Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3137372e302f32342d3234203d3e203533303338.roa
File:                     3137372e3135342e3137372e302f32342d3234203d3e203533303338.roa (raw, json)
Hash identifier:          bF1CWK4j4URNzGrjdNLQYwAFfhFmbCtGa7uOZ7AHzJ0=
Subject key identifier:   03:9A:19:18:12:F7:FE:46:39:1C:53:B2:7D:58:1F:74:A8:46:C5:FF
Certificate issuer:       /CN=47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832
Certificate serial:       6C80D63A295E20E439152C99227F0545CD3F3226
Authority key identifier: 47:F5:D4:FF:59:FF:38:92:F3:D2:3C:49:FF:06:28:BA:F6:AC:18:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3137372e302f32342d3234203d3e203533303338.roa
Signing time:             Mon 03 Nov 2025 05:06:42 +0000
ROA not before:           Mon 03 Nov 2025 05:01:42 +0000
ROA not after:            Mon 02 Nov 2026 05:06:42 +0000
asID:                     53038
IP address blocks:        177.154.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.crl
                          rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 21:23:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:80:d6:3a:29:5e:20:e4:39:15:2c:99:22:7f:05:45:cd:3f:32:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832
        Validity
            Not Before: Nov  3 05:01:42 2025 GMT
            Not After : Nov  2 05:06:42 2026 GMT
        Subject: CN=039A191812F7FE46391C53B27D581F74A846C5FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:77:ee:2c:98:9b:ef:d7:dd:35:82:a7:ed:88:
                    b1:3b:3a:b6:e7:60:28:7d:eb:8c:3d:7a:0a:51:ae:
                    85:f8:a0:dc:e3:2d:c7:3c:b6:db:9e:bd:78:e6:74:
                    a9:7c:59:fc:e5:7c:91:54:2e:82:ec:8d:c1:c5:5f:
                    bd:40:66:45:65:f9:71:79:da:b7:7a:4a:fa:b9:ef:
                    1e:1d:64:02:f8:d6:de:b0:b3:df:78:7e:b9:fb:b2:
                    91:f9:32:25:61:82:96:43:bb:b1:ab:66:4a:ce:06:
                    20:97:96:ee:06:00:32:90:33:0f:a8:0d:44:be:ea:
                    df:ba:9f:e1:3a:96:6a:0b:7c:1f:f0:3a:f7:2c:03:
                    ec:99:8e:99:3e:78:d7:2f:fe:5b:53:32:7d:90:d5:
                    5b:50:83:08:be:5e:a6:da:7f:13:2c:9b:1f:2c:42:
                    0c:a2:d3:90:6b:7c:ca:47:fb:9e:f4:cc:27:be:48:
                    63:07:4e:e5:07:d4:db:73:d7:81:09:be:c2:0c:27:
                    66:b8:b4:7a:ee:64:c7:9b:68:53:20:4c:a5:9f:14:
                    6f:1f:2b:69:ec:0c:e1:3c:c4:c1:2a:4e:d8:40:46:
                    58:89:6f:d0:a3:be:ea:32:01:7a:a0:3b:29:63:1d:
                    a4:d6:e3:0a:f6:56:8a:ee:39:01:26:60:ff:eb:75:
                    b8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:9A:19:18:12:F7:FE:46:39:1C:53:B2:7D:58:1F:74:A8:46:C5:FF
            X509v3 Authority Key Identifier:
                keyid:47:F5:D4:FF:59:FF:38:92:F3:D2:3C:49:FF:06:28:BA:F6:AC:18:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3137372e302f32342d3234203d3e203533303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:4c:cb:d7:0a:42:81:4d:0f:4b:ff:48:b0:45:5b:f0:82:42:
         6f:8f:ac:15:38:c9:96:e0:fe:73:c5:cf:5a:45:68:04:72:c8:
         f3:98:4c:40:3f:88:cc:5d:8c:fb:4b:f9:c7:6e:52:b6:5a:ea:
         f9:93:fc:05:d7:87:ec:c8:5d:85:6c:43:4d:89:b0:3a:c2:97:
         59:76:3b:ab:04:23:5f:b3:41:0f:80:c7:d7:78:d8:98:05:94:
         a4:97:6a:1e:85:80:fc:29:3d:84:2e:e6:d5:de:8a:b0:80:ac:
         c2:ac:74:f8:cf:05:75:3d:08:ff:05:07:8f:f1:96:7d:79:6d:
         04:0c:e3:4b:d1:14:83:e4:ff:86:56:96:33:d0:13:0b:c0:35:
         cc:02:70:07:54:39:5f:41:a8:fb:f1:59:9a:9d:59:2a:c4:cf:
         0c:d1:01:4e:ad:5d:ef:a4:27:26:01:b3:91:ae:a4:ac:1c:03:
         08:a4:6e:b7:29:e9:31:d7:c5:73:c7:42:38:86:ad:82:15:dd:
         00:1f:46:66:bb:bb:f5:aa:98:0b:f4:06:e6:66:5e:3f:1d:1f:
         57:1e:42:56:10:f9:30:16:f7:97:ed:cb:21:2c:0a:25:e9:53:
         4e:59:df:cc:09:1d:87:11:98:f7:a6:29:cf:95:da:22:f6:84:
         2d:13:64:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:00:34 2025 by rpki-client