Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3136342e302f32342d3234203d3e20323632353835.roa
File:                     3230312e35352e3136342e302f32342d3234203d3e20323632353835.roa (raw, json)
Hash identifier:          Vf9Q9CIXgmaZPRXJXLjnP3znid7yI7WnK1mDY9GWntY=
Subject key identifier:   2B:64:CC:C3:86:C6:2C:00:1D:E2:8D:A3:04:E7:EC:C7:E7:FB:EA:ED
Certificate issuer:       /CN=5AC853AE3F9CB62CC01BAF4379BF8072926B07A7
Certificate serial:       255CBA58EF05EF552B2B8F39B349C00FF9B1086F
Authority key identifier: 5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3136342e302f32342d3234203d3e20323632353835.roa
Signing time:             Thu 16 Oct 2025 16:05:04 +0000
ROA not before:           Thu 16 Oct 2025 16:00:04 +0000
ROA not after:            Thu 15 Oct 2026 16:05:04 +0000
asID:                     262585
IP address blocks:        201.55.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.crl
                          rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:5c:ba:58:ef:05:ef:55:2b:2b:8f:39:b3:49:c0:0f:f9:b1:08:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AC853AE3F9CB62CC01BAF4379BF8072926B07A7
        Validity
            Not Before: Oct 16 16:00:04 2025 GMT
            Not After : Oct 15 16:05:04 2026 GMT
        Subject: CN=2B64CCC386C62C001DE28DA304E7ECC7E7FBEAED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f2:c1:b0:ad:40:f7:2b:55:09:b8:6e:0f:10:
                    4c:57:b2:98:f0:c6:f3:47:c9:ed:25:ea:d8:f1:34:
                    5d:36:4a:61:15:b1:ef:77:17:a1:aa:e0:42:c0:c1:
                    8f:48:ce:93:f8:a6:a6:6f:8e:75:ec:8c:59:e6:0a:
                    7b:4e:4e:1b:8a:9d:9b:38:7b:39:4b:ed:39:21:2b:
                    c1:18:e6:3b:16:f4:0d:26:1f:07:7f:82:41:17:6b:
                    f3:88:ac:ca:9b:79:ff:47:b4:69:0f:47:7c:b2:b9:
                    75:16:5b:fb:54:76:83:4a:33:12:86:31:3d:6d:73:
                    1c:5c:02:e3:01:58:7b:90:16:13:7e:a4:ab:97:52:
                    4c:ae:dc:37:15:d5:3f:21:21:d7:eb:87:67:3e:d6:
                    a0:34:73:46:7e:e9:47:5d:7c:a0:94:73:cd:f5:94:
                    dc:00:7f:9a:b3:18:94:94:d1:7e:79:5b:5c:ae:4e:
                    16:ba:73:78:17:7e:85:f8:f2:30:47:d9:35:01:78:
                    21:0a:b8:df:3d:22:be:e4:a9:ac:cf:2b:66:a7:8d:
                    d8:30:89:0d:00:ff:e9:5f:24:4e:56:75:79:f1:01:
                    d8:b7:b9:e2:36:2e:c3:1b:0b:b4:fd:cf:fd:ee:35:
                    70:8e:ab:fb:80:dc:71:07:24:07:14:a2:51:ae:5f:
                    1b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:64:CC:C3:86:C6:2C:00:1D:E2:8D:A3:04:E7:EC:C7:E7:FB:EA:ED
            X509v3 Authority Key Identifier:
                keyid:5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3136342e302f32342d3234203d3e20323632353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.55.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:0a:d0:66:eb:dd:65:e3:aa:90:be:62:4b:c0:69:9c:15:a0:
         57:a4:3e:68:a7:12:36:e3:b8:46:1f:cb:ef:77:3c:b7:b2:c1:
         e5:4e:f0:16:01:8b:dd:9f:dc:46:f7:b5:37:81:95:a8:02:a7:
         80:b4:74:be:bf:79:ea:cb:b5:de:b4:30:82:0d:c9:6c:56:0b:
         21:24:c6:f8:8b:5a:80:83:6b:ca:2e:8d:a7:bc:3a:4d:c5:0a:
         f2:5e:89:70:e3:5f:b7:99:d0:10:1e:ef:f7:5f:d2:43:f1:e7:
         00:08:a0:de:5e:af:34:23:4a:0b:f6:e4:18:f0:ae:0a:eb:ac:
         78:cf:16:d8:79:21:9f:a6:23:fd:c9:29:3a:e1:e0:5e:cc:88:
         0f:17:a4:16:96:34:8b:ef:c8:1c:13:6f:71:0b:0a:32:95:45:
         da:0a:1d:7e:3c:28:6d:ec:c5:d2:64:5d:b3:70:29:c7:c7:8d:
         58:37:80:15:cb:71:b6:4d:e2:6b:c9:66:20:93:f8:98:9c:69:
         2b:f7:d4:7e:ee:5e:e4:dc:85:40:d5:d7:61:01:5f:ec:ee:9a:
         2a:e0:37:64:3f:8a:ab:50:63:5a:7c:3f:55:5c:2a:8b:46:a5:
         44:2e:0f:9c:29:30:b6:47:66:d1:a4:93:08:92:21:ae:c2:41:
         44:87:76:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:19:25 2025 by rpki-client