Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38382e302f32312d3231203d3e203533303437.roa
File:                     3137372e3130312e38382e302f32312d3231203d3e203533303437.roa (raw, json)
Hash identifier:          uNWEEgaF7q55YxwRCjg4wq+juIZ+1AmoVT47zO14h2U=
Subject key identifier:   D0:00:49:39:E8:9D:7E:53:C2:AE:2F:3E:E9:18:1B:31:CE:6E:D7:F6
Certificate issuer:       /CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Certificate serial:       6C593A45518DF5CF3404C65AC6B296EEB718CDA4
Authority key identifier: D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38382e302f32312d3231203d3e203533303437.roa
Signing time:             Thu 06 Nov 2025 13:37:27 +0000
ROA not before:           Thu 06 Nov 2025 13:32:27 +0000
ROA not after:            Thu 05 Nov 2026 13:37:27 +0000
asID:                     53047
IP address blocks:        177.101.88.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 07 Nov 2025 16:57:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:59:3a:45:51:8d:f5:cf:34:04:c6:5a:c6:b2:96:ee:b7:18:cd:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
        Validity
            Not Before: Nov  6 13:32:27 2025 GMT
            Not After : Nov  5 13:37:27 2026 GMT
        Subject: CN=D0004939E89D7E53C2AE2F3EE9181B31CE6ED7F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:90:84:d9:8f:89:82:b7:7b:16:90:e7:56:c4:
                    84:11:53:81:e8:db:d2:40:db:18:22:d6:b6:d2:66:
                    97:da:d9:6b:d2:17:7b:5e:ad:98:a7:72:17:bf:40:
                    58:d0:4e:f5:7c:0d:07:2b:ba:38:5e:74:89:86:49:
                    b4:e0:a3:40:c0:c6:42:53:6f:d5:cd:c3:f4:8b:31:
                    25:7b:3b:6b:5e:a9:a4:61:3d:7c:b7:b6:1b:66:19:
                    df:23:22:f8:d3:94:c3:d2:64:43:aa:1c:e7:4b:40:
                    13:06:05:14:35:05:af:9c:a1:78:02:00:9d:9a:2b:
                    82:8c:b5:1b:cb:b5:70:ce:01:38:53:2d:73:23:70:
                    4f:a9:21:99:00:8c:c7:f8:48:6d:96:ff:25:6d:b6:
                    52:b0:e2:79:3d:ee:0c:09:17:a2:e6:b5:9f:fe:93:
                    7c:c5:4b:bb:9a:b8:79:6a:38:9a:8f:a3:2d:1d:80:
                    9a:e6:48:ab:48:bb:3a:b0:9f:bf:89:79:e5:11:d2:
                    d8:99:f4:03:a5:6e:f5:fe:b8:5e:5e:1c:8c:c9:a7:
                    69:12:41:c0:17:ba:97:7c:40:f7:61:ce:a6:b4:de:
                    40:09:14:20:d9:1f:c9:0c:37:0d:41:23:7c:93:3e:
                    a2:06:82:b8:05:42:c7:d1:40:36:38:8a:ee:bf:21:
                    da:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:00:49:39:E8:9D:7E:53:C2:AE:2F:3E:E9:18:1B:31:CE:6E:D7:F6
            X509v3 Authority Key Identifier:
                keyid:D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38382e302f32312d3231203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         84:40:9d:8b:5b:66:41:be:1f:80:3a:31:ee:7c:d1:ce:24:f2:
         e3:81:3e:24:28:fc:8f:6a:32:5a:0a:f2:cb:84:81:7e:b2:37:
         44:7a:be:fc:ca:df:49:ce:a3:6e:40:7c:d8:ac:d6:9c:1e:37:
         cd:7e:3a:8c:e4:54:c1:76:33:19:90:77:d2:4d:b6:73:ca:28:
         2c:18:3e:75:0e:89:58:c6:47:8e:b0:ac:a7:07:66:4d:bb:a7:
         0a:b5:27:29:7d:d1:5d:98:76:bd:f3:e5:26:78:0c:8a:c8:93:
         d2:65:8e:4d:73:b2:3f:bb:d0:f8:aa:5d:1e:5f:ba:f7:11:bf:
         1c:9e:b5:1d:b6:f5:23:18:d9:65:76:af:ca:02:1e:5e:d1:49:
         c6:88:cf:80:87:99:1f:af:93:38:8f:9e:ec:c8:2e:5c:87:86:
         4a:54:b6:ae:4a:16:b6:f7:57:ca:59:1d:74:c4:5f:45:73:0c:
         36:fd:8a:41:c5:2c:34:75:7f:40:90:0a:c4:fd:26:33:d1:c2:
         98:05:65:79:9b:60:f7:75:07:31:e7:38:d6:93:5f:cd:7b:3d:
         19:2f:4a:91:34:64:0e:57:3b:a7:43:b7:3d:a2:7a:79:ee:42:
         09:34:d6:e8:8c:4e:3a:33:54:86:0c:4a:81:43:44:e6:e0:ee:
         a1:4f:00:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 06:21:39 2025 by rpki-client