Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39342e302f32342d3234203d3e203533303437.roa
File:                     3137372e3130312e39342e302f32342d3234203d3e203533303437.roa (raw, json)
Hash identifier:          RvKdCnuURPNfkSyH2kZulFqTLJXVbSn5ncei6/rhXAk=
Subject key identifier:   8D:BB:F5:C6:3D:A2:6A:73:4B:BF:7E:3D:A4:5C:86:1C:A8:32:F7:3D
Certificate issuer:       /CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Certificate serial:       6F57EB49C80392B3C62159639D08C3F26165203B
Authority key identifier: D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39342e302f32342d3234203d3e203533303437.roa
Signing time:             Thu 06 Nov 2025 13:37:26 +0000
ROA not before:           Thu 06 Nov 2025 13:32:26 +0000
ROA not after:            Thu 05 Nov 2026 13:37:26 +0000
asID:                     53047
IP address blocks:        177.101.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 07 Nov 2025 16:57:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:57:eb:49:c8:03:92:b3:c6:21:59:63:9d:08:c3:f2:61:65:20:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
        Validity
            Not Before: Nov  6 13:32:26 2025 GMT
            Not After : Nov  5 13:37:26 2026 GMT
        Subject: CN=8DBBF5C63DA26A734BBF7E3DA45C861CA832F73D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a3:52:e8:3d:dd:c7:bb:26:50:97:51:07:aa:
                    6e:a6:fe:96:71:85:e6:00:42:6b:22:7c:bf:b0:d8:
                    22:38:82:44:70:c5:da:a0:f5:2a:0b:17:d4:bf:c9:
                    04:b8:1b:76:a4:e9:26:b9:ac:f8:1c:e2:08:79:1a:
                    b8:70:34:08:f4:ab:e1:ae:f4:a0:1d:b5:fe:d5:e5:
                    56:04:66:40:11:8a:e3:12:c0:53:c9:e4:26:c6:de:
                    99:cb:76:29:80:03:f3:d7:59:70:2a:ef:5d:53:b4:
                    a5:cd:93:3a:64:80:c6:ea:31:f2:78:72:11:c9:dd:
                    e9:ed:31:ca:00:63:57:8d:5e:74:77:2c:25:19:93:
                    81:b9:27:4d:50:ca:9e:39:83:5e:c6:d9:13:19:bd:
                    a4:e2:25:c2:5a:fd:38:e3:7a:b8:ab:22:b0:09:97:
                    ad:24:f5:87:bc:be:62:1a:d7:56:ea:da:ba:0f:50:
                    cc:2c:9c:e3:52:36:67:f9:68:10:6e:f2:bb:69:e9:
                    6d:54:f9:50:a1:7c:43:d5:15:d3:52:66:d7:7a:1b:
                    11:07:3a:be:11:d2:5c:74:5e:04:f0:fb:a8:66:aa:
                    97:ec:11:8d:44:be:f1:59:5a:6a:81:e5:96:40:b7:
                    af:98:6b:92:4b:18:c3:16:95:cb:be:26:7a:61:bb:
                    20:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:BB:F5:C6:3D:A2:6A:73:4B:BF:7E:3D:A4:5C:86:1C:A8:32:F7:3D
            X509v3 Authority Key Identifier:
                keyid:D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39342e302f32342d3234203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:91:18:e8:b7:13:35:6e:63:7b:06:15:5c:81:ca:60:45:d5:
