Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38352e302f32342d3234203d3e203533303437.roa
File:                     3137372e3130312e38352e302f32342d3234203d3e203533303437.roa (raw, json)
Hash identifier:          TmalWOOu2hw8Rz1mYyzf6tvxC4Bt83cFzH7o0qaHtWg=
Subject key identifier:   EE:0A:48:BF:E3:D5:EE:76:97:9E:10:74:44:B4:B6:0E:1B:A8:3E:68
Certificate issuer:       /CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Certificate serial:       16E97B02EF989B204B53B7207EEFFD5240E3EED1
Authority key identifier: D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38352e302f32342d3234203d3e203533303437.roa
Signing time:             Thu 06 Nov 2025 13:37:26 +0000
ROA not before:           Thu 06 Nov 2025 13:32:26 +0000
ROA not after:            Thu 05 Nov 2026 13:37:26 +0000
asID:                     53047
IP address blocks:        177.101.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 07 Nov 2025 16:57:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:e9:7b:02:ef:98:9b:20:4b:53:b7:20:7e:ef:fd:52:40:e3:ee:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
        Validity
            Not Before: Nov  6 13:32:26 2025 GMT
            Not After : Nov  5 13:37:26 2026 GMT
        Subject: CN=EE0A48BFE3D5EE76979E107444B4B60E1BA83E68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6b:be:20:66:8b:82:39:85:05:30:d3:55:a8:
                    19:15:88:63:b9:51:4c:56:9f:be:28:a3:f8:56:f6:
                    92:ed:61:ab:12:a9:2e:97:e1:1f:77:85:53:25:88:
                    3e:58:78:ab:7f:be:ff:d8:52:fe:6b:16:8b:88:0e:
                    f0:bf:3a:6a:18:88:2a:a7:ae:00:01:a7:d7:2c:9f:
                    7b:85:84:5e:47:57:8c:e3:e2:9f:48:39:4e:87:28:
                    e2:93:1d:10:cc:da:f2:34:cd:5d:1e:c2:42:53:27:
                    ac:be:02:01:57:b0:4f:d9:3d:44:49:95:79:bc:56:
                    af:9d:f7:de:84:e5:e9:82:cb:06:fb:bd:ee:81:39:
                    53:85:e6:05:1c:10:8f:93:aa:b6:b3:2b:11:f6:a1:
                    fd:db:a2:d3:b6:ef:ec:4c:29:9b:77:32:91:0b:b9:
                    65:0b:1f:a3:fd:63:e2:b9:6c:3f:c8:2c:3c:e0:83:
                    05:96:df:8a:f4:17:1f:34:ff:4e:ff:92:b9:7e:67:
                    57:e5:f5:73:94:3b:ae:55:79:06:63:9b:48:e6:f3:
                    f5:4e:91:8a:e9:2b:51:93:db:24:e9:4f:57:17:80:
                    0f:34:5b:49:98:78:e1:6d:8c:87:f6:37:9f:fc:fa:
                    b3:4e:0a:e7:93:ec:0d:22:24:19:5c:d7:ee:a0:8e:
                    95:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:0A:48:BF:E3:D5:EE:76:97:9E:10:74:44:B4:B6:0E:1B:A8:3E:68
            X509v3 Authority Key Identifier:
                keyid:D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38352e302f32342d3234203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:28:4d:32:e5:0c:94:7c:65:8f:b5:b5:82:b2:00:cf:7e:a7:
         c1:07:69:47:ae:39:6c:37:4e:71:c6:91:e0:99:aa:d1:fa:bb:
         59:5a:95:7e:68:eb:75:cf:e1:2a:66:8f:cc:bb:9e:f7:f1:6f:
         48:49:ff:4d:4f:bf:4f:90:f3:fc:45:5f:a6:a1:03:f9:22:ad:
         26:ae:af:0c:24:2a:72:ea:c4:09:04:82:a7:11:b7:f9:08:12:
         f3:5f:61:55:17:7d:9c:a0:de:5d:9c:24:38:2a:22:34:bd:2f:
         8c:ad:27:6c:9f:b0:7c:13:60:bd:e0:96:c4:f0:f3:9d:62:ba:
         49:56:e9:d7:11:69:f5:8f:d2:54:5d:22:41:1a:94:ff:8b:a3:
         0c:0a:68:67:22:c6:32:67:70:d9:54:69:70:9d:aa:14:78:1f:
         0e:3f:5b:09:e0:db:d7:df:3f:7b:a7:36:5f:d9:34:3b:9d:9d:
         70:ec:e4:a0:7c:75:d1:b4:52:a5:6a:98:05:ce:c2:6e:42:e7:
         07:ff:b1:6d:bc:70:5e:af:40:7e:d3:52:62:de:d9:93:3e:36:
         f9:68:b2:9b:aa:26:1b:84:5f:8a:8b:06:a3:e1:07:e9:10:4d:
         fc:28:81:62:b8:9e:c6:93:53:21:bb:87:3f:96:6e:81:05:3e:
         11:ee:87:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 06:25:39 2025 by rpki-client