Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230312e35342e3136382e302f32312d3231203d3e203238363234.roa
File:                     3230312e35342e3136382e302f32312d3231203d3e203238363234.roa (raw, json)
Hash identifier:          BYkMS6zRcmrYbelFnd7dBSvNOUPDbvfwxiMmlGKOF24=
Subject key identifier:   08:1D:7E:E3:34:6B:D4:22:F4:BB:58:C5:C8:51:C1:BC:16:D9:BC:5B
Certificate issuer:       /CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
Certificate serial:       59DF26E9FC4E6805C726A26CB7533EBF2FEA6A0E
Authority key identifier: C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230312e35342e3136382e302f32312d3231203d3e203238363234.roa
Signing time:             Thu 30 Oct 2025 02:45:03 +0000
ROA not before:           Thu 30 Oct 2025 02:40:03 +0000
ROA not after:            Thu 29 Oct 2026 02:45:03 +0000
asID:                     28624
IP address blocks:        201.54.168.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl
                          rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 23:38:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:df:26:e9:fc:4e:68:05:c7:26:a2:6c:b7:53:3e:bf:2f:ea:6a:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
        Validity
            Not Before: Oct 30 02:40:03 2025 GMT
            Not After : Oct 29 02:45:03 2026 GMT
        Subject: CN=081D7EE3346BD422F4BB58C5C851C1BC16D9BC5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6d:a6:36:a9:34:57:9b:d3:57:60:a2:20:b7:
                    92:9f:fd:33:25:e8:91:c9:63:c1:d9:80:70:c9:56:
                    09:6b:f6:84:57:88:7c:3a:5a:90:60:b6:f2:17:06:
                    30:3a:81:de:3d:ab:87:f0:a2:0b:01:24:05:7c:07:
                    04:c0:40:6b:7c:74:03:e6:bc:e2:05:f4:91:cd:e8:
                    ed:09:4d:77:b7:d8:9a:7f:73:de:f2:64:d7:0e:fb:
                    c9:20:72:33:60:66:b2:e0:f1:d1:c4:76:97:08:48:
                    f8:f6:95:dd:5f:e1:a1:04:1b:9f:c2:e5:d8:e6:0d:
                    d8:49:ea:ff:09:3c:26:75:dc:c0:94:7b:70:3b:dc:
                    9f:bd:52:7a:92:5c:e3:e3:e5:09:0c:08:80:37:96:
                    06:e5:fd:cc:44:fd:c1:46:63:67:a1:c5:35:87:ef:
                    b0:4c:37:61:09:73:02:6e:65:d4:4f:e7:54:d2:f8:
                    b2:af:93:4e:57:d4:c0:25:c8:86:83:f9:c7:70:49:
                    cd:2e:76:19:74:b0:bf:12:09:11:ce:26:fd:3f:f8:
                    fe:c9:93:85:4b:e7:9c:38:9c:ec:19:85:d9:be:5a:
                    3d:fd:8f:ee:e5:ea:f4:d3:af:f5:09:42:7a:e2:3d:
                    a3:07:38:f4:d9:50:34:76:d0:30:e4:10:6e:cd:43:
                    0c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:1D:7E:E3:34:6B:D4:22:F4:BB:58:C5:C8:51:C1:BC:16:D9:BC:5B
            X509v3 Authority Key Identifier:
