Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38342e302f32332d3233203d3e203533303437.roa
File:                     3137372e3130312e38342e302f32332d3233203d3e203533303437.roa (raw, json)
Hash identifier:          j424sViqkiRTquRtGG/QS+haGK+uEk3YvERBB/kMsG4=
Subject key identifier:   F4:67:E0:CE:EF:D6:1A:E9:36:F9:E8:A0:84:E8:0A:00:66:B6:FF:CB
Certificate issuer:       /CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Certificate serial:       7F8AB2913720C9DEECC136765B691E622CD50AC5
Authority key identifier: D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38342e302f32332d3233203d3e203533303437.roa
Signing time:             Thu 06 Nov 2025 13:37:25 +0000
ROA not before:           Thu 06 Nov 2025 13:32:25 +0000
ROA not after:            Thu 05 Nov 2026 13:37:25 +0000
asID:                     53047
IP address blocks:        177.101.84.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 07 Nov 2025 16:57:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:8a:b2:91:37:20:c9:de:ec:c1:36:76:5b:69:1e:62:2c:d5:0a:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
        Validity
            Not Before: Nov  6 13:32:25 2025 GMT
            Not After : Nov  5 13:37:25 2026 GMT
        Subject: CN=F467E0CEEFD61AE936F9E8A084E80A0066B6FFCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:39:34:33:1e:ae:53:3c:21:f2:25:ec:7f:15:
                    9b:b9:b4:70:80:a0:a8:66:1e:3b:34:10:94:67:ba:
                    7f:00:bb:2c:72:df:74:0d:72:17:5f:f2:a6:51:78:
                    c6:b5:fa:2e:91:d4:ed:d5:3b:6c:09:9d:05:20:3e:
                    e5:2d:e2:12:c5:97:b7:07:2f:b5:79:5a:19:70:a7:
                    52:8b:d5:d3:ba:2d:93:e5:b4:2c:c7:75:cb:fb:e4:
                    e1:ca:65:30:03:a4:cd:db:38:9c:75:5c:92:98:97:
                    58:c9:f3:ce:8a:ef:be:d4:2e:d8:1e:6e:f1:10:32:
                    06:3c:de:9d:85:a4:35:73:a0:70:bd:5a:12:c6:2a:
                    4a:65:61:ae:72:94:83:cf:57:84:84:45:8d:3d:53:
                    9f:6e:d2:6d:47:a5:4f:00:86:e1:70:d2:0e:d0:71:
                    7d:2f:cb:b8:99:c8:8b:8a:2b:57:e4:af:3d:76:cc:
                    55:1a:8e:00:fd:28:c4:c0:82:12:27:59:69:47:3f:
                    51:ac:15:a7:81:d5:9e:ac:a3:ea:1e:4a:3f:30:52:
                    92:16:3a:47:17:de:8a:c5:91:27:e7:73:a8:4f:bc:
                    c6:bb:ad:e8:7b:cb:1e:c4:ec:f7:73:11:05:77:82:
                    e0:ad:8f:ec:e1:06:5a:7e:71:cb:87:f8:2b:f9:be:
                    62:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:67:E0:CE:EF:D6:1A:E9:36:F9:E8:A0:84:E8:0A:00:66:B6:FF:CB
            X509v3 Authority Key Identifier:
                keyid:D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38342e302f32332d3233203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:42:30:1e:1c:e1:65:26:0f:c3:e2:30:c0:05:ba:e6:3b:ca:
         f7:95:cd:fe:14:9d:fa:bc:1c:4f:2b:48:db:b1:67:8a:c2:cb:
         37:e3:84:57:18:4c:d9:60:35:2f:8a:72:3a:b7:7c:46:6a:e6:
         82:86:5b:43:eb:a4:28:58:5c:a9:14:a9:93:d1:c7:03:66:16:
         1f:0c:b1:5d:77:78:58:32:46:b6:a0:3d:cc:c2:6f:37:c8:4b:
         52:28:d8:3f:2d:1b:35:5e:f3:98:67:b6:d8:6e:7a:40:b6:db:
         83:d8:04:3a:cb:ce:be:4c:9b:d9:35:e8:13:6d:45:a9:89:82:
         6d:56:33:3e:86:3b:fd:bb:64:40:9c:2a:c2:03:83:91:49:78:
         ec:d3:1f:ae:79:48:cb:67:b7:71:ff:da:2f:38:bb:81:ac:cb:
         81:ff:91:d6:67:df:d4:eb:15:db:0c:c8:94:6d:5d:05:d7:37:
         4b:b5:4b:e5:83:2c:3a:32:e7:66:34:0a:54:02:12:53:4e:7e:
         72:5a:18:eb:ec:a7:00:6f:43:88:a2:82:ed:de:c4:cb:fc:50:
         b9:ba:fa:0f:10:31:95:46:13:3f:40:60:1b:cb:ac:3c:eb:ff:
         ae:8e:7c:79:0b:1f:d0:ea:b1:78:a9:fe:31:6b:67:63:b6:4b:
         5f:73:8e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 06:25:29 2025 by rpki-client