Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39322e302f32342d3234203d3e203533303437.roa
File:                     3137372e3130312e39322e302f32342d3234203d3e203533303437.roa (raw, json)
Hash identifier:          QNb4YrxCjNygTCtc6f04bU4xZns275tws94Bf6W8PEg=
Subject key identifier:   64:A9:07:53:A0:49:FA:05:EF:52:01:7B:49:04:EC:5E:A9:C3:5B:AE
Certificate issuer:       /CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Certificate serial:       3737E1306ECF7BAA8DDEF824D5C7EA27FFEBA793
Authority key identifier: D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39322e302f32342d3234203d3e203533303437.roa
Signing time:             Thu 06 Nov 2025 13:37:26 +0000
ROA not before:           Thu 06 Nov 2025 13:32:26 +0000
ROA not after:            Thu 05 Nov 2026 13:37:26 +0000
asID:                     53047
IP address blocks:        177.101.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 07 Nov 2025 16:57:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:37:e1:30:6e:cf:7b:aa:8d:de:f8:24:d5:c7:ea:27:ff:eb:a7:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
        Validity
            Not Before: Nov  6 13:32:26 2025 GMT
            Not After : Nov  5 13:37:26 2026 GMT
        Subject: CN=64A90753A049FA05EF52017B4904EC5EA9C35BAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:60:0b:6d:92:ec:76:25:82:50:f9:d8:78:7c:
                    85:28:3e:86:ff:9c:f8:89:65:15:cb:37:38:21:ee:
                    81:de:42:26:68:b2:d5:25:fa:b2:fd:66:77:bf:99:
                    72:2d:06:96:e0:27:77:0f:bd:de:75:3f:65:f3:5a:
                    21:8d:52:07:51:82:c2:cc:cc:5b:e9:55:25:5f:76:
                    18:26:25:c0:69:f5:f5:c0:a2:13:c3:db:f1:78:77:
                    d0:1b:cd:75:cb:54:40:a7:b6:0e:2d:d2:43:fa:00:
                    4b:87:36:c7:6f:5d:32:c5:31:a7:22:38:e4:86:4a:
                    6d:c2:57:da:64:e0:21:58:c8:52:35:1a:56:8d:8f:
                    88:24:f8:a3:50:1f:df:cc:11:8d:e0:31:df:d1:63:
                    22:de:a3:62:e0:18:c0:b9:0a:d4:84:a5:c2:e3:bb:
                    eb:28:c9:ee:6d:20:65:dd:a6:29:f0:57:48:c9:ca:
                    1d:eb:75:b6:5f:8f:ad:06:73:1a:1a:5a:84:9a:e1:
                    d0:bc:8a:fa:23:57:ba:b7:26:87:12:ad:db:ce:9d:
                    94:f3:67:fc:3c:ca:46:f7:10:d4:81:b2:6d:a9:b6:
                    a7:a4:23:9b:5e:3f:d3:f2:7c:4c:bd:89:c3:f2:7c:
                    1d:37:8a:7f:18:2c:e3:a3:f9:c2:79:60:ba:9e:a3:
                    b0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A9:07:53:A0:49:FA:05:EF:52:01:7B:49:04:EC:5E:A9:C3:5B:AE
            X509v3 Authority Key Identifier:
                keyid:D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39322e302f32342d3234203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:a3:a2:50:1a:a8:77:f8:d1:ca:54:c3:1f:45:22:f3:f3:6b:
