Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230312e33332e35322e302f32342d3234203d3e203238363234.roa
File:                     3230312e33332e35322e302f32342d3234203d3e203238363234.roa (raw, json)
Hash identifier:          nhU/aIQs7Xt9i7sztrwejvTkXMAP5nScecxSjzKJEFs=
Subject key identifier:   AE:13:6E:12:37:90:06:3E:98:0B:26:77:60:34:55:A8:82:AD:C6:F0
Certificate issuer:       /CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
Certificate serial:       4C35A11251F7DD7EBC5FB8C793B3B8D4F5CA06B6
Authority key identifier: C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230312e33332e35322e302f32342d3234203d3e203238363234.roa
Signing time:             Thu 30 Oct 2025 02:45:21 +0000
ROA not before:           Thu 30 Oct 2025 02:40:21 +0000
ROA not after:            Thu 29 Oct 2026 02:45:21 +0000
asID:                     28624
IP address blocks:        201.33.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl
                          rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 23:38:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:35:a1:12:51:f7:dd:7e:bc:5f:b8:c7:93:b3:b8:d4:f5:ca:06:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
        Validity
            Not Before: Oct 30 02:40:21 2025 GMT
            Not After : Oct 29 02:45:21 2026 GMT
        Subject: CN=AE136E123790063E980B2677603455A882ADC6F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:14:c3:64:f6:c0:f0:b0:60:79:a7:d3:cb:67:
                    f1:24:90:2a:e8:ad:dd:f8:e6:da:dd:b9:64:a0:3d:
                    ad:1b:40:90:d5:56:e2:2c:2a:06:87:b0:f0:39:1e:
                    c5:a4:17:f6:cd:bf:c2:69:c9:4e:3f:8c:9a:0c:28:
                    1d:5a:da:b5:99:49:32:87:00:b0:ed:0d:20:dd:d3:
                    60:0f:75:45:13:ea:59:11:7c:bd:81:fd:f3:cf:57:
                    0b:b6:c0:6f:e5:51:ba:fb:0d:1c:e4:2d:88:14:aa:
                    52:43:70:e5:02:c5:5a:0d:dc:f3:c8:6e:af:07:ae:
                    19:6f:2c:d2:23:03:c0:62:aa:3b:03:cb:12:66:07:
                    50:ce:c3:8e:6e:6d:a8:f5:6f:41:52:36:16:3e:a8:
                    11:4d:9f:93:0d:22:32:be:38:41:d1:e6:1b:26:02:
                    6c:ce:01:06:3a:5a:13:b7:99:0e:a3:6b:ee:7a:17:
                    6a:76:67:30:d7:18:ea:8f:5e:a1:1e:75:cb:30:97:
                    27:d7:0c:bc:e7:80:f7:aa:b5:59:81:d7:3a:e1:ad:
                    f6:fb:ef:37:4c:e2:01:2a:fa:d1:93:84:28:1c:16:
                    e7:21:d0:32:8b:13:59:ca:f3:54:42:70:4b:1a:61:
                    ed:54:fd:cd:a6:e0:8d:c2:54:1b:13:d3:ed:cf:40:
                    d4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:13:6E:12:37:90:06:3E:98:0B:26:77:60:34:55:A8:82:AD:C6:F0
            X509v3 Authority Key Identifier:
