Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230312e33332e33352e302f32342d3234203d3e203238363234.roa
File:                     3230312e33332e33352e302f32342d3234203d3e203238363234.roa (raw, json)
Hash identifier:          nzZzcLw2Pl0Oj5SAn+WQYEud09XM30zWkvFOfE+ri9M=
Subject key identifier:   88:3E:4D:26:96:BA:4A:A4:6B:ED:33:FB:15:BD:86:4A:E2:69:6C:4C
Certificate issuer:       /CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
Certificate serial:       09162603568654C5F8E4D41494EFFFFB03277DCE
Authority key identifier: C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230312e33332e33352e302f32342d3234203d3e203238363234.roa
Signing time:             Thu 30 Oct 2025 02:45:21 +0000
ROA not before:           Thu 30 Oct 2025 02:40:21 +0000
ROA not after:            Thu 29 Oct 2026 02:45:21 +0000
asID:                     28624
IP address blocks:        201.33.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl
                          rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 23:38:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:16:26:03:56:86:54:c5:f8:e4:d4:14:94:ef:ff:fb:03:27:7d:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
        Validity
            Not Before: Oct 30 02:40:21 2025 GMT
            Not After : Oct 29 02:45:21 2026 GMT
        Subject: CN=883E4D2696BA4AA46BED33FB15BD864AE2696C4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:85:04:fd:08:e0:19:97:7c:25:ee:aa:b0:e7:
                    b0:8b:ed:17:36:89:8f:9f:95:5e:97:1c:4f:69:7f:
                    c0:3f:6a:1f:9b:4b:8a:dc:81:ac:32:d5:1f:6a:70:
                    18:b0:4e:ab:11:27:fe:a3:20:6c:3a:de:03:38:b6:
                    bf:fe:9b:f5:31:7d:33:39:9b:d4:db:13:e6:2e:02:
                    48:f8:e6:0d:ad:2e:1b:04:12:46:8d:85:08:f2:68:
                    d6:b3:86:c2:4f:38:66:bc:54:cf:01:cd:8d:21:9c:
                    81:73:b7:63:73:6f:36:6b:1a:51:3c:13:0b:45:1a:
                    b6:25:cc:cc:ea:80:62:b0:98:e7:d2:86:68:2b:5a:
                    67:51:68:ee:af:65:b7:94:28:35:fd:c1:6f:bb:dd:
                    7a:49:26:28:ef:37:9f:5c:d2:24:c8:df:b7:3b:15:
                    e2:dd:d8:1f:aa:6a:f8:1d:30:ae:87:8b:49:8e:fa:
                    18:d9:34:8f:f5:de:78:8b:1f:c3:e2:51:98:3b:1f:
                    f5:f7:b7:84:1f:89:08:9a:da:04:a5:4e:c3:db:a8:
                    12:36:ef:63:26:3a:f3:af:be:19:66:e1:d5:50:22:
                    1f:d1:ec:70:76:36:b0:f3:65:74:ec:e8:78:42:d3:
                    de:9a:57:55:0a:04:ec:7a:8a:5b:86:33:21:2e:8b:
                    a6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:3E:4D:26:96:BA:4A:A4:6B:ED:33:FB:15:BD:86:4A:E2:69:6C:4C
            X509v3 Authority Key Identifier:
                keyid:C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230312e33332e33352e302f32342d3234203d3e203238363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.33.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:e9:58:e9:63:bb:08:66:f5:94:b2:4e:40:94:a4:45:25:74:
         15:ff:3d:32:63:75:33:a6:07:08:97:f1:df:41:6e:8e:4a:b6:
         9c:34:12:ca:26:fc:9e:f9:4c:4b:0a:89:3b:e1:62:4a:b0:29:
         e1:12:26:92:0f:e7:1d:35:18:2f:90:d6:f6:fd:0d:3e:7a:2b:
         6e:b4:00:56:51:8a:e6:0e:ef:61:21:75:cc:0b:66:d4:78:33:
         f4:42:0e:e9:48:18:1a:d4:a4:b7:95:64:3a:c8:e2:83:58:2d:
         23:2e:8d:38:0d:ce:4c:08:4a:30:30:e5:7a:a2:91:1a:78:ea:
         ac:b2:31:46:92:4a:be:59:d2:73:7f:6b:ec:c2:32:86:08:72:
         99:99:83:9b:bd:14:65:f8:e1:c5:ec:a6:a9:af:b0:09:51:24:
         f5:41:31:1e:a3:1b:6d:cb:25:10:c1:e6:e0:8c:3a:e4:71:66:
         41:3b:80:36:0e:b3:7c:0a:4a:d7:4f:00:e7:1e:b1:7c:40:a2:
         97:00:15:8c:55:f3:6e:e2:ec:61:73:0b:c7:46:37:68:35:da:
         0f:37:85:ec:68:e0:d4:93:73:69:37:47:ce:a6:ce:02:7c:ae:
         93:3a:3d:c2:a6:94:42:92:2b:c7:86:d5:89:3a:44:7f:95:cd:
         01:b1:75:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:27:10 2025 by rpki-client