Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38382e302f32332d3233203d3e203533303437.roa
File:                     3137372e3130312e38382e302f32332d3233203d3e203533303437.roa (raw, json)
Hash identifier:          CJzLLzhHSe2eL1Xfp7ntBbq8bXe6nue8zxTvOkB5rg0=
Subject key identifier:   C5:29:B4:B6:0F:C5:51:EF:38:84:F4:21:05:6A:FC:69:E9:42:5A:70
Certificate issuer:       /CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Certificate serial:       79EAEB9D6EC91E2688C767AF35264EA4EB26ADE7
Authority key identifier: D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38382e302f32332d3233203d3e203533303437.roa
Signing time:             Thu 06 Nov 2025 13:37:24 +0000
ROA not before:           Thu 06 Nov 2025 13:32:24 +0000
ROA not after:            Thu 05 Nov 2026 13:37:24 +0000
asID:                     53047
IP address blocks:        177.101.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 07 Nov 2025 16:57:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:ea:eb:9d:6e:c9:1e:26:88:c7:67:af:35:26:4e:a4:eb:26:ad:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
        Validity
            Not Before: Nov  6 13:32:24 2025 GMT
            Not After : Nov  5 13:37:24 2026 GMT
        Subject: CN=C529B4B60FC551EF3884F421056AFC69E9425A70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:a9:d7:a6:fe:e5:88:a3:01:9e:2a:53:91:49:
                    d1:63:31:3e:3d:f6:95:a0:28:8c:33:69:4f:7b:11:
                    ff:1e:c2:7f:5a:e5:b2:a3:83:b4:12:a7:d4:1e:7c:
                    8a:19:1f:ff:87:f6:9a:fd:d6:87:8e:43:e7:59:85:
                    13:eb:f8:76:c6:17:22:71:64:00:d1:15:90:d2:de:
                    c6:b7:32:5c:73:88:6d:96:f0:46:ac:9d:61:fc:97:
                    d7:95:df:45:3c:96:b3:c8:55:43:16:6e:0a:ae:46:
                    87:e3:1d:de:62:83:16:3e:43:6e:ee:d8:8f:a7:5d:
                    e0:3e:ef:6e:d7:e6:99:20:82:27:f1:5d:50:50:e0:
                    6d:1f:27:a0:dd:bb:3d:1b:e9:b1:b1:c4:16:5b:fa:
                    ac:f9:27:99:fd:55:dc:53:16:1a:16:d2:b1:4a:62:
                    77:96:eb:34:46:0d:e5:83:ee:71:8d:0c:86:83:f0:
                    a0:24:8e:39:5f:f8:5a:c4:fd:5d:ec:35:13:e3:b2:
                    78:d5:12:7b:c1:99:4a:a7:0f:75:21:99:6e:d2:fc:
                    38:34:29:61:94:92:62:2c:44:92:b3:fe:c1:8a:39:
                    3b:cd:2b:04:86:d8:79:19:eb:c0:95:76:40:96:99:
                    c8:83:24:44:84:01:0f:b1:24:b0:ea:5d:04:5e:fe:
                    45:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:29:B4:B6:0F:C5:51:EF:38:84:F4:21:05:6A:FC:69:E9:42:5A:70
            X509v3 Authority Key Identifier:
                keyid:D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38382e302f32332d3233203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:6c:c2:0f:94:8f:1f:c8:70:0f:9e:6a:3c:f6:d2:3a:74:96:
         3f:d1:eb:66:56:ac:2d:e5:04:7c:2c:dc:7b:65:6e:12:f7:9a:
         c2:dc:5f:7e:1c:41:df:fc:49:0d:6f:f7:96:a3:84:74:f7:58:
         d6:0c:43:dd:92:7c:35:81:27:7f:83:ad:23:21:c0:8e:52:ff:
         67:2c:01:4d:3d:48:1d:32:f9:c0:b1:dc:80:3d:f3:a9:4e:d2:
         6b:3a:54:94:10:37:1a:ca:47:02:a8:a6:4a:2e:e1:42:c4:83:
         21:91:93:eb:fb:4e:d1:bb:c3:d5:88:ce:82:50:96:3a:fd:62:
         5d:19:61:e3:89:aa:4b:40:b4:4c:f8:4f:ee:e2:0d:9c:ae:4a:
         ef:7c:fd:da:e3:b9:4c:38:95:85:7d:e9:ac:89:6b:fa:d0:30:
         65:66:5a:e1:3a:51:fd:f1:71:cb:e8:50:cf:e9:45:65:ee:d7:
         80:77:e3:95:d8:04:6f:35:da:03:61:09:ce:5e:d0:c2:52:42:
         0f:ce:c7:3b:f9:40:79:25:76:5d:33:fe:31:37:39:9d:c0:11:
         ef:db:6a:09:80:b7:95:2d:a2:62:b2:8f:30:f9:d9:16:6b:50:
         05:e3:eb:63:0c:6d:48:9d:17:12:38:33:d6:67:32:6b:76:c7:
         04:6b:e2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 06:21:41 2025 by rpki-client