Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38382e302f32322d3232203d3e203533303437.roa
File:                     3137372e3130312e38382e302f32322d3232203d3e203533303437.roa (raw, json)
Hash identifier:          Oa2ibRVAYPA7rTdi1vUQcxDOKYaCtLyoQnMjhWLhrfk=
Subject key identifier:   BF:EE:52:07:BB:60:A7:29:E9:56:91:66:70:F1:D8:70:48:3E:43:F3
Certificate issuer:       /CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Certificate serial:       5BBF81C592851A93FA143EAD1814008010B7CD83
Authority key identifier: D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38382e302f32322d3232203d3e203533303437.roa
Signing time:             Thu 06 Nov 2025 13:37:27 +0000
ROA not before:           Thu 06 Nov 2025 13:32:27 +0000
ROA not after:            Thu 05 Nov 2026 13:37:27 +0000
asID:                     53047
IP address blocks:        177.101.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 07 Nov 2025 16:57:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:bf:81:c5:92:85:1a:93:fa:14:3e:ad:18:14:00:80:10:b7:cd:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
        Validity
            Not Before: Nov  6 13:32:27 2025 GMT
            Not After : Nov  5 13:37:27 2026 GMT
        Subject: CN=BFEE5207BB60A729E956916670F1D870483E43F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2a:b0:8c:6f:bb:b6:01:b2:c1:bd:66:26:e3:
                    91:f9:c8:41:10:8a:b0:92:ad:e4:dd:ba:c3:2d:e4:
                    78:11:3c:22:d3:a2:62:43:af:c8:04:aa:87:2c:80:
                    18:92:8d:02:93:24:dd:21:be:e1:3e:8b:34:a5:27:
                    6b:6e:74:77:50:ad:16:c4:15:ef:6d:b3:ec:7a:7b:
                    48:f2:8a:fd:6d:ff:ab:ed:60:78:04:5f:ad:b8:05:
                    bb:7b:9e:00:ea:c7:db:52:54:21:c6:be:ce:b9:45:
                    26:69:80:a0:e2:0b:8b:8c:b6:17:ce:b1:87:06:ae:
                    62:eb:22:e6:05:cb:90:25:24:1e:d4:3d:8e:f2:a5:
                    fc:ec:d1:23:56:f1:65:17:1a:96:76:4f:76:3b:32:
                    b0:a8:6f:8b:e2:7b:b5:ee:01:25:a0:88:0f:1f:93:
                    34:d0:e2:99:4d:26:a9:cf:c7:04:95:08:5e:ed:7a:
                    49:ca:d9:bb:d4:2b:8d:a0:5a:ab:4d:9e:68:4c:1b:
                    00:c0:1e:ae:10:53:e0:f5:3a:9a:89:a2:06:a4:fc:
                    2d:10:80:42:4f:a6:fb:20:4c:20:37:66:c7:c7:62:
                    a2:fd:5f:63:89:65:17:ef:14:ff:b9:9f:b5:e7:c0:
                    9f:05:85:e6:3c:2e:48:5b:d4:8a:d4:d0:06:c7:80:
                    b4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:EE:52:07:BB:60:A7:29:E9:56:91:66:70:F1:D8:70:48:3E:43:F3
            X509v3 Authority Key Identifier:
                keyid:D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38382e302f32322d3232203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:9b:a6:b4:e1:be:98:65:13:94:91:18:07:05:a0:55:ed:55:
         25:01:88:ad:90:86:db:0d:7b:cf:5a:20:ce:fb:dc:e1:31:cb:
         28:12:d4:06:38:56:2d:a5:14:cc:ce:30:c7:83:81:35:89:76:
         c8:f8:38:76:fd:00:00:f8:06:95:eb:7f:e1:9f:87:b5:57:29:
         0b:aa:13:19:b4:ff:68:40:75:2b:6c:51:0c:c1:e4:ec:aa:35:
         8f:b0:9b:c7:91:24:8e:95:5e:d6:db:cc:cb:f0:4b:01:c2:cf:
         71:1c:49:b0:a7:15:a5:0a:11:79:6e:f0:e6:e7:0f:c3:fb:c4:
         d5:e0:60:8a:7f:60:4c:93:c5:71:f8:ed:86:50:ee:72:90:76:
         89:c7:7e:f1:40:68:f6:1e:0d:04:56:44:d9:43:74:4b:08:39:
         f6:df:93:17:28:85:4b:e2:18:7d:5a:68:7c:7c:ff:fd:ca:b8:
         08:18:18:13:c8:d6:90:e4:d3:6e:38:f5:0c:e5:96:76:31:30:
         61:58:5c:4d:8f:a6:6d:7f:a1:90:c4:fd:56:2a:82:c5:91:07:
         e8:0c:a2:0b:9e:16:96:bc:12:00:71:45:5c:34:79:33:5e:a0:
         6f:e6:65:11:fa:97:7e:93:4a:77:3e:06:53:b3:3b:42:47:ae:
         f7:be:d1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 06:25:24 2025 by rpki-client