Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38312e302f32342d3234203d3e203533303437.roa
File:                     3137372e3130312e38312e302f32342d3234203d3e203533303437.roa (raw, json)
Hash identifier:          yVR1rwEKFfwmE2HNA4CmbmmXp/0cTGAv3L1/vJ64xpw=
Subject key identifier:   37:3E:4E:83:84:83:A6:C2:A2:8C:21:99:33:8B:08:C9:D5:CC:D7:6D
Certificate issuer:       /CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Certificate serial:       7E62B08920EA5C8425A8B4A0C97908A6FC1F4225
Authority key identifier: D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38312e302f32342d3234203d3e203533303437.roa
Signing time:             Thu 06 Nov 2025 13:37:25 +0000
ROA not before:           Thu 06 Nov 2025 13:32:25 +0000
ROA not after:            Thu 05 Nov 2026 13:37:25 +0000
asID:                     53047
IP address blocks:        177.101.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 07 Nov 2025 16:57:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:62:b0:89:20:ea:5c:84:25:a8:b4:a0:c9:79:08:a6:fc:1f:42:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
        Validity
            Not Before: Nov  6 13:32:25 2025 GMT
            Not After : Nov  5 13:37:25 2026 GMT
        Subject: CN=373E4E838483A6C2A28C2199338B08C9D5CCD76D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:57:dd:52:f3:b7:99:ad:f5:2d:a6:21:86:00:
                    b3:0d:98:cd:37:dc:9e:51:98:ce:87:c2:8e:d2:79:
                    eb:14:79:d7:ff:1f:75:3a:45:db:33:b1:98:1d:d5:
                    3a:77:b5:84:3f:11:16:c6:04:9e:11:1e:47:1c:c6:
                    89:7e:7f:da:47:01:78:d1:4d:42:b7:7b:6c:5e:02:
                    34:68:c0:73:fa:78:bb:8b:40:51:9a:af:07:33:a0:
                    cf:82:12:df:86:8d:32:77:a7:16:d3:e4:c1:3e:0d:
                    1e:2c:cc:b6:4b:c3:01:05:8e:1e:a4:8d:be:7b:98:
                    fe:c1:a2:66:a5:28:81:10:19:bc:15:90:c9:bb:de:
                    d4:38:c2:28:40:c2:8d:49:f9:89:a0:a9:22:57:fd:
                    3e:92:c0:f9:de:5a:fa:0c:3d:0d:4e:5f:67:ad:89:
                    89:97:8e:d7:5d:3a:12:d5:8d:c5:8c:e3:7a:5a:a9:
                    a3:71:6d:5e:14:0b:12:b3:b2:d4:44:a3:b8:42:bd:
                    80:ae:b5:ec:e9:80:29:18:8f:80:5e:f7:33:b5:68:
                    84:5d:18:b7:fb:22:90:f2:a6:93:3c:34:96:0d:62:
                    a6:a0:c9:7e:d0:44:97:04:c1:51:d7:00:16:8f:b6:
                    66:b3:6b:8f:cc:34:26:99:54:a0:5c:56:8e:1c:b0:
                    25:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:3E:4E:83:84:83:A6:C2:A2:8C:21:99:33:8B:08:C9:D5:CC:D7:6D
            X509v3 Authority Key Identifier:
                keyid:D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38312e302f32342d3234203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:de:64:d7:48:95:fd:00:e7:d2:9b:6f:60:5f:c9:b0:0b:e5:
         42:cd:1d:a9:0c:54:52:57:3c:40:b2:02:43:f0:31:72:ff:34:
         c1:4d:43:36:07:e2:71:7c:d2:fd:48:99:6a:44:d9:fb:51:5a:
         0d:86:f3:0d:35:f8:7a:75:ae:fc:a3:2e:29:63:10:aa:88:5f:
         ba:85:ea:9c:97:b9:59:15:9c:d7:50:1d:c4:34:36:51:f7:90:
         52:8f:09:00:95:ca:95:82:9d:dc:fb:68:a4:90:73:ea:f4:86:
         8d:46:4c:7b:c1:d9:c0:1b:e7:c2:3a:73:1e:90:92:fa:b1:4a:
         a1:7c:05:fa:a6:65:29:23:4c:ee:b9:ac:0c:0e:2c:d0:f6:7c:
         a1:5b:4c:64:e0:48:e9:47:0a:7a:77:f6:fb:b4:80:72:a1:6b:
         b6:fe:83:9b:c9:2a:7f:a9:f2:58:d1:44:46:63:99:4d:8e:4b:
         f4:4b:e6:e2:83:a6:b2:af:ac:31:eb:78:35:67:56:f3:bb:f4:
         ac:a8:09:57:27:7e:92:18:a9:0a:44:69:69:cd:e7:85:82:6c:
         0e:6c:13:27:8f:37:49:a1:d0:19:a3:df:01:d0:20:28:23:91:
         2f:50:b7:12:2f:28:c5:68:ba:4d:23:11:ba:6d:66:06:22:01:
         52:3c:19:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 06:22:10 2025 by rpki-client