Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3136372e302f32342d3234203d3e20323632353835.roa
File:                     3230312e35352e3136372e302f32342d3234203d3e20323632353835.roa (raw, json)
Hash identifier:          +Kv8bkQHayuNS/kqM9eCdBqbXtLzX8bA00t36brVSUg=
Subject key identifier:   D2:0D:E8:60:C3:99:44:DE:54:8F:A2:5C:62:DA:3C:07:A1:68:EE:F1
Certificate issuer:       /CN=5AC853AE3F9CB62CC01BAF4379BF8072926B07A7
Certificate serial:       69593E1CE0EE1529D27605DF398D33B7011BB584
Authority key identifier: 5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3136372e302f32342d3234203d3e20323632353835.roa
Signing time:             Mon 03 Nov 2025 21:22:06 +0000
ROA not before:           Mon 03 Nov 2025 21:17:06 +0000
ROA not after:            Mon 02 Nov 2026 21:22:06 +0000
asID:                     262585
IP address blocks:        201.55.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.crl
                          rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 22:36:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:59:3e:1c:e0:ee:15:29:d2:76:05:df:39:8d:33:b7:01:1b:b5:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AC853AE3F9CB62CC01BAF4379BF8072926B07A7
        Validity
            Not Before: Nov  3 21:17:06 2025 GMT
            Not After : Nov  2 21:22:06 2026 GMT
        Subject: CN=D20DE860C39944DE548FA25C62DA3C07A168EEF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:96:99:f3:4e:da:38:1c:33:d8:cb:c1:05:a7:
                    cd:35:2f:9b:0f:b9:b5:84:e8:94:47:48:b0:e4:82:
                    f7:4e:24:79:b3:4c:f0:17:a6:8e:ad:2c:0e:62:81:
                    ee:78:b3:90:a1:c3:be:62:cf:3e:18:41:32:28:da:
                    00:36:95:4f:c2:48:f3:86:0b:13:be:e2:8b:62:de:
                    5e:0e:88:35:1e:15:ab:7b:ae:52:b2:bb:af:48:a0:
                    55:bf:a6:e1:0d:ce:69:a0:f4:94:46:9e:cd:e3:3a:
                    23:5e:cb:73:a4:a2:3e:96:ee:2f:a3:2a:67:55:e2:
                    d7:5e:7a:9e:51:c3:c7:d8:ee:9e:f6:e7:10:ad:79:
                    ba:57:cc:38:4a:c9:22:cd:66:66:ea:d9:ea:39:88:
                    fc:aa:3c:75:80:44:3d:c9:68:49:9f:54:7c:7c:d2:
                    77:54:ba:f9:7f:97:1f:4f:fe:c4:4d:ee:07:40:45:
                    ad:5b:9e:9e:2b:73:05:e1:aa:d6:ff:ef:94:93:50:
                    95:f4:b5:5a:8f:01:b0:8a:01:17:67:1b:81:8a:ac:
                    f5:4b:f2:13:ca:a8:b3:20:fc:ff:22:f1:b8:74:f5:
                    ba:4b:8c:4a:b5:9d:48:07:21:bb:12:1a:01:b7:51:
                    a1:57:23:26:34:1d:91:cb:73:05:00:0c:8a:5c:42:
                    23:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:0D:E8:60:C3:99:44:DE:54:8F:A2:5C:62:DA:3C:07:A1:68:EE:F1
            X509v3 Authority Key Identifier:
                keyid:5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3136372e302f32342d3234203d3e20323632353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.55.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:ef:e0:73:4c:1a:5f:f6:d1:72:02:4b:56:d9:75:b9:72:1d:
         0a:10:62:5c:c3:50:82:f8:d6:d1:3c:89:eb:a6:b7:ff:1c:80:
         4c:ae:72:54:b7:61:6f:f0:83:ca:a6:e7:dd:10:ba:6f:8c:75:
         d2:0d:3b:3e:7e:a8:69:12:77:7a:00:a6:32:32:0b:10:35:42:
         eb:c4:d0:a1:c6:9f:2e:6f:f9:07:b7:69:04:18:15:ea:60:f0:
         ab:11:c4:50:9b:1c:d0:00:28:64:ef:ad:d3:6f:f5:fb:58:74:
         8a:b4:8f:95:95:38:ef:05:aa:81:21:a1:5e:6f:0a:b0:cd:91:
         89:7e:b1:0d:f5:20:0c:67:46:fb:48:a9:ad:dd:79:44:d7:4d:
         dc:61:fe:e3:e0:48:9c:cb:31:39:8e:49:ff:82:13:8d:cd:16:
         b8:84:f4:f6:dd:41:ed:be:b8:e8:02:77:58:19:d1:90:79:72:
         8f:56:cc:3d:0f:5d:dc:e8:a1:d3:20:3f:9c:6a:b7:1a:98:65:
         24:6b:d1:31:e4:a3:3b:56:09:78:f6:96:a7:2b:50:f6:c1:86:
         6d:de:85:3a:47:da:b5:d5:2b:c4:06:9e:4a:9d:03:b6:bc:be:
         11:0f:c7:eb:9e:80:33:cc:b3:0b:cc:d2:76:ca:61:60:ed:06:
         30:4a:bf:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 02:36:57 2025 by rpki-client