Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38322e302f32332d3233203d3e203533303437.roa
File:                     3137372e3130312e38322e302f32332d3233203d3e203533303437.roa (raw, json)
Hash identifier:          GYsGGycRsLuinW5fvU3RNzbe0JQxDyKWQB11WjEvhms=
Subject key identifier:   AF:26:0D:74:5D:61:7D:E6:81:05:A2:1C:BB:96:4F:A2:58:47:33:5B
Certificate issuer:       /CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Certificate serial:       17FFA05151783C86EB30A3E651B512966FABA452
Authority key identifier: D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38322e302f32332d3233203d3e203533303437.roa
Signing time:             Thu 06 Nov 2025 13:37:28 +0000
ROA not before:           Thu 06 Nov 2025 13:32:28 +0000
ROA not after:            Thu 05 Nov 2026 13:37:28 +0000
asID:                     53047
IP address blocks:        177.101.82.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 07 Nov 2025 16:57:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ff:a0:51:51:78:3c:86:eb:30:a3:e6:51:b5:12:96:6f:ab:a4:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
        Validity
            Not Before: Nov  6 13:32:28 2025 GMT
            Not After : Nov  5 13:37:28 2026 GMT
        Subject: CN=AF260D745D617DE68105A21CBB964FA25847335B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b0:cc:78:4d:61:b1:a3:2d:9c:63:95:c8:55:
                    2f:c5:f3:a6:8a:30:14:f7:63:1c:95:93:e0:7c:b4:
                    63:01:38:32:4e:c3:31:4d:29:18:4f:fc:66:92:f5:
                    32:27:37:4a:97:c8:a7:e2:31:39:b1:af:dd:b2:0b:
                    00:68:37:ae:8a:ce:07:40:fe:92:5d:e4:2f:05:22:
                    64:69:fa:19:20:58:a4:de:81:24:99:6d:fe:aa:af:
                    8b:57:52:3a:ea:85:6c:91:1e:e2:18:1e:7e:c0:0d:
                    57:5a:8e:3e:1b:0a:34:17:3b:ed:0e:cf:91:a8:33:
                    b6:76:56:18:99:17:e8:3a:a2:fc:8f:71:79:a8:73:
                    36:8a:03:6b:61:3c:12:76:25:6b:2f:9a:5b:8f:f4:
                    61:09:30:b2:5b:69:6c:f7:f6:7f:f4:23:72:1c:57:
                    e9:a1:ec:39:74:a1:a2:32:9b:1e:45:64:16:b7:3f:
                    46:2e:e2:ef:2d:49:a2:ab:f7:4c:45:85:4f:6f:ee:
                    d6:0f:9b:ba:8f:9c:da:44:c5:8e:d4:1f:09:1a:27:
                    ec:01:33:24:2a:79:ff:10:4f:aa:3d:fb:b5:bc:e7:
                    69:61:44:5d:4f:f0:f6:62:2a:6e:dd:ca:92:21:0c:
                    e7:fa:77:b2:2c:94:94:63:c5:91:a7:44:ef:4a:5a:
                    a9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:26:0D:74:5D:61:7D:E6:81:05:A2:1C:BB:96:4F:A2:58:47:33:5B
            X509v3 Authority Key Identifier:
                keyid:D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38322e302f32332d3233203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:e3:7a:05:4c:b9:cd:59:fa:21:31:9c:2b:c3:cc:6d:e6:89:
