Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39312e302f32342d3234203d3e203533303437.roa
File:                     3137372e3130312e39312e302f32342d3234203d3e203533303437.roa (raw, json)
Hash identifier:          aUJfwyX0Oc1aLmEp+2F86SfiFDQe3XY3Qwasm0N6Q/M=
Subject key identifier:   32:7E:19:A9:95:01:8E:3B:79:FC:9F:85:19:20:40:CC:A7:6C:01:3A
Certificate issuer:       /CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Certificate serial:       2EFF482C77FADA6D9F542C646B0CB23FACD3DFE4
Authority key identifier: D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39312e302f32342d3234203d3e203533303437.roa
Signing time:             Thu 06 Nov 2025 13:37:27 +0000
ROA not before:           Thu 06 Nov 2025 13:32:27 +0000
ROA not after:            Thu 05 Nov 2026 13:37:27 +0000
asID:                     53047
IP address blocks:        177.101.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 07 Nov 2025 16:57:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:ff:48:2c:77:fa:da:6d:9f:54:2c:64:6b:0c:b2:3f:ac:d3:df:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
        Validity
            Not Before: Nov  6 13:32:27 2025 GMT
            Not After : Nov  5 13:37:27 2026 GMT
        Subject: CN=327E19A995018E3B79FC9F85192040CCA76C013A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ef:30:19:a7:29:68:db:5a:8f:d1:b2:f6:d1:
                    e8:84:41:32:53:d9:fe:72:e3:a3:d4:93:c0:de:f7:
                    9d:02:7e:26:40:44:4d:9f:0f:b4:8e:6a:4a:74:73:
                    bc:bb:43:03:3b:bb:51:a1:92:5d:bf:fe:19:4e:c4:
                    b0:e1:7a:d5:8e:43:65:c3:ec:89:ad:27:f5:f9:d8:
                    ef:9a:ae:43:4b:cd:94:3f:97:0d:9c:5f:4f:de:e9:
                    0b:bf:65:21:45:86:c6:97:1e:9d:5d:e3:a8:08:cb:
                    35:e1:b2:1f:cc:9e:64:a8:b1:0b:7c:2d:0e:a0:1d:
                    ac:36:ea:c4:5b:64:27:1a:4c:f8:f8:c9:2c:16:61:
                    5b:96:76:00:04:09:9b:55:10:53:92:1b:f2:b9:01:
                    7a:62:e9:9e:06:d2:35:9e:8e:9d:40:12:e0:ea:95:
                    4e:63:bc:2f:bf:56:bb:39:89:79:82:78:d9:22:20:
                    2d:03:09:b1:5e:a9:f5:f1:a2:79:b0:c2:03:eb:ca:
                    9b:67:e6:69:ef:25:96:ad:97:82:81:b1:87:ee:bc:
                    ba:f7:33:71:79:db:58:5c:70:81:62:f0:d5:ea:7a:
                    2f:33:96:a1:63:e1:17:71:b8:e9:42:1a:af:dd:f0:
                    b9:cc:55:77:ba:34:84:6b:67:6b:b0:af:97:f0:fe:
                    17:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:7E:19:A9:95:01:8E:3B:79:FC:9F:85:19:20:40:CC:A7:6C:01:3A
            X509v3 Authority Key Identifier:
                keyid:D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39312e302f32342d3234203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:9c:7d:f9:63:40:28:c8:59:56:d5:30:6a:a8:c2:be:c2:4e:
         94:85:06:d3:4f:c1:7d:1c:37:17:5e:c2:fc:b4:6d:98:74:a0:
         d2:2a:f0:f3:9d:e9:6c:a3:95:4b:a7:c3:7d:43:13:50:35:dd:
         d5:02:68:2b:3a:46:82:84:90:7b:46:64:89:7c:46:e7:17:49:
         4d:f3:00:18:e7:31:9b:e8:99:7f:bd:b2:f9:0f:27:78:cf:94:
         ad:95:23:c5:e1:a4:af:67:17:0c:02:99:e4:70:29:e4:4c:44:
         99:7f:66:d2:3d:c4:37:b9:19:de:61:46:eb:64:00:f9:12:8c:
         07:57:46:82:2f:05:e9:3a:9d:a5:ae:69:01:88:7e:89:10:84:
         51:1b:dc:e3:78:a6:00:46:6d:46:f2:60:d7:ee:51:e6:a1:15:
         97:28:f1:1c:e0:f1:a2:b3:c8:56:93:cb:d4:87:1f:d3:f5:6f:
         4d:85:51:8d:c7:07:3c:1e:a3:c5:a9:b8:fe:9d:5b:67:43:b3:
         8a:00:af:0e:05:8d:f0:59:7a:73:4a:ac:2d:7e:97:6f:ac:dc:
         e5:bc:36:f6:51:54:1a:55:4a:e3:9e:72:00:5a:3f:39:16:62:
         15:ae:d6:37:7d:9b:0d:f3:e6:a4:c8:26:b0:a0:56:29:e4:6d:
         33:71:2e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 06:23:45 2025 by rpki-client