Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38342e302f32342d3234203d3e203533303437.roa
File:                     3137372e3130312e38342e302f32342d3234203d3e203533303437.roa (raw, json)
Hash identifier:          7mvFzyf6xC6iAMpEpGz2ciIehLtAmFXONXgL8XePe48=
Subject key identifier:   12:50:F7:6B:CB:28:46:CD:F3:23:DE:3B:27:50:A9:37:47:3B:5C:C9
Certificate issuer:       /CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Certificate serial:       5567A4F319CB4A0322BAE90D0541FB2F5B3555C5
Authority key identifier: D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38342e302f32342d3234203d3e203533303437.roa
Signing time:             Thu 06 Nov 2025 13:37:28 +0000
ROA not before:           Thu 06 Nov 2025 13:32:28 +0000
ROA not after:            Thu 05 Nov 2026 13:37:28 +0000
asID:                     53047
IP address blocks:        177.101.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 07 Nov 2025 16:57:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:67:a4:f3:19:cb:4a:03:22:ba:e9:0d:05:41:fb:2f:5b:35:55:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
        Validity
            Not Before: Nov  6 13:32:28 2025 GMT
            Not After : Nov  5 13:37:28 2026 GMT
        Subject: CN=1250F76BCB2846CDF323DE3B2750A937473B5CC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f9:b1:b4:77:a1:5a:90:82:d3:9d:cb:54:6f:
                    2b:b6:fb:64:4b:2a:2a:06:d5:25:32:b0:9b:e1:46:
                    1e:07:a6:d2:8e:9d:d9:52:57:8a:8a:ee:22:37:45:
                    5f:a0:25:e4:5f:fc:6e:a6:4a:34:f8:10:69:d6:c0:
                    03:36:6d:5e:d0:07:a7:e6:88:00:a2:c7:58:4b:1c:
                    84:fc:3d:47:12:5f:44:fb:3f:f6:5f:33:4e:60:b8:
                    48:23:80:84:d6:bd:3d:a0:40:d2:41:3a:d0:73:33:
                    79:67:9e:10:8d:a2:47:d3:93:f4:f3:16:5c:17:25:
                    f7:a5:72:b3:c7:7d:99:b6:05:e8:e0:ad:65:39:ed:
                    cb:ca:cf:63:73:a4:e4:63:9a:26:39:95:13:50:cd:
                    b4:cb:1a:6a:6b:ff:67:2a:9b:fe:a2:89:01:1a:1e:
                    f2:fb:78:df:b4:70:b3:48:a6:f7:e4:ec:6e:55:00:
                    12:b9:2d:13:2b:0e:08:d4:15:eb:82:5c:8e:5f:95:
                    af:8f:64:c9:0d:98:4a:54:f3:58:5d:94:b2:f1:0d:
                    06:45:74:cb:40:57:63:28:9f:24:5a:97:d5:6f:3b:
                    d2:2e:0c:64:8f:b9:d3:7f:09:98:33:bc:ac:3c:eb:
                    bf:d1:93:2a:6f:6f:59:2b:54:1f:97:df:e7:7a:03:
                    52:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:50:F7:6B:CB:28:46:CD:F3:23:DE:3B:27:50:A9:37:47:3B:5C:C9
            X509v3 Authority Key Identifier:
                keyid:D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38342e302f32342d3234203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:5f:e6:ab:c3:90:63:ee:ab:5a:1a:d3:68:30:63:5b:8f:1e:
