Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3230312e34362e3135332e302f32342d3234203d3e203238363135.roa
File:                     3230312e34362e3135332e302f32342d3234203d3e203238363135.roa (raw, json)
Hash identifier:          yTC3eMgs9PwnxqRBlCWQTPPMCYEMAk4Cb6NwZ3ciyJw=
Subject key identifier:   EB:E4:98:3C:16:98:2B:64:22:B6:FD:52:88:2A:5E:E1:03:DF:57:46
Certificate issuer:       /CN=C9DFED00973A6F3B2A4CF8674718DE627A707A04
Certificate serial:       4B6E86D3BB12D3D3C7B8492C977550B1E312A2FA
Authority key identifier: C9:DF:ED:00:97:3A:6F:3B:2A:4C:F8:67:47:18:DE:62:7A:70:7A:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3230312e34362e3135332e302f32342d3234203d3e203238363135.roa
Signing time:             Thu 30 Oct 2025 02:48:58 +0000
ROA not before:           Thu 30 Oct 2025 02:43:58 +0000
ROA not after:            Thu 29 Oct 2026 02:48:58 +0000
asID:                     28615
IP address blocks:        201.46.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.crl
                          rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 18:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:6e:86:d3:bb:12:d3:d3:c7:b8:49:2c:97:75:50:b1:e3:12:a2:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9DFED00973A6F3B2A4CF8674718DE627A707A04
        Validity
            Not Before: Oct 30 02:43:58 2025 GMT
            Not After : Oct 29 02:48:58 2026 GMT
        Subject: CN=EBE4983C16982B6422B6FD52882A5EE103DF5746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a6:13:6d:bc:bd:d3:c2:8f:c5:c9:e3:f8:a6:
                    1d:a4:0b:cf:50:c3:a8:6c:1e:58:8a:4d:09:b0:c9:
                    db:7a:07:dd:3e:da:c2:7e:44:ac:c7:ef:b4:8f:3a:
                    f6:1b:5f:b9:25:43:9c:aa:5f:99:5f:aa:e7:83:ee:
                    ff:57:33:00:f9:69:1b:2c:75:76:b6:d8:ab:27:3e:
                    0c:37:49:66:86:9f:c8:7b:d2:49:f1:b7:4e:ed:43:
                    d5:18:50:cb:6b:41:59:2a:e6:36:72:46:b3:fd:e2:
                    b8:a2:ee:4f:0e:06:03:03:88:fa:9a:b8:77:f5:07:
                    2a:34:93:69:b0:53:d5:bf:54:22:2d:cc:08:a0:93:
                    9e:cf:4b:72:5b:fe:db:54:cf:1c:71:85:9e:2d:b0:
                    94:45:1c:7d:52:90:8a:58:03:3c:a0:0c:40:c1:84:
                    00:98:1a:ea:ef:8c:37:9c:72:6b:5f:65:1a:93:08:
                    80:04:07:db:b7:85:82:26:23:08:6e:20:b0:de:82:
                    58:c0:eb:c3:f2:22:e4:38:72:8b:e0:71:2e:07:24:
                    0a:49:fc:17:32:6f:61:9d:7d:1e:eb:ca:c0:a8:e1:
                    22:5d:d0:61:fe:1c:4f:b3:f7:15:60:3f:47:33:4e:
                    70:67:6f:8e:a1:ea:08:aa:7f:1d:ec:72:18:b3:6c:
                    8b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E4:98:3C:16:98:2B:64:22:B6:FD:52:88:2A:5E:E1:03:DF:57:46
            X509v3 Authority Key Identifier:
                keyid:C9:DF:ED:00:97:3A:6F:3B:2A:4C:F8:67:47:18:DE:62:7A:70:7A:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3230312e34362e3135332e302f32342d3234203d3e203238363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.46.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:82:f1:af:97:b0:73:cd:a4:be:f9:2f:18:1d:24:2b:14:db:
         d9:0d:4d:63:6d:eb:d6:db:ba:4b:66:d1:b4:b9:a4:06:36:2c:
         ce:84:69:8a:2e:a7:e5:71:5c:11:d5:92:e1:0c:7a:7c:22:d1:
         40:5a:00:60:d2:c2:d6:0d:6a:97:f5:67:c5:ba:95:6b:68:85:
         03:e3:7f:54:a2:ad:fd:23:1c:fc:ee:cc:0b:be:58:75:18:96:
         6b:6d:c9:c9:3a:a1:45:dd:91:d9:e1:a7:59:8a:22:1a:c9:d8:
         bb:20:cb:92:75:1e:52:0c:18:2b:b8:f8:77:07:66:ee:09:a5:
         f8:18:82:22:0d:35:11:03:29:62:a2:2b:2f:ec:6e:f7:dc:95:
         24:f6:f5:76:6e:30:fa:2d:a9:19:6e:e9:26:e7:db:a3:b1:29:
         b5:9e:55:a8:8c:9c:29:fb:ed:9c:0b:41:d1:12:b0:a0:1e:42:
         1b:3f:6f:b1:f9:47:9e:6f:c8:8b:d7:10:8a:81:ac:7d:0a:b7:
         a1:86:96:3c:11:05:9c:7d:b8:88:ab:b6:d5:e7:3b:e4:06:ca:
         0c:4b:32:3c:29:d2:86:22:37:ed:7f:d2:88:80:22:9c:3f:fb:
         f8:62:ea:f7:be:f1:8d:43:77:67:ce:91:57:47:d0:f8:8e:3a:
         c3:d4:36:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:06:51 2025 by rpki-client