fb:16:59:66:7c:e9:
                    6d:e8:fd:8c:0b:f8:9d:32:7b:66:dd:28:93:04:66:
                    25:81:87:a9:61:da:bf:53:14:71:e5:9a:97:e2:ef:
                    f7:ae:9e:6e:30:08:03:41:38:a2:97:63:76:5c:a5:
                    2a:a8:a3:65:f0:78:70:b1:5e:45:c0:f4:c2:71:ce:
                    45:0b:69:26:11:df:b1:19:b8:36:3e:b8:95:c5:9c:
                    6d:cd:07:53:1b:05:66:b0:54:73:a1:e9:a6:08:6d:
                    c0:98:1b:10:fe:3b:93:66:42:f4:dd:b5:29:0d:49:
                    59:12:94:de:6b:fa:ef:fe:77:41:7d:e0:57:40:a5:
                    11:d3:4d:87:5d:d1:75:6d:14:32:f7:95:e5:ce:2e:
                    c2:e9:79:b4:2e:01:f0:1b:cd:bb:9a:18:a4:fe:72:
                    11:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C9:95:40:7E:6E:AA:A2:52:21:4A:2A:AD:22:26:74:21:05:7C:59
            X509v3 Authority Key Identifier:
                keyid:C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230302e3233372e3134302e302f32342d3234203d3e203238363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.237.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:e2:04:a9:b6:ff:21:c6:91:64:35:8a:40:4c:68:45:a4:b9:
         3f:5a:4d:ca:dc:fc:1f:4c:c2:4c:6b:72:00:9c:76:e5:65:34:
         c6:f3:86:9a:10:56:fb:5b:17:ba:4c:65:16:68:8b:36:38:49:
         88:52:ac:f0:fb:49:e4:67:a0:94:7f:23:19:78:a9:f4:91:b2:
         32:c5:c4:e6:49:ef:3e:91:74:27:e3:c1:dd:bf:fb:6e:11:37:
         f3:19:8c:37:0c:df:ac:74:25:4f:2c:7c:aa:17:ad:c8:28:b7:
         eb:d6:5a:c1:3c:fc:1e:31:84:d9:a9:2a:d8:08:16:1d:bf:7c:
         12:bd:17:f8:a2:8f:28:1a:1f:20:68:63:ec:32:4a:87:be:3f:
         4d:a3:47:f5:8e:90:f7:82:be:ee:e9:2e:91:c9:ef:d9:d8:73:
         15:f5:00:5a:16:a8:c0:7d:1c:3f:10:d1:b0:71:13:77:77:41:
         6d:fa:04:d4:81:10:78:88:bc:97:2f:91:f1:9a:94:05:3c:e0:
         16:e9:c2:75:b2:05:be:7c:f4:3d:6a:ef:a5:5f:d6:3c:d6:c4:
         f9:12:15:b2:5f:93:dd:d2:2e:f3:20:64:0b:93:b8:37:11:c0:
         06:c9:01:99:06:d5:c2:ca:60:01:32:04:46:ee:cc:e5:1f:36:
         78:c3:75:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:31:44 2025 by rpki-client