                keyid:C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230312e33332e35322e302f32342d3234203d3e203238363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.33.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:e2:a6:c9:89:d5:a8:52:53:50:e8:be:55:a5:54:e8:c4:6c:
         c8:19:3f:ac:14:c9:45:e1:ff:13:02:4b:cf:59:f7:27:06:02:
         43:f6:df:cc:55:f6:2f:53:e8:6f:4c:8f:9f:ab:2c:2c:e8:72:
         67:ff:0e:04:ac:79:46:16:53:78:ba:13:cc:48:fa:40:b6:ed:
         42:26:58:0a:36:10:38:55:29:48:b9:d1:5f:4b:ae:c0:7f:c7:
         78:b1:c2:2a:48:9c:e3:7a:ae:40:c5:be:89:7a:a3:df:a6:2b:
         93:18:48:41:83:1f:78:fb:6c:88:4f:57:2f:6d:53:ac:fd:f7:
         1e:17:ca:83:3e:36:07:8d:0d:cf:27:d3:7b:ac:f0:74:22:4e:
         ec:a9:57:01:f2:9a:d0:60:dd:34:61:fb:f7:45:cd:bf:77:f8:
         17:5a:f5:b3:17:6a:ad:a6:e6:7d:55:64:18:24:32:ec:99:d4:
         13:cb:06:07:59:8f:97:0c:68:2e:78:a2:c4:38:7c:60:68:c7:
         1f:52:fc:71:dc:bb:68:9a:5d:2a:c0:0f:f2:ca:f5:54:18:e7:
         e6:1a:56:86:62:b0:d4:33:0f:8d:c0:c2:6b:e9:54:ae:4b:33:
         26:e6:49:70:6e:6b:95:aa:9b:9e:93:5c:a2:41:13:83:84:81:
         74:57:41:f4
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUTDWhElH33X68X7jHk7O41PXKBrYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzc5ODhBRTZBNzlFNzhERDcxMjM1MDk2RTlCQUUyRTQy
OUJBMDZDNDAeFw0yNTEwMzAwMjQwMjFaFw0yNjEwMjkwMjQ1MjFaMDMxMTAvBgNV
BAMTKEFFMTM2RTEyMzc5MDA2M0U5ODBCMjY3NzYwMzQ1NUE4ODJBREM2RjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmFMNk9sDwsGB5p9PLZ/EkkCro
rd345trduWSgPa0bQJDVVuIsKgaHsPA5HsWkF/bNv8JpyU4/jJoMKB1a2rWZSTKH
ALDtDSDd02APdUUT6lkRfL2B/fPPVwu2wG/lUbr7DRzkLYgUqlJDcOUCxVoN3PPI
bq8HrhlvLNIjA8BiqjsDyxJmB1DOw45ubaj1b0FSNhY+qBFNn5MNIjK+OEHR5hsm
AmzOAQY6WhO3mQ6ja+56F2p2ZzDXGOqPXqEedcswlyfXDLzngPeqtVmB1zrhrfb7
7zdM4gEq+tGThCgcFuch0DKLE1nK81RCcEsaYe1U/c2m4I3CVBsT0+3PQNTrAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUrhNuEjeQBj6YCyZ3YDRVqIKtxvAwHwYDVR0j
BBgwFoAUx5iK5qeeeN1xI1CW6bri5Cm6BsQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUxjNmR5OWl3d1d0MmE4VzNBcXhhN21lNDRVRzJ2b21nZ000Wm11MlF2
S3EvMC9DNzk4OEFFNkE3OUU3OERENzEyMzUwOTZFOUJBRTJFNDI5QkEwNkM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M3OTg4QUU2QTc5RTc4REQ3
MTIzNTA5NkU5QkFFMkU0MjlCQTA2QzQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVMYzZkeTlpd3dXdDJhOFczQXF4YTdtZTQ0VUcydm9tZ2dNNFptdTJRdktxLzAv
MzIzMDMxMmUzMzMzMmUzNTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODM2
MzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAMkhNDANBgkqhkiG9w0BAQsFAAOCAQEAJOKmyYnVqFJT
UOi+VaVU6MRsyBk/rBTJReH/EwJLz1n3JwYCQ/bfzFX2L1Pob0yPn6ssLOhyZ/8O
BKx5RhZTeLoTzEj6QLbtQiZYCjYQOFUpSLnRX0uuwH/HeLHCKkic43quQMW+iXqj
36YrkxhIQYMfePtsiE9XL21TrP33HhfKgz42B40NzyfTe6zwdCJO7KlXAfKa0GDd
NGH790XNv3f4F1r1sxdqrabmfVVkGCQy7JnUE8sGB1mPlwxoLniixDh8YGjHH1L8
cdy7aJpdKsAP8sr1VBjn5hpWhmKw1DMPjcDCa+lUrkszJuZJcG5rlaqbnpNcokET
g4SBdFdB9A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 05:27:10 2025 by rpki-client