Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38392e302f32342d3234203d3e203533303437.roa
File:                     3137372e3130312e38392e302f32342d3234203d3e203533303437.roa (raw, json)
Hash identifier:          Kfqnwt5nljC4inIH/Om9IRMFRzxeGlNIH6T6OFKZbAs=
Subject key identifier:   AF:32:0D:47:D2:37:A7:63:93:F7:CC:A1:70:68:34:D3:2D:54:F9:E4
Certificate issuer:       /CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Certificate serial:       153669F2DE082ECF64ED6141C7539E5BF20D3B5C
Authority key identifier: D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38392e302f32342d3234203d3e203533303437.roa
Signing time:             Thu 06 Nov 2025 13:37:27 +0000
ROA not before:           Thu 06 Nov 2025 13:32:27 +0000
ROA not after:            Thu 05 Nov 2026 13:37:27 +0000
asID:                     53047
IP address blocks:        177.101.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 07 Nov 2025 16:57:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:36:69:f2:de:08:2e:cf:64:ed:61:41:c7:53:9e:5b:f2:0d:3b:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
        Validity
            Not Before: Nov  6 13:32:27 2025 GMT
            Not After : Nov  5 13:37:27 2026 GMT
        Subject: CN=AF320D47D237A76393F7CCA1706834D32D54F9E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:78:bf:09:9f:2a:73:32:51:ab:bf:4e:0c:50:
                    9b:87:a5:65:cb:17:a3:5a:5b:36:29:2f:77:3e:28:
                    82:55:4e:37:d9:28:8d:eb:23:6d:ae:24:8e:a5:af:
                    9b:e7:a4:68:19:e8:e6:03:75:ed:a2:de:f9:e9:05:
                    41:aa:8f:03:31:d5:ce:46:a4:27:ed:16:54:09:1f:
                    01:08:5b:42:bf:62:b8:91:18:38:16:f2:23:b7:96:
                    93:6e:63:3d:2f:38:d0:a9:fb:a3:8e:c4:a7:77:11:
                    18:50:0a:cc:a9:92:a5:26:d8:77:8b:6d:fb:72:43:
                    1a:7f:43:37:ef:b6:1c:bb:25:11:47:96:71:55:99:
                    4e:02:b6:14:0f:06:ee:b9:70:25:70:63:f3:a5:df:
                    16:1c:1e:4b:05:2e:4a:9d:a7:0e:fd:f8:86:3a:25:
                    08:f2:e9:14:81:c5:7e:06:7e:a9:4d:cb:9f:a4:8a:
                    b9:1a:e4:70:15:6e:9b:23:66:6a:ff:a3:6e:97:a9:
                    30:db:f4:5d:70:40:de:7f:90:06:63:e4:c6:6d:50:
                    cc:05:fc:63:46:b2:36:53:73:53:44:89:08:5a:8a:
                    ae:3b:7f:e5:1e:fd:7c:04:a6:41:ff:4a:c0:b4:ca:
                    77:1b:24:e4:d4:e5:a3:35:6d:1c:31:fc:ef:6c:ad:
                    c7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:32:0D:47:D2:37:A7:63:93:F7:CC:A1:70:68:34:D3:2D:54:F9:E4
            X509v3 Authority Key Identifier:
                keyid:D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38392e302f32342d3234203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:55:f8:b3:c6:f8:3f:7d:74:a5:97:6d:97:b9:44:f7:d8:22:
         d7:05:fe:ea:99:14:46:22:b2:da:eb:bc:70:1d:cc:bc:b0:1f:
         80:16:73:38:63:21:3e:03:19:86:13:32:6f:9a:d9:f5:99:b8:
         7a:46:76:fe:5f:d8:7a:11:68:e8:79:70:3b:92:5d:4b:98:7e:
         c4:2a:c9:e6:7c:3a:47:b2:a6:8a:02:df:3e:51:c0:c5:2e:8e:
         ed:da:b6:c8:74:25:ee:b0:54:0e:4b:40:5d:53:05:84:ad:fd:
         e7:d1:4e:e5:0d:02:c8:34:5c:11:8f:e2:a3:c6:6c:a3:19:9d:
         23:06:cf:8d:5a:60:6a:fa:52:3d:8e:78:ab:77:5f:0d:16:51:
         cd:2c:e5:1d:25:5f:74:f6:fb:d1:5d:e9:03:6d:9d:b1:38:46:
         91:62:af:c7:65:48:b6:cb:f6:59:8e:a3:88:05:15:95:e3:8a:
         a7:e5:04:7e:0d:52:5b:2d:24:c6:d2:7e:1d:3c:06:e3:86:13:
         be:9b:65:36:29:67:80:64:84:91:e7:1d:a0:f2:ac:f1:c2:33:
         5a:17:f2:08:5f:ce:8c:74:f5:a2:0b:23:22:e2:84:3b:d0:e3:
         8d:51:7b:7e:09:b1:dc:2b:91:84:b3:15:d0:98:ae:8a:5f:07:
         c0:78:42:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 06:22:11 2025 by rpki-client