Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38362e302f32332d3233203d3e203533303437.roa
File:                     3137372e3130312e38362e302f32332d3233203d3e203533303437.roa (raw, json)
Hash identifier:          9LYzoLOEkjZSILkIRdzwEmGjyYzXF5DPNmt+9sh7pSY=
Subject key identifier:   C2:F2:33:AE:57:EF:84:E9:65:29:52:C0:85:92:65:0E:60:02:37:F6
Certificate issuer:       /CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Certificate serial:       0F94A0C2C1FD8D636E50A2B5250386C643DC8787
Authority key identifier: D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38362e302f32332d3233203d3e203533303437.roa
Signing time:             Thu 06 Nov 2025 13:37:26 +0000
ROA not before:           Thu 06 Nov 2025 13:32:26 +0000
ROA not after:            Thu 05 Nov 2026 13:37:26 +0000
asID:                     53047
IP address blocks:        177.101.86.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 07 Nov 2025 16:57:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:94:a0:c2:c1:fd:8d:63:6e:50:a2:b5:25:03:86:c6:43:dc:87:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
        Validity
            Not Before: Nov  6 13:32:26 2025 GMT
            Not After : Nov  5 13:37:26 2026 GMT
        Subject: CN=C2F233AE57EF84E9652952C08592650E600237F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d2:b1:c6:28:da:b4:6c:30:30:1b:c8:be:cd:
                    48:91:5f:cb:5f:1a:8c:55:05:4d:12:4b:68:71:8b:
                    ce:ac:70:86:8f:8c:20:05:91:41:0b:9c:bd:a0:d7:
                    40:b0:06:7e:aa:a5:b7:35:94:4a:93:a2:d4:b1:b3:
                    04:d4:19:ff:77:d0:9e:b4:b2:e0:3f:51:45:98:67:
                    a7:ce:ee:9b:76:1c:32:41:71:37:72:bb:48:1c:93:
                    c0:95:28:64:a1:a5:6d:eb:20:71:2f:fc:15:eb:bd:
                    95:4c:f6:18:27:bb:35:38:a0:c8:ee:92:28:4c:71:
                    1e:99:46:4f:fd:9d:06:43:7f:31:76:dc:4b:ff:27:
                    49:77:26:69:d7:6c:c9:88:94:2a:f6:5e:93:48:f2:
                    d0:ff:3c:b2:3c:78:7d:4a:ec:e6:a0:cb:16:c9:1e:
                    ea:5c:f3:e5:39:a5:ab:c0:a6:e9:48:ff:75:97:2c:
                    75:41:f5:90:f0:02:45:c7:4d:17:7e:34:c0:60:44:
                    c3:f5:0c:44:07:45:23:f9:cc:26:7c:7a:7e:43:64:
                    57:80:82:f6:d5:8a:be:21:e0:1e:8f:27:11:2e:ac:
                    de:22:25:9c:5b:db:a8:00:c8:35:52:e3:7d:69:63:
                    b0:59:c4:62:81:47:9c:c2:b5:fa:ee:7d:a4:26:dc:
                    83:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F2:33:AE:57:EF:84:E9:65:29:52:C0:85:92:65:0E:60:02:37:F6
            X509v3 Authority Key Identifier:
                keyid:D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38362e302f32332d3233203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         dd:17:bb:d3:93:e8:8b:42:80:2e:16:95:90:81:59:8f:22:40:
         7e:a7:bf:17:43:d2:42:00:00:37:41:41:4f:6e:bb:a4:94:7d:
         65:79:cf:c7:1d:2d:18:2d:77:30:3a:16:8a:5a:ea:d7:24:0e:
         11:f6:9a:b7:a0:e7:69:e7:3b:e6:f2:92:2b:2a:2b:6e:0e:ce:
         8e:4c:17:a5:eb:09:af:14:12:08:d4:6e:70:97:bb:36:27:f0:
         eb:15:d8:0d:1f:73:d9:8b:f8:ba:17:9a:75:0f:5a:ca:81:b0:
         29:ca:f5:7c:06:38:0b:9a:9d:70:cd:be:b6:4f:5d:02:3d:01:
         cc:54:0b:59:04:46:02:64:3e:22:44:84:06:f6:4b:d1:0d:37:
         87:ba:d1:68:16:fc:4b:1d:1e:6d:08:62:8e:c5:d8:54:fe:83:
         73:60:6c:f0:6a:b3:d3:f9:7c:1f:6a:4b:ad:c6:c6:93:aa:d5:
         b2:d8:5f:ec:5a:fd:10:e6:32:3a:91:2e:93:b4:41:16:80:46:
         07:9c:4b:ad:55:67:ed:8c:55:fc:3d:de:af:52:cc:ac:30:40:
         59:17:dd:59:21:93:db:3c:c4:22:91:26:dc:34:f6:75:8f:f6:
         38:6b:b9:8c:d7:c5:34:73:16:dd:02:24:9a:2d:a2:41:0a:90:
         da:7b:21:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 06:21:42 2025 by rpki-client