Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230302e3233372e3135362e302f32342d3234203d3e203238363234.roa
File:                     3230302e3233372e3135362e302f32342d3234203d3e203238363234.roa (raw, json)
Hash identifier:          zYLuZuizUqnKKQj50yuLyNSOt2Ixx0MBbAy3MJYv5bY=
Subject key identifier:   06:67:15:61:F5:46:A1:AC:FA:E5:22:3D:80:B5:E7:7F:C1:D0:FB:37
Certificate issuer:       /CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
Certificate serial:       76C5D0D20BD0AF586B78D3CD5B3F7FB3F87CFD8D
Authority key identifier: C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230302e3233372e3135362e302f32342d3234203d3e203238363234.roa
Signing time:             Thu 30 Oct 2025 02:45:08 +0000
ROA not before:           Thu 30 Oct 2025 02:40:08 +0000
ROA not after:            Thu 29 Oct 2026 02:45:08 +0000
asID:                     28624
IP address blocks:        200.237.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl
                          rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 23:38:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:c5:d0:d2:0b:d0:af:58:6b:78:d3:cd:5b:3f:7f:b3:f8:7c:fd:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
        Validity
            Not Before: Oct 30 02:40:08 2025 GMT
            Not After : Oct 29 02:45:08 2026 GMT
        Subject: CN=06671561F546A1ACFAE5223D80B5E77FC1D0FB37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1f:37:e1:79:c3:fa:f0:8a:ce:da:d4:e4:8e:
                    f0:6d:3a:ce:6b:32:19:03:98:0d:5d:77:b3:98:3b:
                    bf:92:a9:74:05:48:81:41:05:41:e3:4b:43:0d:9d:
                    78:8f:24:52:bb:0d:77:a0:8b:09:a9:08:7f:26:c8:
                    0d:ef:d3:fb:31:61:90:42:ee:70:07:32:63:0a:69:
                    e3:36:4e:20:5c:26:44:62:3f:c0:91:ef:a2:63:4c:
                    7a:0f:ab:89:c3:38:d3:3f:85:b7:90:5f:44:53:36:
                    59:a5:e8:ac:76:90:af:ab:79:06:27:92:81:d0:47:
                    f7:01:57:82:30:95:e8:cc:84:f1:5e:34:20:70:4a:
                    1c:c7:fa:0e:0b:f3:99:c1:a8:99:53:6e:24:c8:06:
                    60:31:b2:50:02:e1:10:15:4b:e5:aa:96:8b:2a:19:
                    dd:de:5f:76:43:d5:47:28:a1:06:cb:1a:88:84:be:
                    a7:f9:97:13:0a:f2:f1:2f:84:a3:b9:5a:a8:d5:b7:
                    79:2a:5d:30:c6:e1:53:5d:8a:e8:45:e9:78:18:5e:
                    9c:b2:fd:00:ec:68:a3:21:04:28:1b:35:b9:be:2d:
                    4f:8c:d8:9c:f6:d5:f4:d4:e9:95:2d:30:cc:87:d7:
                    79:27:f5:7a:92:98:c4:32:c8:00:49:75:9c:76:f4:
                    e9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:67:15:61:F5:46:A1:AC:FA:E5:22:3D:80:B5:E7:7F:C1:D0:FB:37
            X509v3 Authority Key Identifier:
                keyid:C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230302e3233372e3135362e302f32342d3234203d3e203238363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.237.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:c5:df:29:bc:d8:3d:c3:96:77:73:b1:15:5e:f2:96:3a:0b:
         51:24:c3:b4:9f:fe:3f:a3:60:8c:79:55:4a:c2:02:e0:77:20:
         ed:37:81:05:65:56:37:b8:2a:fb:c5:5d:cb:91:23:f9:1f:eb:
         03:55:65:a0:68:c2:65:04:90:db:ea:ff:95:35:fe:f0:7f:ea:
         ff:31:07:a4:60:df:13:8f:db:b7:39:75:da:a8:5b:e4:ed:5d:
         b3:11:67:c7:bd:1e:62:40:ec:4d:93:8d:1e:4a:56:d8:c8:4c:
         fc:40:ee:8a:39:c8:f8:b3:73:35:f2:3f:38:5d:53:70:a2:8f:
         85:79:1c:c6:cf:4a:00:9d:34:09:a0:63:86:8b:02:aa:a4:ad:
         33:ab:76:3f:7b:29:2d:ec:0d:25:5c:59:73:00:7f:61:54:03:
         ea:d8:4f:c0:ee:1e:79:c8:8b:b5:05:5f:81:80:c4:3d:b5:95:
         cc:31:8a:5d:b4:79:07:a3:2b:10:e7:d0:63:42:c5:09:f6:e6:
         cd:77:19:71:92:22:a1:3e:6b:5b:60:88:93:eb:e3:6b:97:d3:
         f5:54:f2:d3:61:f7:2b:9c:c7:aa:14:f5:cc:91:5b:9c:4a:0d:
         7a:12:32:2b:0e:c0:83:f0:c6:c7:a7:bf:da:a6:5a:14:6f:26:
         c0:d2:53:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:31:44 2025 by rpki-client