Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230312e35342e3136362e302f32342d3234203d3e203238363234.roa
File:                     3230312e35342e3136362e302f32342d3234203d3e203238363234.roa (raw, json)
Hash identifier:          /VQIp0bHIDyk0i9IvNpGe9Kdk1cIdVChsnVNFdbxrKY=
Subject key identifier:   A5:7E:42:C7:F7:3F:D5:45:AF:BC:A7:B6:61:E9:73:BF:92:33:52:3B
Certificate issuer:       /CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
Certificate serial:       67FC9CE2859B81D3A18036353194314A3F3894DE
Authority key identifier: C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230312e35342e3136362e302f32342d3234203d3e203238363234.roa
Signing time:             Thu 30 Oct 2025 02:45:05 +0000
ROA not before:           Thu 30 Oct 2025 02:40:05 +0000
ROA not after:            Thu 29 Oct 2026 02:45:05 +0000
asID:                     28624
IP address blocks:        201.54.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl
                          rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 23:38:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:fc:9c:e2:85:9b:81:d3:a1:80:36:35:31:94:31:4a:3f:38:94:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
        Validity
            Not Before: Oct 30 02:40:05 2025 GMT
            Not After : Oct 29 02:45:05 2026 GMT
        Subject: CN=A57E42C7F73FD545AFBCA7B661E973BF9233523B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:da:9a:ec:50:5d:29:f5:45:ba:d7:dc:6e:68:
                    65:fb:78:b1:48:7b:ff:ef:23:fb:80:26:cd:93:0c:
                    f6:f7:85:ad:b6:68:c7:e0:f7:72:c4:a6:c2:3d:4a:
                    04:58:84:15:5f:a2:d0:94:da:3a:34:ba:9f:55:88:
                    f8:2b:b3:ee:8a:47:85:90:4d:34:3f:fb:18:7c:ca:
                    28:f8:d1:8c:02:c9:0d:82:a7:5b:cc:ca:2a:8a:5b:
                    f3:52:31:da:db:ff:49:08:de:0f:a8:8e:a0:bc:ca:
                    62:ed:ff:3d:6b:a8:df:b6:7f:65:d2:81:89:9d:5f:
                    32:e0:5f:25:06:7a:1f:52:1a:7d:87:6e:b1:76:7d:
                    4e:39:8f:9c:5f:cb:6c:a2:58:25:06:f8:82:ed:95:
                    a2:3f:03:f2:53:46:62:c0:c4:aa:45:b1:5c:2f:6d:
                    f6:72:b3:a4:f7:79:7d:8c:c6:c7:34:91:31:f4:be:
                    c9:98:ac:68:20:fe:20:1a:45:41:ef:0a:22:87:9d:
                    4a:c6:66:19:60:b8:b2:60:a6:8b:9a:4b:fb:26:18:
                    cb:ff:4d:41:01:b6:c9:84:85:ac:62:b5:37:f8:ab:
                    87:08:24:37:57:8a:d5:e9:42:1c:4f:e1:d2:9c:68:
                    ce:33:54:4a:71:3e:bc:93:55:e0:44:62:9a:f8:17:
                    9e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:7E:42:C7:F7:3F:D5:45:AF:BC:A7:B6:61:E9:73:BF:92:33:52:3B
            X509v3 Authority Key Identifier:
                keyid:C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230312e35342e3136362e302f32342d3234203d3e203238363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.54.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:90:fa:b8:3d:96:96:9b:e6:93:59:ba:3b:11:d8:31:a3:4b:
         e2:16:37:6f:e6:6a:63:20:b1:61:15:02:d0:32:07:7a:ae:a1:
         11:2e:88:60:40:17:a4:23:ca:69:9b:46:76:e4:9c:78:ed:6f:
         46:5c:c0:e5:11:a1:3e:8e:8a:35:5b:1c:d1:f3:80:69:ef:d3:
         d9:c1:a6:8c:46:f6:87:57:e1:4f:e9:8c:58:c2:cf:ed:8e:81:
         da:38:fc:ca:c2:b9:9d:26:a3:68:8e:dd:bf:a9:c3:ce:71:91:
         c4:be:4a:25:db:e6:fd:cb:64:1c:3b:4b:e0:7c:3e:8d:c3:8b:
         15:9c:c6:d6:ee:f2:25:dc:ae:fd:8b:41:0f:3d:c3:16:dc:09:
         6d:a0:37:4b:83:29:20:a6:dc:a5:49:d8:0d:e8:7c:5f:e1:82:
         16:8e:54:77:a0:a7:7b:2a:7f:a4:2f:da:da:7c:aa:0d:3d:36:
         fb:e3:06:b1:a3:6e:e9:3b:cf:39:e4:d6:a2:f2:63:3f:49:96:
         ea:52:20:85:f5:fc:95:fe:31:be:b4:01:b9:74:61:1e:7f:7d:
         e1:3e:39:49:e1:ae:e6:13:c0:bf:a9:ef:5b:20:74:56:9a:5c:
         23:51:1c:2e:ac:1b:5c:d3:de:62:dc:11:43:06:92:4f:ea:ac:
         c3:a2:c6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:26:58 2025 by rpki-client