Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HT47CaVGFoaGFGxqrWXNF64aUFikwVAiWSXz7YK94YDr/0/3134332e3230322e3137362e302f32322d3234203d3e203532353636.roa
File:                     3134332e3230322e3137362e302f32322d3234203d3e203532353636.roa (raw, json)
Hash identifier:          Yu+IVQIEjlFZoQpDjFf+TQ3tmZ0I4B8rmqI9JWgjQws=
Subject key identifier:   E6:4D:59:D9:5B:D3:6F:89:1A:CD:8A:56:F4:08:14:63:6C:DE:0A:F3
Certificate issuer:       /CN=3030AC9FD9E2F2BC6E0B312FD7C55E8EAA584258
Certificate serial:       7F6FB323F28986B08056148D1D529AAC8C108892
Authority key identifier: 30:30:AC:9F:D9:E2:F2:BC:6E:0B:31:2F:D7:C5:5E:8E:AA:58:42:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3030AC9FD9E2F2BC6E0B312FD7C55E8EAA584258.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HT47CaVGFoaGFGxqrWXNF64aUFikwVAiWSXz7YK94YDr/0/3134332e3230322e3137362e302f32322d3234203d3e203532353636.roa
Signing time:             Tue 28 Oct 2025 19:11:45 +0000
ROA not before:           Tue 28 Oct 2025 19:06:45 +0000
ROA not after:            Tue 27 Oct 2026 19:11:45 +0000
asID:                     52566
IP address blocks:        143.202.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HT47CaVGFoaGFGxqrWXNF64aUFikwVAiWSXz7YK94YDr/0/3030AC9FD9E2F2BC6E0B312FD7C55E8EAA584258.crl
                          rsync://rpki-repo.registro.br/repo/HT47CaVGFoaGFGxqrWXNF64aUFikwVAiWSXz7YK94YDr/0/3030AC9FD9E2F2BC6E0B312FD7C55E8EAA584258.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3030AC9FD9E2F2BC6E0B312FD7C55E8EAA584258.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 14:36:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:6f:b3:23:f2:89:86:b0:80:56:14:8d:1d:52:9a:ac:8c:10:88:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3030AC9FD9E2F2BC6E0B312FD7C55E8EAA584258
        Validity
            Not Before: Oct 28 19:06:45 2025 GMT
            Not After : Oct 27 19:11:45 2026 GMT
        Subject: CN=E64D59D95BD36F891ACD8A56F40814636CDE0AF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a5:21:e2:ed:a0:71:8f:73:af:95:cc:0e:0e:
                    a6:15:cb:4e:95:25:b1:58:58:d1:7a:6b:80:7f:0a:
                    dc:fe:20:e9:3d:9e:3f:68:8c:f9:70:08:bf:dc:cf:
                    2a:f2:e6:c7:05:5c:a9:03:7b:7c:bb:72:51:6f:3d:
                    f1:ca:7c:ff:b8:99:93:87:ee:70:3b:a8:65:27:9e:
                    87:e0:86:d0:c8:a4:cc:d4:4f:64:bd:3e:07:20:e2:
                    fe:da:c6:c9:bb:70:f5:26:93:aa:fd:c2:d3:2d:c0:
                    45:d6:c0:39:93:6d:36:22:1c:3b:ef:ec:ef:c2:71:
                    8f:cc:c6:88:45:48:65:b2:82:bb:f6:70:80:24:c3:
                    02:2b:83:4f:30:95:fd:51:45:05:8e:5c:d6:8f:3e:
                    61:75:2c:2d:0d:02:d8:ac:82:70:d9:44:17:96:e4:
                    98:45:cb:55:49:90:44:3c:6c:11:26:a9:7b:1d:9f:
                    91:e7:85:15:77:ec:f2:a1:2e:f2:04:cb:ce:64:b4:
                    1e:82:39:21:6b:06:ce:72:7f:ac:1e:4d:84:5c:a6:
                    cf:5a:ff:b5:5a:a4:f1:89:df:ae:77:50:a1:b2:8f:
                    ac:7e:66:3a:d9:5b:b8:b8:5c:ec:28:dc:aa:c1:ce:
                    cb:bd:2a:69:f3:ff:e1:f8:c6:14:0b:7f:ba:f8:a0:
                    35:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:4D:59:D9:5B:D3:6F:89:1A:CD:8A:56:F4:08:14:63:6C:DE:0A:F3
            X509v3 Authority Key Identifier:
                keyid:30:30:AC:9F:D9:E2:F2:BC:6E:0B:31:2F:D7:C5:5E:8E:AA:58:42:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HT47CaVGFoaGFGxqrWXNF64aUFikwVAiWSXz7YK94YDr/0/3030AC9FD9E2F2BC6E0B312FD7C55E8EAA584258.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3030AC9FD9E2F2BC6E0B312FD7C55E8EAA584258.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HT47CaVGFoaGFGxqrWXNF64aUFikwVAiWSXz7YK94YDr/0/3134332e3230322e3137362e302f32322d3234203d3e203532353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:24:90:43:38:77:29:36:b9:44:8c:e3:0c:db:7a:bd:3c:60:
         87:8c:02:03:ec:d9:8d:62:63:19:3f:9e:dc:4a:15:96:7e:6f:
         92:31:34:ed:3d:10:af:d4:e2:4b:d4:05:43:19:16:7a:9b:0a:
         2e:f9:27:95:f7:dc:c8:71:34:0c:73:f8:4b:be:3a:04:be:39:
         55:71:23:dd:df:92:fd:61:48:5e:61:1e:f1:14:03:26:f4:8d:
         60:d6:53:a6:49:f0:55:48:ea:f8:5f:ac:a8:78:e4:3c:7f:ae:
         0b:90:54:84:eb:87:46:02:32:b8:73:f1:88:9a:fc:a0:78:ea:
         35:4e:01:b6:aa:9b:de:43:8b:d5:36:70:78:17:9a:08:fa:33:
         80:f2:37:8d:14:65:b0:2a:80:58:31:69:7d:95:e7:cd:3d:46:
         1b:66:57:3e:a4:9d:3f:2e:94:d4:b9:b6:b2:36:83:c9:05:5f:
         4c:9b:0e:31:c9:ec:40:89:06:2e:d4:4a:d9:55:76:24:6c:38:
         7c:2e:77:45:81:34:b8:0c:d0:59:4c:7e:8d:e4:a9:4b:63:a1:
         75:5a:11:75:63:3e:cd:35:1c:6a:e3:47:9c:df:be:5d:7d:ed:
         9a:59:20:f6:16:a0:57:4a:c1:38:9c:d2:61:9d:49:c5:15:40:
         e3:dd:7f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:43:26 2025 by rpki-client