Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3137332e302f32342d3234203d3e20323632353835.roa
File:                     3230312e35352e3137332e302f32342d3234203d3e20323632353835.roa (raw, json)
Hash identifier:          hu/CpOmimP/qU8CcwL06tQf3iZsqvbeVsazBlbWZlhU=
Subject key identifier:   00:D4:4A:08:C7:4D:42:DA:77:B0:A7:92:32:65:63:A8:0C:5C:EF:A1
Certificate issuer:       /CN=5AC853AE3F9CB62CC01BAF4379BF8072926B07A7
Certificate serial:       2E25F5144B4BE4FB4E658ECA69E3A2AD1F153426
Authority key identifier: 5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3137332e302f32342d3234203d3e20323632353835.roa
Signing time:             Thu 30 Oct 2025 19:21:43 +0000
ROA not before:           Thu 30 Oct 2025 19:16:43 +0000
ROA not after:            Thu 29 Oct 2026 19:21:43 +0000
asID:                     262585
IP address blocks:        201.55.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.crl
                          rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 22:36:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:25:f5:14:4b:4b:e4:fb:4e:65:8e:ca:69:e3:a2:ad:1f:15:34:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AC853AE3F9CB62CC01BAF4379BF8072926B07A7
        Validity
            Not Before: Oct 30 19:16:43 2025 GMT
            Not After : Oct 29 19:21:43 2026 GMT
        Subject: CN=00D44A08C74D42DA77B0A792326563A80C5CEFA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:7d:33:5f:1d:8a:75:b1:27:4c:d6:30:b1:ec:
                    90:13:42:e7:6d:ba:3d:0c:0f:b8:0b:f6:08:d4:72:
                    7d:ad:3c:76:71:09:c4:bb:1f:7c:94:b2:c5:9e:e4:
                    32:79:eb:90:ef:56:90:dc:16:db:1f:a5:a4:53:34:
                    48:3d:56:74:46:bb:7e:df:9a:f9:7a:f5:7d:69:f6:
                    c0:eb:52:be:19:ff:25:3e:cf:e5:6e:71:62:93:8c:
                    cf:88:44:cf:de:4f:62:8c:5e:37:ab:e9:3d:84:67:
                    ad:be:a5:bf:92:fc:17:66:12:b1:ab:6e:09:f1:09:
                    58:b2:f2:04:d9:e1:60:20:af:6d:14:88:8b:71:29:
                    01:2c:ea:f1:69:c5:7d:b7:31:4a:fb:25:20:7b:9a:
                    7a:c4:25:76:98:05:f4:44:20:db:c3:07:d5:ba:f9:
                    13:bb:55:0c:1d:cd:f0:3f:bd:4b:cd:3e:d0:18:5b:
                    29:ee:45:ff:c1:8f:66:a5:70:50:ae:52:2f:0d:3b:
                    a9:62:66:b3:92:e9:01:28:ef:03:7b:24:8c:25:87:
                    a4:7c:d8:4d:92:3a:20:ca:61:68:92:ef:69:8d:06:
                    a9:de:b3:8c:11:ec:bc:d2:d4:50:9a:d0:37:31:a5:
                    62:40:c2:90:6d:d4:42:3c:4d:8e:a1:11:a0:0a:75:
                    0d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:D4:4A:08:C7:4D:42:DA:77:B0:A7:92:32:65:63:A8:0C:5C:EF:A1
            X509v3 Authority Key Identifier:
                keyid:5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3137332e302f32342d3234203d3e20323632353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.55.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:b2:dc:43:b0:3a:8f:b9:d3:28:34:03:de:0f:da:61:02:5b:
         a8:87:da:36:51:54:a2:33:da:bd:9d:61:31:58:88:aa:c9:2b:
         f0:28:63:da:50:dd:4f:19:d0:2e:50:47:41:9a:c2:77:9f:a1:
         67:f0:8e:19:80:69:eb:64:33:54:52:b4:84:44:bb:33:0a:8e:
         ff:64:d2:ab:a2:1e:0e:e6:9f:cb:ff:27:d5:da:94:dd:7f:2b:
         f2:6c:86:c9:e6:b4:58:b6:69:43:cd:de:20:ee:94:9e:f2:f1:
         17:d1:3d:27:e6:d7:4c:93:f0:75:de:1a:79:2d:41:c5:a8:fb:
         7f:f8:d9:d4:4c:c8:61:d4:07:29:25:62:d5:2b:f1:2b:2c:0b:
         cf:58:04:56:c0:f0:42:01:7e:a5:65:97:54:89:2b:6b:66:0f:
         3f:d2:aa:15:fb:c9:ab:16:6b:f1:25:82:8f:c3:e2:16:95:28:
         04:c5:02:36:22:f9:7e:2c:bc:24:5f:a7:d1:2b:df:73:3b:69:
         ca:80:6c:a6:ac:c1:f5:e3:be:c3:c8:0e:35:e5:35:62:d2:fa:
         8a:bf:e9:f9:87:bc:70:7a:26:70:eb:b3:39:74:e2:61:94:e4:
         54:60:dc:a9:c3:87:03:cb:06:63:30:b9:76:bb:67:4a:b5:f0:
         5f:c9:f1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 08:23:33 2025 by rpki-client