Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230302e3233372e3134372e302f32342d3234203d3e203238363234.roa
File:                     3230302e3233372e3134372e302f32342d3234203d3e203238363234.roa (raw, json)
Hash identifier:          2+REnyUxmLl/ViAqxDpYu5o1PvRKIvzMQx3ws//DzVw=
Subject key identifier:   7D:EA:74:35:97:AD:3B:15:25:A6:70:F1:FC:F9:B7:11:67:64:22:58
Certificate issuer:       /CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
Certificate serial:       3CD3B1F2C482DE2C862B80CE3CA9408317E0ECDB
Authority key identifier: C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230302e3233372e3134372e302f32342d3234203d3e203238363234.roa
Signing time:             Thu 30 Oct 2025 02:45:30 +0000
ROA not before:           Thu 30 Oct 2025 02:40:30 +0000
ROA not after:            Thu 29 Oct 2026 02:45:30 +0000
asID:                     28624
IP address blocks:        200.237.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl
                          rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 23:38:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:d3:b1:f2:c4:82:de:2c:86:2b:80:ce:3c:a9:40:83:17:e0:ec:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
        Validity
            Not Before: Oct 30 02:40:30 2025 GMT
            Not After : Oct 29 02:45:30 2026 GMT
        Subject: CN=7DEA743597AD3B1525A670F1FCF9B71167642258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:34:84:9f:09:78:ea:cd:82:bb:03:02:14:1f:
                    eb:48:53:b2:ce:5b:e8:96:f8:24:65:78:f7:61:4c:
                    d1:30:1f:0c:45:83:b6:89:bc:31:51:2b:08:11:5b:
                    4e:f2:d8:19:51:66:85:f5:37:f4:99:f2:1a:52:50:
                    bc:fd:36:b5:8d:14:b3:23:a2:46:fb:ec:88:f3:88:
                    53:b2:2a:8e:5f:c2:6b:fa:c7:21:1b:2d:06:07:27:
                    78:59:52:37:fc:1f:a2:8d:10:12:86:fe:3a:15:cf:
                    c9:a9:fd:aa:5d:13:b4:79:70:93:ea:18:aa:24:4c:
                    06:3f:b4:d8:56:e0:fd:3a:b3:2d:53:ce:27:d3:47:
                    e8:a1:df:87:3d:26:11:a8:22:b3:eb:9b:b2:7a:14:
                    11:ae:84:49:c5:22:45:86:41:b5:d3:fc:78:00:05:
                    ff:d7:7c:e7:db:c5:a8:6c:fb:40:29:32:35:21:27:
                    49:d5:14:1b:21:9f:76:53:de:fa:8a:f6:89:5d:e9:
                    bf:0b:be:4c:41:ed:01:bb:6a:6f:ae:2e:0a:b9:15:
                    df:f1:2d:fe:0b:bc:74:59:4f:48:ea:49:a7:f9:a2:
                    8e:b9:71:09:7f:33:ec:b4:d3:11:e4:82:46:d4:58:
                    c5:4a:28:5b:4d:69:50:b2:07:9a:f5:69:24:53:01:
                    e0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:EA:74:35:97:AD:3B:15:25:A6:70:F1:FC:F9:B7:11:67:64:22:58
            X509v3 Authority Key Identifier:
                keyid:C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230302e3233372e3134372e302f32342d3234203d3e203238363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.237.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:62:57:43:34:23:79:3c:b7:6b:5f:a1:6c:e9:14:a9:39:51:
         d5:e7:5b:63:dc:f6:e4:33:44:9a:2c:dd:39:f7:40:34:c1:56:
         00:57:3c:85:a9:f2:ae:6e:f3:0a:15:81:9a:aa:2d:67:15:8f:
         64:a3:cc:1c:39:32:29:13:75:f2:1f:45:0b:28:9f:87:51:85:
         9a:c1:e6:dc:c8:b6:74:98:a4:79:a3:95:7e:11:57:2f:81:60:
         36:c7:58:9f:c8:1d:2d:43:14:b3:bf:e5:4b:c2:c8:97:44:25:
         de:ba:1e:ed:d1:d0:46:15:18:48:ed:05:57:6b:59:31:63:9e:
         85:54:e7:64:ef:da:d0:15:cb:70:e8:75:78:94:38:17:6a:97:
         b4:90:1b:43:b7:05:a6:3c:ce:63:58:4d:8a:57:17:85:10:ba:
         16:b6:15:6e:6d:ab:4d:57:ec:c7:eb:83:f1:08:b0:37:73:4f:
         58:d1:8b:51:55:b4:83:2f:58:81:a7:e4:bb:08:ce:cf:87:68:
         1d:8b:62:6d:85:f6:7b:a2:e8:a0:c6:2e:26:e6:57:be:0a:11:
         8c:8f:b4:eb:a8:37:ea:f4:7d:ce:94:8b:c4:ca:11:f0:14:b6:
         a4:ff:11:2f:aa:1e:0f:4c:4d:37:cd:79:73:a6:b9:2c:53:77:
         cf:c1:fe:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:31:44 2025 by rpki-client