Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3138302e302f32342d3234203d3e203533303338.roa
File:                     3137372e3135342e3138302e302f32342d3234203d3e203533303338.roa (raw, json)
Hash identifier:          lzQ2b1hEGtenzIANvuYqrBS8v72rRG0RMK5ZmmAzHbg=
Subject key identifier:   3F:8E:57:64:54:4C:B2:8C:A0:0C:F7:8D:08:55:62:51:3B:84:5D:C2
Certificate issuer:       /CN=47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832
Certificate serial:       44960E72A180F4761E6254EE6D7ACCAB7F659181
Authority key identifier: 47:F5:D4:FF:59:FF:38:92:F3:D2:3C:49:FF:06:28:BA:F6:AC:18:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3138302e302f32342d3234203d3e203533303338.roa
Signing time:             Mon 03 Nov 2025 05:06:42 +0000
ROA not before:           Mon 03 Nov 2025 05:01:42 +0000
ROA not after:            Mon 02 Nov 2026 05:06:42 +0000
asID:                     53038
IP address blocks:        177.154.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.crl
                          rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 21:23:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:96:0e:72:a1:80:f4:76:1e:62:54:ee:6d:7a:cc:ab:7f:65:91:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832
        Validity
            Not Before: Nov  3 05:01:42 2025 GMT
            Not After : Nov  2 05:06:42 2026 GMT
        Subject: CN=3F8E5764544CB28CA00CF78D085562513B845DC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5d:ae:ee:74:0b:90:78:77:cd:29:93:4a:0c:
                    e2:48:9f:9d:5d:9c:1c:90:25:0d:03:65:34:c2:86:
                    6d:80:2b:7a:3c:7d:4f:50:cf:a3:34:0d:0a:b0:2e:
                    44:f4:fe:5d:ce:97:81:23:94:a5:12:9e:7b:f9:f0:
                    6e:f4:eb:69:c0:d5:3a:7f:11:b7:5b:12:a8:8f:be:
                    2f:8d:62:80:3a:36:21:eb:39:d0:d6:c8:84:77:91:
                    f9:e8:bd:98:f4:7f:7c:2b:72:83:de:86:5b:cf:fc:
                    00:c1:9f:b9:6f:a2:cc:bf:54:27:bb:29:39:b4:9b:
                    9c:c1:0d:b6:c5:74:80:0a:72:64:c9:17:4b:aa:3e:
                    ca:15:1c:a0:e4:2d:38:21:aa:84:21:38:08:74:65:
                    50:56:3f:40:23:d8:a3:05:93:de:84:15:7c:77:e4:
                    bf:3c:99:85:fa:84:ba:b1:fc:27:6f:25:de:56:c4:
                    01:9f:53:75:f7:10:48:94:11:52:b9:58:56:a0:e3:
                    83:d4:0a:e6:45:f5:c2:7b:f5:dc:f9:ed:50:2c:f9:
                    a7:4e:a5:ea:c1:0c:36:82:13:81:c6:81:55:f5:1e:
                    96:ec:81:0a:02:28:56:9f:9d:03:07:d4:cf:0d:70:
                    fe:1e:70:9d:b6:60:36:91:5d:1a:b3:54:c0:fd:14:
                    35:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:8E:57:64:54:4C:B2:8C:A0:0C:F7:8D:08:55:62:51:3B:84:5D:C2
            X509v3 Authority Key Identifier:
                keyid:47:F5:D4:FF:59:FF:38:92:F3:D2:3C:49:FF:06:28:BA:F6:AC:18:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3138302e302f32342d3234203d3e203533303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:99:cf:06:13:a4:54:5d:b6:50:3e:3f:96:a6:2a:f9:99:b1:
         51:3d:11:62:ee:1f:ad:c2:53:d8:2d:c3:ea:ab:27:30:6b:08:
         51:3e:ef:ce:37:8a:55:9e:c7:af:4e:90:ae:2d:67:27:46:e3:
         a3:df:05:b6:af:5c:1c:ae:ce:a4:37:40:4d:c1:79:7d:f8:56:
         b8:c7:5a:0d:66:e0:bd:bb:8e:ac:d8:cc:f8:82:55:38:5c:dc:
         96:dc:90:22:71:12:21:d8:00:c2:e0:f7:e4:93:95:06:3c:9c:
         05:ff:10:00:6f:a7:39:0f:36:af:c7:b2:6d:c5:da:d7:22:36:
         1a:57:de:10:54:c4:c0:e9:60:b8:cb:9f:9e:cf:ab:89:1a:db:
         e1:90:44:86:22:f1:f2:76:85:1d:93:39:a2:2e:48:72:3d:4e:
         8f:39:3c:e0:51:33:da:cf:6a:b2:73:4b:9f:a9:5e:d0:20:47:
         ca:62:40:e0:0a:dd:50:8b:e3:ad:e4:33:65:fd:6a:e4:9c:c6:
         e4:a9:83:11:51:f3:47:17:3d:12:3e:79:bd:a6:42:2e:cd:9a:
         e5:0f:ef:67:27:7b:d9:32:78:5d:19:0f:80:12:45:7b:00:fa:
         01:db:fa:92:3b:eb:40:bc:61:de:85:81:b5:61:91:cb:0c:3f:
         02:c9:40:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:06:37 2025 by rpki-client