Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3138372e302f32342d3234203d3e203533303338.roa
File:                     3137372e3135342e3138372e302f32342d3234203d3e203533303338.roa (raw, json)
Hash identifier:          qiBN8dxt/4yNHYYgzDD/O33kaS23hq7GmTlZjq79pDg=
Subject key identifier:   A7:57:56:54:08:E3:2D:22:9A:7B:B5:78:93:D0:17:BF:03:04:9B:49
Certificate issuer:       /CN=47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832
Certificate serial:       2E746FA9C37FA7D1C9F0E6245DEBFD66C5E134CA
Authority key identifier: 47:F5:D4:FF:59:FF:38:92:F3:D2:3C:49:FF:06:28:BA:F6:AC:18:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3138372e302f32342d3234203d3e203533303338.roa
Signing time:             Mon 03 Nov 2025 05:06:40 +0000
ROA not before:           Mon 03 Nov 2025 05:01:40 +0000
ROA not after:            Mon 02 Nov 2026 05:06:40 +0000
asID:                     53038
IP address blocks:        177.154.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.crl
                          rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 02:40:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:74:6f:a9:c3:7f:a7:d1:c9:f0:e6:24:5d:eb:fd:66:c5:e1:34:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832
        Validity
            Not Before: Nov  3 05:01:40 2025 GMT
            Not After : Nov  2 05:06:40 2026 GMT
        Subject: CN=A757565408E32D229A7BB57893D017BF03049B49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5a:7e:49:86:06:51:74:6a:80:14:db:45:11:
                    6e:de:5f:70:5b:5a:0c:68:cd:15:49:c2:ab:d4:12:
                    b7:63:b3:28:15:05:d0:59:a3:c9:34:a1:48:ae:c5:
                    c0:c8:cd:8f:28:80:9e:40:a6:92:9f:e1:23:33:18:
                    b6:84:f5:0b:f6:b2:37:ce:45:71:80:fa:b6:d6:ae:
                    aa:0a:58:1b:e3:0f:60:1c:ed:f4:a4:34:8b:62:3f:
                    89:e9:2c:6a:0c:3b:61:85:32:52:c1:57:88:c6:53:
                    f0:a4:ee:79:cb:31:9c:5d:1b:39:7c:d7:e1:a1:2d:
                    c8:db:dd:25:02:31:37:eb:e2:e9:6b:56:1e:d1:b4:
                    4c:61:b8:28:9e:c2:6c:98:90:af:35:f6:d9:db:51:
                    df:ac:ac:e8:40:79:b7:5e:11:b9:c4:46:bb:33:2a:
                    60:56:70:1a:fb:99:fb:51:5a:d3:c0:70:64:1c:91:
                    d3:66:ab:31:95:23:4b:a4:16:45:2c:81:03:e0:5d:
                    d0:ba:8b:da:14:8b:45:fd:5d:1f:83:1a:23:13:e7:
                    3d:4e:6d:b5:37:0e:f0:eb:ef:51:e6:b3:5e:db:18:
                    b1:ae:22:c1:e8:9a:99:1e:99:e4:a7:c2:3a:78:53:
                    ce:a0:60:70:2f:92:0f:dd:35:30:24:2d:67:c3:e5:
                    53:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:57:56:54:08:E3:2D:22:9A:7B:B5:78:93:D0:17:BF:03:04:9B:49
            X509v3 Authority Key Identifier:
                keyid:47:F5:D4:FF:59:FF:38:92:F3:D2:3C:49:FF:06:28:BA:F6:AC:18:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3138372e302f32342d3234203d3e203533303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:d5:6c:5b:52:1b:bd:43:91:f0:77:43:a5:bc:e9:2c:b5:10:
         3f:d0:c4:9a:08:ef:c3:0c:12:28:b9:f6:6f:85:c6:a2:d1:b0:
         c5:bc:1f:51:d6:87:ef:4d:de:ee:29:b9:07:3b:48:50:e7:cd:
         c8:66:ce:3f:81:fe:67:0d:48:1a:8a:17:ad:95:e3:97:9a:de:
         8f:9e:25:47:7e:08:f8:56:72:b9:8e:6e:e1:3c:04:b6:49:4e:
         cd:13:43:7a:50:78:42:5d:20:62:d0:27:b7:f4:b2:21:e3:2a:
         eb:27:c3:ef:bd:45:06:b4:d9:ad:c7:4e:3c:e6:2f:9a:8d:a4:
         99:11:dc:5b:93:fa:19:aa:9c:16:ae:73:5a:93:ea:c2:f2:d1:
         da:c7:1b:d4:2a:2b:9a:c7:1b:08:b2:6f:16:b1:52:30:64:0d:
         3c:fa:bd:bc:ab:20:5c:b4:40:2b:50:4c:c6:a3:c7:5a:5d:59:
         f5:6a:71:f5:44:1a:a1:14:dd:dd:57:46:b6:63:18:7e:26:15:
         10:47:20:c1:a7:91:05:5f:5d:4b:4c:6c:89:b7:01:5b:6b:3b:
         81:3a:70:b4:2f:ed:5e:e7:5c:37:dc:5d:6c:35:99:0a:8c:f2:
         98:c6:8e:19:21:6f:38:11:df:02:b8:d6:a3:77:cd:bb:7b:45:
         c5:f9:f8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 08:23:17 2025 by rpki-client