Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230312e35342e3137352e302f32342d3234203d3e203238363234.roa
File:                     3230312e35342e3137352e302f32342d3234203d3e203238363234.roa (raw, json)
Hash identifier:          jDxVxlC/vErVDI/sfLPE/F7djTwcnoZVHlPd60wUgQU=
Subject key identifier:   D3:30:F4:74:B2:B6:67:72:AA:F1:BE:AC:3C:90:C4:7C:71:08:39:CE
Certificate issuer:       /CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
Certificate serial:       64F2A3E5080DCF3C85DB73BE95023618C0A08162
Authority key identifier: C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230312e35342e3137352e302f32342d3234203d3e203238363234.roa
Signing time:             Thu 30 Oct 2025 02:45:03 +0000
ROA not before:           Thu 30 Oct 2025 02:40:03 +0000
ROA not after:            Thu 29 Oct 2026 02:45:03 +0000
asID:                     28624
IP address blocks:        201.54.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl
                          rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 23:38:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:f2:a3:e5:08:0d:cf:3c:85:db:73:be:95:02:36:18:c0:a0:81:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
        Validity
            Not Before: Oct 30 02:40:03 2025 GMT
            Not After : Oct 29 02:45:03 2026 GMT
        Subject: CN=D330F474B2B66772AAF1BEAC3C90C47C710839CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d0:bf:21:15:68:2c:cd:9c:21:35:80:3f:3c:
                    24:fd:a9:6b:00:fe:08:fc:45:fb:de:0e:88:cb:a5:
                    65:16:4c:79:34:1d:8a:c3:9f:a9:c3:19:79:b6:51:
                    a3:54:9e:55:9a:96:f9:66:c2:cd:01:cf:3d:0d:a8:
                    a2:f8:1c:99:d7:02:c4:b2:a8:5d:1b:d8:e7:5f:e5:
                    3a:c5:5c:04:78:15:97:c6:ad:b2:3b:ea:fb:52:9f:
                    5a:83:d9:ec:3b:e5:e0:f4:38:d2:66:ba:a1:c2:71:
                    00:b3:01:5d:fb:9e:97:25:3f:be:d9:01:3f:39:4d:
                    33:dd:f9:93:bb:ab:69:1a:ae:91:23:48:f8:8d:8d:
                    9e:a9:c1:d2:1f:cd:16:08:54:ce:83:33:c8:bc:45:
                    cc:ab:71:6f:1b:78:51:fa:dd:01:7c:4d:27:4c:c2:
                    ff:02:59:2e:46:1f:93:2b:64:6c:1e:56:e1:f6:2c:
                    26:be:6d:a2:a4:44:9b:5b:83:7e:0d:fb:b6:28:86:
                    61:6c:d8:a5:a4:40:21:08:c3:82:b7:ce:43:ce:a7:
                    88:70:b2:32:b4:2c:5c:b8:8d:c4:10:0a:be:13:84:
                    a7:4d:7d:87:3e:6e:20:af:10:66:f4:95:c1:7a:85:
                    b0:13:4a:f1:b7:84:c1:f1:6f:eb:87:7f:6b:fc:b8:
                    8e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:30:F4:74:B2:B6:67:72:AA:F1:BE:AC:3C:90:C4:7C:71:08:39:CE
            X509v3 Authority Key Identifier:
                keyid:C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230312e35342e3137352e302f32342d3234203d3e203238363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.54.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:49:c7:bf:9f:5c:37:10:aa:40:3d:17:fd:3b:9f:83:46:35:
         25:42:70:26:0d:5a:3d:d3:6c:6c:56:3e:4c:a9:fb:ca:f7:ac:
         b1:97:88:e1:cf:68:1c:4b:de:4e:9c:51:61:1c:b2:01:27:e1:
         ac:d7:88:12:be:f3:a6:a8:ea:a5:fb:1d:5e:0a:f1:d2:5a:8f:
         0a:8b:77:b3:30:aa:60:23:90:67:ef:9d:db:6d:2e:22:f5:ad:
         2a:bb:55:7c:a0:32:c1:17:79:47:ba:d0:07:e3:0c:97:da:b5:
         f4:f7:d9:6e:fd:b6:ab:e8:78:f4:73:46:06:23:a6:12:9e:f0:
         fc:6a:d4:f3:23:0d:2a:57:d1:8d:9c:2c:65:94:15:ad:10:47:
         d1:42:b9:2d:e2:6f:fa:7f:45:9d:a6:74:bc:c6:a9:4c:3f:80:
         4c:ce:73:18:9e:09:ad:48:78:a6:e6:9d:6a:17:39:69:7b:d4:
         c5:50:e7:e6:21:7a:5e:5e:f8:3a:1d:be:5d:b0:0b:56:d3:ee:
         40:56:4a:9e:72:49:fc:27:82:1e:a9:13:86:1c:e6:a7:d2:73:
         de:42:fa:91:85:77:83:77:21:ed:6e:e5:81:16:f8:66:f7:17:
         5d:5f:53:4f:66:66:ea:98:5f:47:e9:9d:e3:18:16:0d:48:55:
         6f:9c:6d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:27:10 2025 by rpki-client