                keyid:C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230312e35342e3136382e302f32312d3231203d3e203238363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.54.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         26:1f:a1:51:a9:c5:6a:5d:a0:dc:24:76:b4:eb:a8:ae:81:4a:
         7e:32:02:13:bd:a0:a2:d6:f3:d7:ad:53:84:57:73:5b:3d:08:
         b6:8b:a7:56:6e:9e:e4:fa:90:83:da:7a:4c:67:71:c4:b4:17:
         fa:cf:a6:43:14:19:0d:f1:77:07:09:df:fa:d9:12:b8:ec:72:
         43:92:4e:93:0b:2b:bc:58:58:57:38:6a:63:21:ca:13:49:70:
         86:c7:b8:0a:f2:ba:d5:da:70:a6:e1:1a:4a:8e:9e:23:bc:22:
         6e:da:4b:a8:64:e2:3f:25:a0:42:12:09:4c:fd:0b:4e:04:82:
         07:ef:8c:20:5b:0a:51:33:21:6e:36:e2:7b:6a:6c:fb:71:26:
         1c:b0:f9:82:81:3f:ec:c8:72:34:22:38:36:ba:06:88:95:d3:
         7f:94:a5:42:4a:09:58:61:82:fb:30:88:5a:19:26:ac:da:c2:
         29:c7:69:45:22:79:63:ee:ae:bc:0d:f9:da:55:60:ae:74:1f:
         48:0b:af:45:e9:79:69:52:b8:74:90:89:7d:ab:0d:1b:15:c8:
         85:27:02:88:bc:0c:c0:df:aa:da:f9:bd:a0:c4:ff:a8:c2:49:
         82:08:9b:4b:2a:6c:29:12:e7:a2:9b:46:a2:65:e8:5f:d6:c7:
         2a:7a:4b:21
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUWd8m6fxOaAXHJqJst1M+vy/qag4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzc5ODhBRTZBNzlFNzhERDcxMjM1MDk2RTlCQUUyRTQy
OUJBMDZDNDAeFw0yNTEwMzAwMjQwMDNaFw0yNjEwMjkwMjQ1MDNaMDMxMTAvBgNV
BAMTKDA4MUQ3RUUzMzQ2QkQ0MjJGNEJCNThDNUM4NTFDMUJDMTZEOUJDNUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtbaY2qTRXm9NXYKIgt5Kf/TMl
6JHJY8HZgHDJVglr9oRXiHw6WpBgtvIXBjA6gd49q4fwogsBJAV8BwTAQGt8dAPm
vOIF9JHN6O0JTXe32Jp/c97yZNcO+8kgcjNgZrLg8dHEdpcISPj2ld1f4aEEG5/C
5djmDdhJ6v8JPCZ13MCUe3A73J+9UnqSXOPj5QkMCIA3lgbl/cxE/cFGY2ehxTWH
77BMN2EJcwJuZdRP51TS+LKvk05X1MAlyIaD+cdwSc0udhl0sL8SCRHOJv0/+P7J
k4VL55w4nOwZhdm+Wj39j+7l6vTTr/UJQnriPaMHOPTZUDR20DDkEG7NQwyPAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUCB1+4zRr1CL0u1jFyFHBvBbZvFswHwYDVR0j
BBgwFoAUx5iK5qeeeN1xI1CW6bri5Cm6BsQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUxjNmR5OWl3d1d0MmE4VzNBcXhhN21lNDRVRzJ2b21nZ000Wm11MlF2
S3EvMC9DNzk4OEFFNkE3OUU3OERENzEyMzUwOTZFOUJBRTJFNDI5QkEwNkM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M3OTg4QUU2QTc5RTc4REQ3
MTIzNTA5NkU5QkFFMkU0MjlCQTA2QzQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVMYzZkeTlpd3dXdDJhOFczQXF4YTdtZTQ0VUcydm9tZ2dNNFptdTJRdktxLzAv
MzIzMDMxMmUzNTM0MmUzMTM2MzgyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM4
MzYzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDyTaoMA0GCSqGSIb3DQEBCwUAA4IBAQAmH6FRqcVq
XaDcJHa066iugUp+MgITvaCi1vPXrVOEV3NbPQi2i6dWbp7k+pCD2npMZ3HEtBf6
z6ZDFBkN8XcHCd/62RK47HJDkk6TCyu8WFhXOGpjIcoTSXCGx7gK8rrV2nCm4RpK
jp4jvCJu2kuoZOI/JaBCEglM/QtOBIIH74wgWwpRMyFuNuJ7amz7cSYcsPmCgT/s
yHI0Ijg2ugaIldN/lKVCSglYYYL7MIhaGSas2sIpx2lFInlj7q68DfnaVWCudB9I
C69F6XlpUrh0kIl9qw0bFciFJwKIvAzA36ra+b2gxP+owkmCCJtLKmwpEueim0ai
Zehf1scqeksh
-----END CERTIFICATE-----
Generated at Tue Nov 4 05:27:00 2025 by rpki-client