         52:2f:3e:5b:8c:f4:de:51:49:f2:fb:8a:c9:69:2f:bb:e4:11:
         77:5d:89:87:ac:f8:db:69:56:da:40:f6:11:09:00:f5:79:ec:
         33:9a:aa:97:01:3a:5a:26:d6:57:bc:c2:e2:92:8e:86:da:09:
         03:46:51:25:e4:8d:a7:f8:81:b8:c2:a1:bd:cf:12:4e:e0:f7:
         0a:94:2a:29:29:88:d3:ad:b5:6f:3e:62:44:ce:4d:a9:53:31:
         7b:83:23:38:26:7a:3c:ae:5d:d0:c8:b8:d5:ae:13:19:c0:51:
         1e:99:ce:cc:16:ac:5b:aa:90:c5:66:1d:1e:a1:59:07:c3:37:
         32:45:41:f5:2d:3c:56:fd:ee:d1:07:74:f6:05:50:d5:1e:94:
         d2:bb:6c:11:7e:13:9e:0b:6c:52:89:2c:e7:b9:d9:77:53:b1:
         22:f9:1c:a3:93:fa:f7:e8:ea:99:8a:18:7f:8c:49:71:a7:1c:
         61:9e:0d:05:21:46:ef:70:56:2a:83:11:a3:04:25:c4:f2:a0:
         0e:27:4a:dc:84:5a:ea:7c:98:21:ab:46:23:e1:32:cc:70:72:
         ec:d0:8d:e1:e0:9b:ab:5e:a2:4d:33:3c:04:c0:f8:e2:46:ff:
         3b:ff:41:96
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUF/+gUVF4PIbrMKPmUbUSlm+rpFIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQ1MDMzOEE0QzQ3QkQ5NUE3RUVCNDhCRERBNUMxQjk3
NjUyMjZGMTAeFw0yNTExMDYxMzMyMjhaFw0yNjExMDUxMzM3MjhaMDMxMTAvBgNV
BAMTKEFGMjYwRDc0NUQ2MTdERTY4MTA1QTIxQ0JCOTY0RkEyNTg0NzMzNUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxsMx4TWGxoy2cY5XIVS/F86aK
MBT3YxyVk+B8tGMBODJOwzFNKRhP/GaS9TInN0qXyKfiMTmxr92yCwBoN66KzgdA
/pJd5C8FImRp+hkgWKTegSSZbf6qr4tXUjrqhWyRHuIYHn7ADVdajj4bCjQXO+0O
z5GoM7Z2VhiZF+g6ovyPcXmoczaKA2thPBJ2JWsvmluP9GEJMLJbaWz39n/0I3Ic
V+mh7Dl0oaIymx5FZBa3P0Yu4u8tSaKr90xFhU9v7tYPm7qPnNpExY7UHwkaJ+wB
MyQqef8QT6o9+7W852lhRF1P8PZiKm7dypIhDOf6d7IslJRjxZGnRO9KWqn1AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUryYNdF1hfeaBBaIcu5ZPolhHM1swHwYDVR0j
BBgwFoAU1FAzikxHvZWn7rSL3aXBuXZSJvEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlhIb21GaDJwQlJyMkFaeHdaZGJZcFRqcEx1Ujlxa1JlRHhDUVRTZFlC
SmcvMC9ENDUwMzM4QTRDNDdCRDk1QTdFRUI0OEJEREE1QzFCOTc2NTIyNkYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0NTAzMzhBNEM0N0JEOTVB
N0VFQjQ4QkREQTVDMUI5NzY1MjI2RjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZYSG9tRmgycEJScjJBWnh3WmRiWXBUanBMdVI5cWtSZUR4Q1FUU2RZQkpnLzAv
MzEzNzM3MmUzMTMwMzEyZTM4MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMz
MzAzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsWVSMA0GCSqGSIb3DQEBCwUAA4IBAQAk43oFTLnN
WfohMZwrw8xt5olSLz5bjPTeUUny+4rJaS+75BF3XYmHrPjbaVbaQPYRCQD1eewz
mqqXATpaJtZXvMLiko6G2gkDRlEl5I2n+IG4wqG9zxJO4PcKlCopKYjTrbVvPmJE
zk2pUzF7gyM4Jno8rl3QyLjVrhMZwFEemc7MFqxbqpDFZh0eoVkHwzcyRUH1LTxW
/e7RB3T2BVDVHpTSu2wRfhOeC2xSiSznudl3U7Ei+Ryjk/r36OqZihh/jElxpxxh
ng0FIUbvcFYqgxGjBCXE8qAOJ0rchFrqfJghq0Yj4TLMcHLs0I3h4JurXqJNMzwE
wPjiRv87/0GW
-----END CERTIFICATE-----
Generated at Fri Nov 7 06:21:39 2025 by rpki-client