Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230312e33332e35382e302f32332d3233203d3e203238363234.roa
File:                     3230312e33332e35382e302f32332d3233203d3e203238363234.roa (raw, json)
Hash identifier:          /3CSWNmoO1HCt05nQ4RJ7sDuXnu+yEOem9OhbGJgoE4=
Subject key identifier:   5C:52:EC:9A:82:31:B4:89:BD:56:4C:3F:29:01:01:1A:24:EB:70:B0
Certificate issuer:       /CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
Certificate serial:       4E9FA259C49BEDBF97840C900B79F177BFAC89CB
Authority key identifier: C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230312e33332e35382e302f32332d3233203d3e203238363234.roa
Signing time:             Thu 30 Oct 2025 02:45:12 +0000
ROA not before:           Thu 30 Oct 2025 02:40:12 +0000
ROA not after:            Thu 29 Oct 2026 02:45:12 +0000
asID:                     28624
IP address blocks:        201.33.58.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl
                          rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 23:38:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:9f:a2:59:c4:9b:ed:bf:97:84:0c:90:0b:79:f1:77:bf:ac:89:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
        Validity
            Not Before: Oct 30 02:40:12 2025 GMT
            Not After : Oct 29 02:45:12 2026 GMT
        Subject: CN=5C52EC9A8231B489BD564C3F2901011A24EB70B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3c:5f:32:8b:77:0e:66:83:6d:1a:65:92:f2:
                    a7:ca:c0:6c:7d:ef:1c:88:dd:d8:da:20:0d:ae:c3:
                    e6:11:9e:71:98:58:90:97:1c:2f:56:c5:bb:5f:c3:
                    88:56:87:ae:43:eb:e9:68:3a:f7:94:3c:03:de:a0:
                    c3:4a:aa:1a:ba:1d:f2:97:27:05:f7:13:25:f0:25:
                    88:97:ca:95:52:d3:31:10:8d:17:11:c9:dc:42:21:
                    4c:a2:f6:6c:51:95:50:c1:47:50:60:b1:91:83:15:
                    f1:f7:ac:c1:25:7e:9e:a9:fe:bd:5a:c8:07:65:1b:
                    37:5b:c8:cf:d6:50:fd:50:ce:78:f8:16:7d:65:2c:
                    1c:3f:37:ef:7b:68:88:c2:69:ff:44:f8:2d:63:28:
                    51:51:19:df:64:7b:39:a9:91:d4:c9:68:b0:b7:65:
                    5c:7a:5a:6a:2f:92:c3:b2:18:2a:c1:29:0a:ac:c9:
                    bb:c0:02:19:45:8d:5b:5d:2c:8c:cc:7f:05:97:aa:
                    5e:72:ca:1f:fa:3a:a4:22:41:cb:ed:10:0e:df:47:
                    75:cb:f8:ae:29:42:cd:64:4b:fa:b2:fa:f9:fd:cb:
                    2e:84:86:3b:1b:77:9c:79:72:75:4e:8b:0e:d9:8a:
                    c1:79:f7:61:ee:c9:57:80:bc:e4:5b:95:7e:8b:e3:
                    96:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:52:EC:9A:82:31:B4:89:BD:56:4C:3F:29:01:01:1A:24:EB:70:B0
            X509v3 Authority Key Identifier:
                keyid:C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230312e33332e35382e302f32332d3233203d3e203238363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.33.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:af:62:60:04:35:af:b4:12:e2:05:c9:77:7d:4a:df:88:e0:
         5e:c3:bc:ee:1e:12:42:b5:ae:9e:99:4e:ea:bb:af:65:7b:e5:
         cd:16:59:aa:63:5a:30:68:58:cf:0c:5b:2d:07:cd:67:59:32:
         67:df:1f:9c:4c:29:4f:de:be:6b:af:2d:b1:8c:3c:31:f6:f6:
         04:45:d3:85:82:20:66:8f:f0:b9:08:29:9d:96:11:f1:39:10:
         54:82:e6:9c:11:00:e0:eb:c5:7e:6c:16:0d:38:11:7f:a4:8f:
         e5:84:29:7d:3b:87:3d:f2:0f:a7:30:de:58:a7:39:68:a2:95:
         95:07:8a:50:6e:fb:38:71:91:20:99:9a:44:fd:ac:dd:3a:32:
         b5:99:ba:63:f7:3f:2e:63:fc:81:90:d0:fb:f1:24:08:1a:bd:
         ce:14:1d:68:ac:ca:14:57:2b:07:bd:ca:45:0a:43:ee:42:5c:
         a6:7a:72:eb:e5:f2:84:2d:1f:71:fe:ae:91:7c:d7:a2:0a:13:
         fc:85:21:d4:e4:c1:82:a9:2a:2b:e3:57:4d:a2:d6:e0:3c:a7:
         ff:e7:86:af:df:95:d8:42:05:a3:c7:49:5f:6a:08:f3:1c:66:
         20:2b:66:b0:d4:48:da:dd:35:fe:14:a3:8a:b5:9b:f5:1c:1c:
         99:f1:31:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:27:13 2025 by rpki-client