Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3230312e34362e3135362e302f32342d3234203d3e203238363135.roa
File:                     3230312e34362e3135362e302f32342d3234203d3e203238363135.roa (raw, json)
Hash identifier:          9n/02+mBGIwDS7lSMpuzV1sEUvzm0UePxLfZVg1ipWg=
Subject key identifier:   00:DA:CA:95:6F:53:B3:36:38:6E:ED:F1:0E:57:D8:F6:6C:6E:E8:86
Certificate issuer:       /CN=C9DFED00973A6F3B2A4CF8674718DE627A707A04
Certificate serial:       64949CEDDB9105B6BD49CCBB853C017138D01AD2
Authority key identifier: C9:DF:ED:00:97:3A:6F:3B:2A:4C:F8:67:47:18:DE:62:7A:70:7A:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3230312e34362e3135362e302f32342d3234203d3e203238363135.roa
Signing time:             Thu 30 Oct 2025 02:49:13 +0000
ROA not before:           Thu 30 Oct 2025 02:44:13 +0000
ROA not after:            Thu 29 Oct 2026 02:49:13 +0000
asID:                     28615
IP address blocks:        201.46.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.crl
                          rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 18:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:94:9c:ed:db:91:05:b6:bd:49:cc:bb:85:3c:01:71:38:d0:1a:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9DFED00973A6F3B2A4CF8674718DE627A707A04
        Validity
            Not Before: Oct 30 02:44:13 2025 GMT
            Not After : Oct 29 02:49:13 2026 GMT
        Subject: CN=00DACA956F53B336386EEDF10E57D8F66C6EE886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2b:de:da:d7:54:7d:7c:83:2b:15:e1:de:f9:
                    59:c5:77:ca:a4:51:69:45:55:fa:ce:46:e4:39:26:
                    f1:d8:42:02:8f:a4:d7:a2:68:0f:6d:20:8b:ad:48:
                    6c:ee:44:9f:38:6a:73:b4:45:c3:6a:fa:17:d1:0e:
                    14:cb:ba:ba:16:d2:f0:a1:0b:ef:51:9f:aa:a7:9d:
                    82:29:3e:92:6d:b7:dc:c7:51:97:80:30:4a:22:6c:
                    ba:5c:b0:4b:26:ec:e3:9e:82:b0:fa:e1:ef:39:46:
                    ba:c4:cc:83:5c:82:01:46:5f:6f:b1:fa:45:01:0a:
                    73:16:26:6a:41:b7:67:0b:64:13:fe:0d:9b:2c:95:
                    d5:4c:9d:6f:0c:75:88:20:ca:72:48:e2:00:ef:23:
                    50:18:c7:dd:2d:5f:5c:7b:f1:4f:15:e5:55:2e:07:
                    da:1f:fd:ec:fc:96:6a:65:9d:86:71:72:fb:a7:5b:
                    13:ea:a1:08:4b:68:26:d3:45:7d:e7:7e:17:74:a3:
                    60:a6:0b:9b:9b:e2:0d:0b:46:39:24:e3:b4:fa:80:
                    db:42:a0:36:9b:86:48:be:a9:2a:bd:72:2c:bf:48:
                    51:67:0a:cf:e1:c4:cc:dc:d6:dd:aa:ff:59:5c:f8:
                    f4:2a:7e:ab:21:b1:e2:f7:e3:bf:85:0a:5c:d8:87:
                    6e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:DA:CA:95:6F:53:B3:36:38:6E:ED:F1:0E:57:D8:F6:6C:6E:E8:86
            X509v3 Authority Key Identifier:
                keyid:C9:DF:ED:00:97:3A:6F:3B:2A:4C:F8:67:47:18:DE:62:7A:70:7A:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/C9DFED00973A6F3B2A4CF8674718DE627A707A04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DFED00973A6F3B2A4CF8674718DE627A707A04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3230312e34362e3135362e302f32342d3234203d3e203238363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.46.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:e2:82:e8:08:91:af:66:47:93:bb:eb:54:f3:ea:03:af:da:
         82:81:3a:57:6b:2e:91:09:2c:0c:6b:ff:79:4c:16:4f:aa:b9:
         1b:9c:05:11:24:38:c9:8e:d7:d0:03:9c:a7:d2:55:78:93:b4:
         f4:ca:76:31:c5:a1:ed:e3:c0:a5:78:96:b3:26:7d:2c:8f:b1:
         e4:02:a6:56:02:50:80:c4:8a:af:8a:19:76:c8:84:e4:55:e6:
         46:71:55:ed:69:40:79:a1:33:b1:1f:b7:ca:04:b3:ae:be:f5:
         ac:e9:3b:85:9c:34:34:4c:9f:23:85:21:40:64:fa:2c:a4:9e:
         75:6a:83:30:8e:27:fd:3c:66:04:09:74:f4:a9:2f:b3:58:4f:
         45:a0:85:c4:91:89:79:20:ac:c7:8a:99:cf:2e:ba:7a:5e:a7:
         08:e3:a9:84:13:f0:68:6e:46:ea:0d:19:16:51:9d:85:b4:35:
         0d:68:05:c7:a7:de:fd:e7:75:4b:80:23:8d:db:f8:a6:8b:68:
         2c:97:45:a3:f7:c3:6a:67:89:8c:40:c1:83:d4:a1:33:0a:7a:
         6c:97:9f:80:40:ad:1f:a5:78:6c:fb:4d:9d:f6:a8:ab:17:d9:
         ac:fe:fb:6a:ad:35:40:81:05:1e:84:61:dd:12:38:83:7b:a8:
         f2:a5:b1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:06:55 2025 by rpki-client