         cc:7e:6c:8f:c9:a1:c7:dd:95:44:93:b0:49:78:a2:bc:0d:b4:
         69:c4:21:7a:08:54:17:8d:1f:ff:c2:c9:e8:35:e3:fb:70:f4:
         31:76:4c:46:9b:7e:1e:42:3f:6c:32:18:d6:db:12:66:15:94:
         85:ab:62:07:69:19:bc:03:96:2d:e6:e3:9a:3a:b6:2e:45:19:
         40:66:49:39:1a:97:5d:46:45:f4:d1:fe:29:52:41:1e:a8:eb:
         ff:8f:80:6d:1e:41:73:1c:f3:19:58:84:e4:c9:56:7a:f3:cf:
         67:82:65:c7:f6:df:a3:13:58:d0:94:95:da:3f:d9:1a:54:39:
         6e:42:26:51:82:e5:4c:86:ee:93:be:76:c9:2f:42:8a:5b:7f:
         90:3b:64:fc:e6:da:ae:d6:77:7d:43:93:cc:23:b1:56:82:44:
         e1:9a:be:35:e6:35:8e:04:68:bc:74:12:e9:d2:77:80:8e:26:
         a9:36:c6:fe:7f:d7:37:ff:ce:02:c1:b0:bf:c1:8f:71:b3:41:
         58:ed:86:66:40:85:cb:9a:44:79:57:ef:5b:8f:82:47:f0:f8:
         c6:b6:11:fc:33:88:3b:b4:38:f8:b6:bd:f8:55:6b:45:d7:6b:
         47:3d:54:51
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUb1frScgDkrPGIVljnQjD8mFlIDswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQ1MDMzOEE0QzQ3QkQ5NUE3RUVCNDhCRERBNUMxQjk3
NjUyMjZGMTAeFw0yNTExMDYxMzMyMjZaFw0yNjExMDUxMzM3MjZaMDMxMTAvBgNV
BAMTKDhEQkJGNUM2M0RBMjZBNzM0QkJGN0UzREE0NUM4NjFDQTgzMkY3M0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwo1LoPd3HuyZQl1EHqm6m/pZx
heYAQmsifL+w2CI4gkRwxdqg9SoLF9S/yQS4G3ak6Sa5rPgc4gh5GrhwNAj0q+Gu
9KAdtf7V5VYEZkARiuMSwFPJ5CbG3pnLdimAA/PXWXAq711TtKXNkzpkgMbqMfJ4
chHJ3entMcoAY1eNXnR3LCUZk4G5J01Qyp45g17G2RMZvaTiJcJa/TjjerirIrAJ
l60k9Ye8vmIa11bq2roPUMwsnONSNmf5aBBu8rtp6W1U+VChfEPVFdNSZtd6GxEH
Or4R0lx0XgTw+6hmqpfsEY1EvvFZWmqB5ZZAt6+Ya5JLGMMWlcu+JnphuyDjAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUjbv1xj2ianNLv349pFyGHKgy9z0wHwYDVR0j
BBgwFoAU1FAzikxHvZWn7rSL3aXBuXZSJvEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlhIb21GaDJwQlJyMkFaeHdaZGJZcFRqcEx1Ujlxa1JlRHhDUVRTZFlC
SmcvMC9ENDUwMzM4QTRDNDdCRDk1QTdFRUI0OEJEREE1QzFCOTc2NTIyNkYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0NTAzMzhBNEM0N0JEOTVB
N0VFQjQ4QkREQTVDMUI5NzY1MjI2RjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZYSG9tRmgycEJScjJBWnh3WmRiWXBUanBMdVI5cWtSZUR4Q1FUU2RZQkpnLzAv
MzEzNzM3MmUzMTMwMzEyZTM5MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMz
MzAzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsWVeMA0GCSqGSIb3DQEBCwUAA4IBAQBbkRjotxM1
bmN7BhVcgcpgRdXMfmyPyaHH3ZVEk7BJeKK8DbRpxCF6CFQXjR//wsnoNeP7cPQx
dkxGm34eQj9sMhjW2xJmFZSFq2IHaRm8A5Yt5uOaOrYuRRlAZkk5GpddRkX00f4p
UkEeqOv/j4BtHkFzHPMZWITkyVZ6889ngmXH9t+jE1jQlJXaP9kaVDluQiZRguVM
hu6TvnbJL0KKW3+QO2T85tqu1nd9Q5PMI7FWgkThmr415jWOBGi8dBLp0neAjiap
Nsb+f9c3/84CwbC/wY9xs0FY7YZmQIXLmkR5V+9bj4JH8PjGthH8M4g7tDj4tr34
VWtF12tHPVRR
-----END CERTIFICATE-----
Generated at Fri Nov 7 06:21:42 2025 by rpki-client