Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39322e302f32332d3233203d3e203533303437.roa
File:                     3137372e3130312e39322e302f32332d3233203d3e203533303437.roa (raw, json)
Hash identifier:          +pb/3Oy6bRv6VhxEWd0rjLn4unAkRN4P9TXrFC7eEII=
Subject key identifier:   AB:6B:0B:C3:E7:EC:F3:4E:C5:CC:7A:5E:C9:F6:EC:85:1A:D6:46:E1
Certificate issuer:       /CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Certificate serial:       35B5D65E5FF2257A814948EE087F762FADC311FB
Authority key identifier: D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39322e302f32332d3233203d3e203533303437.roa
Signing time:             Thu 06 Nov 2025 13:37:27 +0000
ROA not before:           Thu 06 Nov 2025 13:32:27 +0000
ROA not after:            Thu 05 Nov 2026 13:37:27 +0000
asID:                     53047
IP address blocks:        177.101.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 07 Nov 2025 16:57:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:b5:d6:5e:5f:f2:25:7a:81:49:48:ee:08:7f:76:2f:ad:c3:11:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
        Validity
            Not Before: Nov  6 13:32:27 2025 GMT
            Not After : Nov  5 13:37:27 2026 GMT
        Subject: CN=AB6B0BC3E7ECF34EC5CC7A5EC9F6EC851AD646E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2f:e2:36:4e:d6:3a:4f:52:ff:2f:d6:8d:18:
                    ef:85:9f:2b:90:40:fd:70:0d:48:cd:c2:c7:8a:15:
                    53:0f:7b:29:4d:d7:69:4e:e6:7c:99:d0:71:4e:c1:
                    35:85:b2:a8:1d:45:15:a2:69:d5:75:03:cd:5b:9d:
                    3f:6f:b7:4d:db:79:da:79:ee:1f:6f:c5:fb:5a:46:
                    0d:2a:31:43:4c:a5:a7:68:f7:a6:19:3f:f2:8c:9e:
                    15:c3:0a:e3:ca:02:7c:00:4f:f9:60:f3:c2:f5:ed:
                    c1:cd:64:c2:a0:1d:48:87:87:21:e1:6e:db:19:c6:
                    40:61:e2:ff:f6:93:cd:69:e7:6a:0a:9c:63:ab:9f:
                    72:03:a8:a5:4d:9a:05:57:1d:8c:a1:3f:06:0a:9d:
                    70:62:9b:8c:57:d9:f5:9a:37:3e:8c:7b:e3:f2:a5:
                    d0:6f:7a:31:63:63:27:7c:05:06:62:e2:5b:d5:0c:
                    12:ea:71:65:54:e0:a0:4d:25:e2:22:ca:1c:77:c7:
                    06:5b:59:81:69:ef:b9:c6:90:83:45:1a:8c:2c:f0:
                    ed:ca:14:cc:22:05:e4:29:c4:6a:38:31:67:8a:e8:
                    8f:ba:c7:2f:da:27:2a:c3:59:08:bb:34:42:c5:a6:
                    da:53:dd:fc:f1:22:79:31:01:89:3f:d9:0a:3f:70:
                    2a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:6B:0B:C3:E7:EC:F3:4E:C5:CC:7A:5E:C9:F6:EC:85:1A:D6:46:E1
            X509v3 Authority Key Identifier:
                keyid:D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39322e302f32332d3233203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:dc:ad:b1:20:7d:03:2a:0e:60:b6:e7:0b:2d:57:df:91:1e:
         b0:92:e0:79:50:0a:2b:50:3c:e8:45:7a:0c:ee:bf:82:a5:49:
         34:63:04:a9:23:3d:7e:4e:d9:96:d5:45:a5:49:4e:fb:18:f2:
         5e:ae:d3:03:5d:0f:07:02:a5:fb:03:db:42:03:54:79:a4:ff:
         6b:e3:99:02:e1:00:7b:d1:36:34:51:ed:e4:93:b1:99:f1:a9:
         cf:e6:25:89:05:f4:f5:87:f3:61:91:21:e9:1c:6c:a1:60:24:
         90:db:9d:b4:13:0d:27:9a:f9:e0:c4:fe:7a:67:ae:fb:af:b9:
         2a:e3:1f:f4:32:86:bc:ec:ad:ba:11:73:92:74:c3:5a:a6:9a:
         28:13:ac:0a:79:35:aa:e1:e5:2b:0f:e3:ed:e9:50:57:15:b3:
         0c:62:b6:a3:8a:41:dc:87:f8:c7:da:62:99:5e:a0:e2:e3:65:
         65:8a:91:6e:d5:42:99:52:2c:83:85:34:31:49:20:d8:02:19:
         b0:da:5d:18:59:da:dc:76:8c:01:98:64:49:34:c6:52:50:4c:
         21:1f:dd:59:0c:c5:2c:d7:bc:9f:c0:5b:a9:e6:38:73:03:48:
         b6:36:86:54:37:4f:21:00:18:75:49:f1:61:d4:4c:0a:bf:5d:
         b2:af:a8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 06:25:41 2025 by rpki-client