         53:8e:75:61:d2:54:18:be:44:7b:29:9f:4b:08:4a:d7:9f:1c:
         ef:6b:9b:89:ce:b1:3a:e6:1d:4f:5d:ff:d1:8d:6f:1a:1f:5e:
         69:32:b5:06:fc:8c:47:7a:40:4d:17:93:d6:9c:6b:27:67:42:
         27:d9:95:cb:46:e2:05:fb:e9:80:f7:88:cd:a6:fe:66:c6:b1:
         f3:7a:d0:6a:bf:c1:98:40:e0:ce:55:4b:84:49:34:62:35:76:
         3c:05:2e:e0:7c:6b:38:8e:94:d0:32:65:d9:12:b3:bc:79:aa:
         1e:a8:ef:0d:25:d6:29:f4:f8:1f:2a:1b:9d:bf:0d:63:36:b9:
         41:76:bc:b8:8d:80:31:13:ff:34:3c:61:53:1f:d8:ff:5b:c9:
         a2:a9:d2:e5:fb:6a:05:e2:72:3c:2e:0f:42:3d:26:c5:5f:10:
         a7:ef:60:e6:81:80:a8:6c:8a:17:cf:9a:d9:d6:46:cf:f2:23:
         8a:28:61:b6:a2:2f:72:ab:50:ec:6a:68:0a:a3:e6:7b:32:58:
         cf:96:4c:22:54:68:82:a1:d6:b3:84:8b:c3:d3:c0:e5:e5:da:
         51:f4:f1:8a:b8:4f:18:03:84:4a:4a:9d:84:30:1e:99:0f:b0:
         32:1f:9e:54
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUNzfhMG7Pe6qN3vgk1cfqJ//rp5MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQ1MDMzOEE0QzQ3QkQ5NUE3RUVCNDhCRERBNUMxQjk3
NjUyMjZGMTAeFw0yNTExMDYxMzMyMjZaFw0yNjExMDUxMzM3MjZaMDMxMTAvBgNV
BAMTKDY0QTkwNzUzQTA0OUZBMDVFRjUyMDE3QjQ5MDRFQzVFQTlDMzVCQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSYAttkux2JYJQ+dh4fIUoPob/
nPiJZRXLNzgh7oHeQiZostUl+rL9Zne/mXItBpbgJ3cPvd51P2XzWiGNUgdRgsLM
zFvpVSVfdhgmJcBp9fXAohPD2/F4d9AbzXXLVECntg4t0kP6AEuHNsdvXTLFMaci
OOSGSm3CV9pk4CFYyFI1GlaNj4gk+KNQH9/MEY3gMd/RYyLeo2LgGMC5CtSEpcLj
u+soye5tIGXdpinwV0jJyh3rdbZfj60GcxoaWoSa4dC8ivojV7q3JocSrdvOnZTz
Z/w8ykb3ENSBsm2ptqekI5teP9PyfEy9icPyfB03in8YLOOj+cJ5YLqeo7DlAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUZKkHU6BJ+gXvUgF7SQTsXqnDW64wHwYDVR0j
BBgwFoAU1FAzikxHvZWn7rSL3aXBuXZSJvEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlhIb21GaDJwQlJyMkFaeHdaZGJZcFRqcEx1Ujlxa1JlRHhDUVRTZFlC
SmcvMC9ENDUwMzM4QTRDNDdCRDk1QTdFRUI0OEJEREE1QzFCOTc2NTIyNkYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0NTAzMzhBNEM0N0JEOTVB
N0VFQjQ4QkREQTVDMUI5NzY1MjI2RjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZYSG9tRmgycEJScjJBWnh3WmRiWXBUanBMdVI5cWtSZUR4Q1FUU2RZQkpnLzAv
MzEzNzM3MmUzMTMwMzEyZTM5MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMz
MzAzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsWVcMA0GCSqGSIb3DQEBCwUAA4IBAQAYo6JQGqh3
+NHKVMMfRSLz82tTjnVh0lQYvkR7KZ9LCErXnxzva5uJzrE65h1PXf/RjW8aH15p
MrUG/IxHekBNF5PWnGsnZ0In2ZXLRuIF++mA94jNpv5mxrHzetBqv8GYQODOVUuE
STRiNXY8BS7gfGs4jpTQMmXZErO8eaoeqO8NJdYp9PgfKhudvw1jNrlBdry4jYAx
E/80PGFTH9j/W8miqdLl+2oF4nI8Lg9CPSbFXxCn72DmgYCobIoXz5rZ1kbP8iOK
KGG2oi9yq1DsamgKo+Z7MljPlkwiVGiCodazhIvD08Dl5dpR9PGKuE8YA4RKSp2E
MB6ZD7AyH55U
-----END CERTIFICATE-----
Generated at Fri Nov 7 06:22:09 2025 by rpki-client