Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3230312e34362e3134372e302f32342d3234203d3e203238363135.roa
File:                     3230312e34362e3134372e302f32342d3234203d3e203238363135.roa (raw, json)
Hash identifier:          cVC5g8s99UJxstQdhJ0ioozNQoliJKBr1ZgwEYX/S7g=
Subject key identifier:   2A:20:67:DD:F3:CC:3A:07:82:C0:00:90:4C:CD:64:DA:1D:99:23:D6
Certificate issuer:       /CN=C9DFED00973A6F3B2A4CF8674718DE627A707A04
Certificate serial:       2158D09F323CB0D2495484DE06548B789CD040BC
Authority key identifier: C9:DF:ED:00:97:3A:6F:3B:2A:4C:F8:67:47:18:DE:62:7A:70:7A:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3230312e34362e3134372e302f32342d3234203d3e203238363135.roa
Signing time:             Thu 30 Oct 2025 02:48:56 +0000
ROA not before:           Thu 30 Oct 2025 02:43:56 +0000
ROA not after:            Thu 29 Oct 2026 02:48:56 +0000
asID:                     28615
IP address blocks:        201.46.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.crl
                          rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 18:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:58:d0:9f:32:3c:b0:d2:49:54:84:de:06:54:8b:78:9c:d0:40:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9DFED00973A6F3B2A4CF8674718DE627A707A04
        Validity
            Not Before: Oct 30 02:43:56 2025 GMT
            Not After : Oct 29 02:48:56 2026 GMT
        Subject: CN=2A2067DDF3CC3A0782C000904CCD64DA1D9923D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7f:5c:5f:24:d3:e8:9c:52:f2:2d:3c:a7:3b:
                    c0:8b:11:b0:d9:0a:99:23:c1:71:ef:3c:2e:78:f7:
                    c3:96:30:09:1c:7f:13:5e:47:3a:23:2b:58:68:f8:
                    ca:d3:02:ac:17:c3:c7:03:98:fa:ff:a8:55:8e:7b:
                    0f:75:b3:e1:0f:f0:fb:13:53:3b:14:43:ff:6e:b2:
                    8e:4c:1a:b9:9a:93:51:a6:08:28:3b:a1:19:db:b9:
                    08:90:a1:96:dc:7d:d1:e5:2d:fe:fc:1f:0f:3a:d0:
                    2f:69:a6:0c:cd:df:5c:11:75:e4:6b:40:fc:1b:c0:
                    8c:af:92:c2:6e:58:33:29:19:6f:be:09:4b:18:3f:
                    5b:e6:46:94:de:93:40:03:ff:75:d3:74:81:65:cc:
                    e6:b6:50:2d:4c:25:f2:17:32:0a:eb:64:2a:41:d2:
                    8b:ad:c4:f0:1c:03:27:39:1a:74:63:7f:cf:0f:2f:
                    61:43:d0:e3:d4:55:eb:68:84:0d:48:8d:4e:c6:9d:
                    6d:2e:44:f6:1d:f1:ee:c5:13:15:52:c0:48:58:3d:
                    89:e7:e7:71:82:68:42:2e:52:f2:78:d0:44:9a:1b:
                    08:c3:ca:42:03:c3:62:3f:c1:a8:e9:c6:d1:19:79:
                    2a:29:b5:aa:f6:df:86:64:c6:ae:fd:d3:9a:55:f7:
                    63:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:20:67:DD:F3:CC:3A:07:82:C0:00:90:4C:CD:64:DA:1D:99:23:D6
            X509v3 Authority Key Identifier:
                keyid:C9:DF:ED:00:97:3A:6F:3B:2A:4C:F8:67:47:18:DE:62:7A:70:7A:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3230312e34362e3134372e302f32342d3234203d3e203238363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.46.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:56:70:04:ce:c1:de:99:dc:3a:6d:ff:e3:45:4a:76:ac:d8:
         8d:ed:ef:7a:f6:8b:5e:37:43:c5:5e:c1:34:7b:f9:08:b1:29:
         1e:56:30:25:b1:72:61:c5:dc:e8:c1:9a:e8:6b:01:5f:de:62:
         ca:86:57:60:7a:51:5e:a1:c4:6f:65:aa:d9:bf:74:8c:72:54:
         aa:00:0f:7f:e2:e4:e1:a3:72:7e:ba:28:82:c4:25:7b:72:6e:
         bf:5f:d2:07:d2:fe:a3:77:07:5b:2e:3e:18:4e:04:d5:e8:53:
         af:5b:1c:a8:7e:c4:99:e5:18:6e:50:a3:75:e3:f8:7b:d0:0f:
         2b:dd:1b:71:78:55:44:ad:27:d3:cc:cb:51:de:9f:a7:ef:45:
         63:32:1b:00:15:da:8c:d2:6d:66:ec:d4:b8:3d:6b:02:0b:8a:
         10:65:41:1f:ca:dc:69:a7:f3:45:87:90:3b:42:4a:f5:2c:f6:
         8f:f0:9b:57:5f:b2:80:fc:cf:d1:ef:bb:06:22:28:7c:bc:07:
         80:f9:3f:9c:55:93:02:60:a5:b4:85:99:fc:49:1e:0e:d7:c7:
         85:68:75:95:b6:8f:50:87:52:28:10:53:33:5e:b0:ba:ea:36:
         3f:fb:ac:de:0c:34:6f:85:b9:f0:32:32:d8:aa:ff:75:40:a5:
         73:a2:34:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:06:51 2025 by rpki-client