         f5:fb:c2:d4:e4:83:b0:27:c9:f2:70:43:2f:2f:39:98:60:ff:
         7e:f7:49:c8:3d:b7:1c:4d:92:16:86:3e:8f:62:96:fb:c8:bc:
         0f:65:02:2b:0f:ac:8d:16:10:f3:3a:77:ac:ee:7e:65:69:53:
         b1:1c:15:7b:5d:0e:8a:4d:71:55:37:6f:b3:39:87:d9:f6:ca:
         ab:46:80:55:4e:fa:fa:03:2c:ef:0b:e2:95:cf:5a:60:6f:6b:
         95:96:95:79:fb:f2:e5:42:e7:9a:cd:d5:52:a3:49:13:ca:9a:
         b6:bc:0f:ac:c6:3e:dd:66:f9:90:0c:7a:0b:90:13:98:74:50:
         9d:65:f2:d6:a4:5d:03:38:58:46:45:9d:cb:6c:e2:f4:0e:16:
         74:b1:54:8e:18:5a:ab:cf:d7:ed:56:d8:7d:ec:06:52:45:ee:
         ca:41:d1:36:a4:41:39:2f:e3:09:74:1a:e2:15:eb:ea:63:d9:
         e5:b7:82:12:d2:1a:6e:26:b8:e1:51:cf:f5:74:57:9d:35:8e:
         6f:64:ad:82:8b:0a:99:35:d7:23:50:ad:ba:67:53:b0:34:de:
         93:a2:16:c9:f4:a2:1c:90:d5:c5:3b:f5:b5:db:b1:12:f4:08:
         b5:df:9e:e8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUVWek8xnLSgMiuukNBUH7L1s1VcUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQ1MDMzOEE0QzQ3QkQ5NUE3RUVCNDhCRERBNUMxQjk3
NjUyMjZGMTAeFw0yNTExMDYxMzMyMjhaFw0yNjExMDUxMzM3MjhaMDMxMTAvBgNV
BAMTKDEyNTBGNzZCQ0IyODQ2Q0RGMzIzREUzQjI3NTBBOTM3NDczQjVDQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8+bG0d6FakILTnctUbyu2+2RL
KioG1SUysJvhRh4HptKOndlSV4qK7iI3RV+gJeRf/G6mSjT4EGnWwAM2bV7QB6fm
iACix1hLHIT8PUcSX0T7P/ZfM05guEgjgITWvT2gQNJBOtBzM3lnnhCNokfTk/Tz
FlwXJfelcrPHfZm2BejgrWU57cvKz2NzpORjmiY5lRNQzbTLGmpr/2cqm/6iiQEa
HvL7eN+0cLNIpvfk7G5VABK5LRMrDgjUFeuCXI5fla+PZMkNmEpU81hdlLLxDQZF
dMtAV2MonyRal9VvO9IuDGSPudN/CZgzvKw867/Rkypvb1krVB+X3+d6A1I9AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUElD3a8soRs3zI947J1CpN0c7XMkwHwYDVR0j
BBgwFoAU1FAzikxHvZWn7rSL3aXBuXZSJvEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlhIb21GaDJwQlJyMkFaeHdaZGJZcFRqcEx1Ujlxa1JlRHhDUVRTZFlC
SmcvMC9ENDUwMzM4QTRDNDdCRDk1QTdFRUI0OEJEREE1QzFCOTc2NTIyNkYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0NTAzMzhBNEM0N0JEOTVB
N0VFQjQ4QkREQTVDMUI5NzY1MjI2RjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZYSG9tRmgycEJScjJBWnh3WmRiWXBUanBMdVI5cWtSZUR4Q1FUU2RZQkpnLzAv
MzEzNzM3MmUzMTMwMzEyZTM4MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMz
MzAzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsWVUMA0GCSqGSIb3DQEBCwUAA4IBAQCxX+arw5Bj
7qtaGtNoMGNbjx71+8LU5IOwJ8nycEMvLzmYYP9+90nIPbccTZIWhj6PYpb7yLwP
ZQIrD6yNFhDzOnes7n5laVOxHBV7XQ6KTXFVN2+zOYfZ9sqrRoBVTvr6AyzvC+KV
z1pgb2uVlpV5+/LlQueazdVSo0kTypq2vA+sxj7dZvmQDHoLkBOYdFCdZfLWpF0D
OFhGRZ3LbOL0DhZ0sVSOGFqrz9ftVth97AZSRe7KQdE2pEE5L+MJdBriFevqY9nl
t4IS0hpuJrjhUc/1dFedNY5vZK2CiwqZNdcjUK26Z1OwNN6TohbJ9KIckNXFO/W1
27ES9Ai1357o
-----END CERTIFICATE-----
Generated at Fri Nov 7 06:25:43 2025 by rpki-client