Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38332e302f32342d3234203d3e203533303437.roa
File:                     3137372e3130312e38332e302f32342d3234203d3e203533303437.roa (raw, json)
Hash identifier:          UQ3+YvzA6uk9or9rrCwXo7/zo+HHAZXsEf3b8bp9Z1k=
Subject key identifier:   C8:62:3A:16:3A:52:DB:1E:11:31:87:CA:DA:68:41:DD:C1:4A:E7:07
Certificate issuer:       /CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Certificate serial:       5E60663816BAAB70E7D2758B421E7F4475EB94B7
Authority key identifier: D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38332e302f32342d3234203d3e203533303437.roa
Signing time:             Thu 06 Nov 2025 13:37:24 +0000
ROA not before:           Thu 06 Nov 2025 13:32:24 +0000
ROA not after:            Thu 05 Nov 2026 13:37:24 +0000
asID:                     53047
IP address blocks:        177.101.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 07 Nov 2025 16:57:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:60:66:38:16:ba:ab:70:e7:d2:75:8b:42:1e:7f:44:75:eb:94:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
        Validity
            Not Before: Nov  6 13:32:24 2025 GMT
            Not After : Nov  5 13:37:24 2026 GMT
        Subject: CN=C8623A163A52DB1E113187CADA6841DDC14AE707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d8:53:ee:a7:a8:29:d4:fb:6e:ff:9e:af:ed:
                    6c:c5:19:bd:46:1c:4b:d8:0b:8c:9d:8f:87:44:51:
                    f4:64:10:1d:99:1a:f5:db:6e:6c:1f:ea:2d:28:76:
                    8c:cf:b3:b1:80:25:3c:80:42:c1:10:e7:8f:b2:53:
                    73:e3:b8:1c:22:2c:66:6e:cd:36:74:84:81:0c:4c:
                    f0:2e:4a:d7:22:65:ef:26:0b:41:ef:ac:f5:77:09:
                    8b:35:2b:99:57:57:02:52:41:d1:59:84:6b:c4:d5:
                    c4:c5:51:20:7a:38:da:0d:91:52:84:90:e3:00:2f:
                    e7:fe:a2:a7:84:47:05:fa:f5:e1:9d:36:1a:ce:5d:
                    d5:0b:46:16:f2:6c:21:cf:1f:12:cc:63:39:3a:48:
                    74:14:d0:1a:c1:87:ae:1f:f8:37:8e:28:1c:5f:68:
                    f7:b3:75:2e:f6:bd:00:b5:08:e5:a7:d5:92:5c:1b:
                    ef:92:45:73:d9:94:89:13:7f:24:61:93:7f:cb:e9:
                    10:71:9d:5a:39:ae:35:d6:a6:f7:fd:ec:b3:3b:da:
                    9a:62:b6:1b:4f:fa:18:0f:0d:36:12:e5:cc:00:83:
                    8c:e1:2d:ad:92:2b:0a:33:86:f6:aa:3f:fd:0c:62:
                    c1:57:53:54:d6:1c:bd:e9:e0:38:a9:29:f9:49:41:
                    08:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:62:3A:16:3A:52:DB:1E:11:31:87:CA:DA:68:41:DD:C1:4A:E7:07
            X509v3 Authority Key Identifier:
                keyid:D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38332e302f32342d3234203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:4c:ed:f9:50:c8:75:76:8f:19:f2:fb:75:0e:c5:8f:06:c4:
