Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38302e302f32322d3232203d3e203533303437.roa
File:                     3137372e3130312e38302e302f32322d3232203d3e203533303437.roa (raw, json)
Hash identifier:          IEkHueNKvGNZAIlCxcOayhfrLRSGJfTqkSU9Tx5IUKM=
Subject key identifier:   9F:62:0E:AE:64:04:2F:89:AC:A0:48:AD:7B:2E:28:5C:B3:D7:1E:39
Certificate issuer:       /CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Certificate serial:       3E1C19E17ED21B614CF3B63AED54A8DD52556201
Authority key identifier: D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38302e302f32322d3232203d3e203533303437.roa
Signing time:             Thu 06 Nov 2025 13:37:25 +0000
ROA not before:           Thu 06 Nov 2025 13:32:25 +0000
ROA not after:            Thu 05 Nov 2026 13:37:25 +0000
asID:                     53047
IP address blocks:        177.101.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 07 Nov 2025 16:57:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:1c:19:e1:7e:d2:1b:61:4c:f3:b6:3a:ed:54:a8:dd:52:55:62:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
        Validity
            Not Before: Nov  6 13:32:25 2025 GMT
            Not After : Nov  5 13:37:25 2026 GMT
        Subject: CN=9F620EAE64042F89ACA048AD7B2E285CB3D71E39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e9:7b:44:a8:09:3b:6d:eb:9c:51:95:47:b9:
                    8c:d5:3c:36:4c:f1:16:94:e1:23:fa:c0:5b:99:70:
                    4a:43:b1:7f:64:98:1e:82:ee:b9:15:42:20:3f:f8:
                    ca:d8:44:d7:92:f7:00:9b:8f:67:e8:5f:b9:3d:74:
                    eb:b4:b7:41:3e:71:3b:23:1a:9b:69:9e:ca:dc:b4:
                    b8:62:14:bb:5c:89:88:73:d5:45:a5:86:ee:f3:82:
                    8e:6e:eb:6c:4e:d4:9d:71:c4:15:ac:b4:47:b9:31:
                    ee:f4:8f:94:be:8b:7e:fb:9a:e5:b6:36:74:19:08:
                    ee:a7:fd:e2:a8:c7:84:13:e0:c5:18:23:27:cc:a9:
                    8f:b3:88:0b:37:b0:4f:d0:95:e1:5e:ea:89:c7:14:
                    a8:ee:71:9b:72:e3:0c:59:f1:1c:6a:c7:bf:09:47:
                    49:b1:74:92:47:5f:0a:35:ab:43:99:ac:78:a9:82:
                    bf:7b:15:39:ca:7a:0c:3e:62:fd:88:10:e0:81:e4:
                    30:68:2f:a3:35:66:2d:bb:2a:47:a1:08:a6:3e:1d:
                    16:0b:42:96:1f:c7:fc:70:b9:46:28:5f:53:02:e6:
                    66:ea:ab:3d:b1:88:45:0f:b8:86:98:48:94:fa:f4:
                    12:e5:4a:04:86:56:7e:0c:52:47:5c:fa:f5:6c:1f:
                    20:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:62:0E:AE:64:04:2F:89:AC:A0:48:AD:7B:2E:28:5C:B3:D7:1E:39
            X509v3 Authority Key Identifier:
                keyid:D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38302e302f32322d3232203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:e5:34:5a:83:65:ef:88:cc:57:9b:d9:db:d2:a5:19:74:2f:
         53:92:65:96:3e:2a:a3:c1:49:1b:72:d4:f7:15:60:e4:02:54:
         b4:2e:83:ff:19:ac:0c:52:ad:30:98:ce:7e:20:8c:c1:44:f4:
         37:8d:15:30:03:43:7d:08:3e:92:c7:3b:ab:17:fa:3e:49:cc:
         6d:3b:0b:f2:2d:e8:16:ef:fa:f8:c5:f8:53:12:9f:fa:ca:04:
         bb:87:12:ae:4f:16:dd:97:7a:38:6c:32:d7:02:52:21:9d:ce:
         03:cc:ac:4f:c1:4d:c8:9f:69:24:56:b3:ac:26:16:c3:9a:f0:
         4d:15:1d:ee:05:19:ef:a6:36:63:20:74:7d:37:2a:e5:00:cd:
         74:1b:be:e6:0c:2c:33:bd:48:99:98:2d:ef:d9:89:1b:07:75:
         2c:0d:c3:47:8c:88:fa:01:06:65:9d:05:db:f8:29:35:5e:5b:
         59:d6:28:c9:1a:f6:ad:14:5c:e7:b4:8c:b4:a8:99:cc:9f:97:
         e4:55:b1:ce:d6:e2:39:55:03:94:60:50:93:4f:0e:9a:79:47:
         b2:8c:b5:bd:9a:9f:61:94:f8:f8:df:36:b3:3b:59:bc:1a:fa:
         f4:98:be:2b:b2:9b:d7:e9:14:9b:b8:f7:ca:9c:dc:99:cc:d6:
         e8:7c:bb:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 06:23:33 2025 by rpki-client