Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39352e302f32342d3234203d3e203533303437.roa
File:                     3137372e3130312e39352e302f32342d3234203d3e203533303437.roa (raw, json)
Hash identifier:          ADOnJ5LdioXzQjTgWDzu91FksFdb4jXqGCzOLAagg/I=
Subject key identifier:   19:46:A5:B4:AD:83:75:20:7B:80:DC:CD:3A:3D:88:DA:F0:76:45:BC
Certificate issuer:       /CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Certificate serial:       76009A94C8549152F9C93EE93312291E04DBB49F
Authority key identifier: D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39352e302f32342d3234203d3e203533303437.roa
Signing time:             Thu 06 Nov 2025 13:37:25 +0000
ROA not before:           Thu 06 Nov 2025 13:32:25 +0000
ROA not after:            Thu 05 Nov 2026 13:37:25 +0000
asID:                     53047
IP address blocks:        177.101.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 07 Nov 2025 16:57:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:00:9a:94:c8:54:91:52:f9:c9:3e:e9:33:12:29:1e:04:db:b4:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
        Validity
            Not Before: Nov  6 13:32:25 2025 GMT
            Not After : Nov  5 13:37:25 2026 GMT
        Subject: CN=1946A5B4AD8375207B80DCCD3A3D88DAF07645BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:62:bf:d9:c5:87:bf:33:c0:30:f7:99:e6:08:
                    ae:3d:39:8f:c9:8e:55:34:ec:73:4c:32:32:0a:e1:
                    9e:03:7c:c7:d2:70:58:63:ac:f1:87:65:a9:a1:cb:
                    30:f2:39:1a:e2:51:af:f5:f3:07:d0:80:b6:9b:2a:
                    b4:22:41:84:98:86:d9:41:6c:17:93:c5:8b:03:e4:
                    a0:71:c2:d0:cf:96:9c:0b:1f:41:57:11:46:32:2a:
                    e1:70:e0:cd:01:fc:55:c3:e4:f7:18:22:2c:8a:fd:
                    5a:e2:73:57:6c:41:61:c1:12:8c:e2:0f:37:70:3b:
                    d6:20:8f:50:b0:05:e2:cc:72:b7:63:62:f1:98:e6:
                    9b:1c:44:2b:0d:c6:6a:81:33:e9:67:96:e7:e7:4d:
                    77:4c:b6:cf:77:96:a6:14:14:ce:a3:af:84:ee:24:
                    a1:50:a1:02:c0:cb:29:e3:92:71:5f:bd:c6:54:57:
                    bd:30:83:06:bc:84:78:b6:d5:b1:9d:1a:0e:68:f7:
                    84:2f:a0:ed:b3:76:11:96:d4:cd:2b:4a:23:3e:86:
                    88:c0:63:ed:00:bc:b8:58:2c:47:b0:8c:7a:01:0e:
                    7b:2c:1b:bc:a7:e7:87:c9:c3:19:63:57:13:34:7c:
                    dd:94:f3:c8:8c:14:5c:db:5a:58:e0:52:d6:b6:bf:
                    79:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:46:A5:B4:AD:83:75:20:7B:80:DC:CD:3A:3D:88:DA:F0:76:45:BC
            X509v3 Authority Key Identifier:
                keyid:D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39352e302f32342d3234203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:c6:2a:43:37:47:9e:b1:3e:d3:ba:4b:e0:cb:57:cb:25:8c:
         ff:cf:89:aa:a6:a7:54:ac:2e:14:cb:c1:bf:e7:85:05:33:57:
         81:31:35:91:c1:96:34:d9:49:3c:b5:53:32:21:fa:20:e9:17:
         ab:2b:cf:dc:79:f6:6b:c1:ad:b9:2c:a3:0e:6c:2e:08:50:01:
         8d:95:16:bb:20:16:06:ba:2c:16:ee:77:27:6b:e7:6f:f5:6e:
         5c:64:66:b5:ef:96:3c:78:1c:7f:cb:47:c5:b4:36:10:b8:be:
         4b:a0:72:77:42:d6:27:a4:c6:18:24:bb:0f:f9:64:46:69:1b:
         06:24:65:97:ee:51:44:df:0f:d6:3f:76:80:d8:5e:ca:4a:80:
         46:8e:bb:9f:f2:1a:47:2a:a5:c6:6a:1b:26:87:a4:a0:21:40:
         de:27:18:a4:17:d2:bd:98:5d:26:a4:c9:cb:3a:05:1c:b2:7b:
         7d:3c:c8:cb:2f:e4:89:e5:29:0c:5b:2c:e2:71:8f:9a:a8:56:
         0f:09:30:ca:6b:81:7c:56:df:e0:49:c7:13:17:53:08:e5:a3:
         af:aa:15:e8:af:44:62:05:b6:ad:4f:89:a1:cb:3a:60:3c:35:
         59:a0:99:40:3c:7a:3b:87:63:b0:8a:ae:a7:f9:a7:07:b0:67:
         9a:13:f3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 06:23:49 2025 by rpki-client