         07:21:3d:52:7c:3c:57:18:5b:05:58:ff:93:c5:bb:cd:e9:a0:
         19:96:b9:eb:43:f0:b5:eb:00:d3:a4:92:f1:6e:46:69:03:34:
         c0:b4:e1:52:b7:43:f0:36:d3:f8:4f:76:f2:76:76:63:c3:fe:
         33:d7:3a:0e:22:3f:c8:af:90:f4:46:91:a8:77:99:12:0f:8c:
         07:17:d6:70:5e:04:16:3d:42:84:f8:ac:d6:dd:18:f7:03:7d:
         74:01:63:97:a0:27:69:33:04:e3:ba:a4:10:4a:6c:a9:56:60:
         0c:38:0d:3f:9a:c8:37:9d:8a:9a:d2:48:65:bd:e8:cc:61:1e:
         c3:74:b6:ff:51:39:98:7b:02:fc:3d:9b:58:0d:79:4f:2a:1f:
         b1:b9:76:a6:2b:2e:ea:34:65:13:68:a3:5a:1f:c4:3c:62:9d:
         1d:99:9b:3a:e4:52:75:f6:45:7e:01:76:9e:87:51:b5:2d:a9:
         b4:0e:90:5c:94:df:e4:0e:50:ff:b2:13:17:29:0a:a9:f5:5d:
         fb:88:ce:08:9d:b4:86:7f:3b:c7:7a:ba:9e:cd:a6:0c:a8:0e:
         d0:17:eb:6d:38:e6:09:56:91:f9:e8:8e:0c:19:e6:9f:fb:b5:
         b3:bb:18:af
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUXmBmOBa6q3Dn0nWLQh5/RHXrlLcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQ1MDMzOEE0QzQ3QkQ5NUE3RUVCNDhCRERBNUMxQjk3
NjUyMjZGMTAeFw0yNTExMDYxMzMyMjRaFw0yNjExMDUxMzM3MjRaMDMxMTAvBgNV
BAMTKEM4NjIzQTE2M0E1MkRCMUUxMTMxODdDQURBNjg0MUREQzE0QUU3MDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc2FPup6gp1Ptu/56v7WzFGb1G
HEvYC4ydj4dEUfRkEB2ZGvXbbmwf6i0odozPs7GAJTyAQsEQ54+yU3PjuBwiLGZu
zTZ0hIEMTPAuStciZe8mC0HvrPV3CYs1K5lXVwJSQdFZhGvE1cTFUSB6ONoNkVKE
kOMAL+f+oqeERwX69eGdNhrOXdULRhbybCHPHxLMYzk6SHQU0BrBh64f+DeOKBxf
aPezdS72vQC1COWn1ZJcG++SRXPZlIkTfyRhk3/L6RBxnVo5rjXWpvf97LM72ppi
thtP+hgPDTYS5cwAg4zhLa2SKwozhvaqP/0MYsFXU1TWHL3p4DipKflJQQgbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUyGI6FjpS2x4RMYfK2mhB3cFK5wcwHwYDVR0j
BBgwFoAU1FAzikxHvZWn7rSL3aXBuXZSJvEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlhIb21GaDJwQlJyMkFaeHdaZGJZcFRqcEx1Ujlxa1JlRHhDUVRTZFlC
SmcvMC9ENDUwMzM4QTRDNDdCRDk1QTdFRUI0OEJEREE1QzFCOTc2NTIyNkYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0NTAzMzhBNEM0N0JEOTVB
N0VFQjQ4QkREQTVDMUI5NzY1MjI2RjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZYSG9tRmgycEJScjJBWnh3WmRiWXBUanBMdVI5cWtSZUR4Q1FUU2RZQkpnLzAv
MzEzNzM3MmUzMTMwMzEyZTM4MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMz
MzAzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsWVTMA0GCSqGSIb3DQEBCwUAA4IBAQBETO35UMh1
do8Z8vt1DsWPBsQHIT1SfDxXGFsFWP+TxbvN6aAZlrnrQ/C16wDTpJLxbkZpAzTA
tOFSt0PwNtP4T3bydnZjw/4z1zoOIj/Ir5D0RpGod5kSD4wHF9ZwXgQWPUKE+KzW
3Rj3A310AWOXoCdpMwTjuqQQSmypVmAMOA0/msg3nYqa0khlvejMYR7DdLb/UTmY
ewL8PZtYDXlPKh+xuXamKy7qNGUTaKNaH8Q8Yp0dmZs65FJ19kV+AXaeh1G1Lam0
DpBclN/kDlD/shMXKQqp9V37iM4InbSGfzvHerqezaYMqA7QF+ttOOYJVpH56I4M
Geaf+7Wzuxiv
-----END CERTIFICATE-----
Generated at Fri Nov 7 06:23:47 2025 by rpki-client