Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3138352e302f32342d3234203d3e203533303338.roa
File:                     3137372e3135342e3138352e302f32342d3234203d3e203533303338.roa (raw, json)
Hash identifier:          3t2pA+RG8xq/jRbrWXo4EeIKxKNPOjKn2oEfnqUOep8=
Subject key identifier:   CA:0F:32:4F:58:D4:A1:41:3D:82:B0:0F:F8:69:6C:F8:99:AB:2E:AD
Certificate issuer:       /CN=47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832
Certificate serial:       4AF83DF7D60B8B1AB25C8CAA79D414378677E113
Authority key identifier: 47:F5:D4:FF:59:FF:38:92:F3:D2:3C:49:FF:06:28:BA:F6:AC:18:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3138352e302f32342d3234203d3e203533303338.roa
Signing time:             Mon 03 Nov 2025 05:06:40 +0000
ROA not before:           Mon 03 Nov 2025 05:01:40 +0000
ROA not after:            Mon 02 Nov 2026 05:06:40 +0000
asID:                     53038
IP address blocks:        177.154.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.crl
                          rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 21:23:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:f8:3d:f7:d6:0b:8b:1a:b2:5c:8c:aa:79:d4:14:37:86:77:e1:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832
        Validity
            Not Before: Nov  3 05:01:40 2025 GMT
            Not After : Nov  2 05:06:40 2026 GMT
        Subject: CN=CA0F324F58D4A1413D82B00FF8696CF899AB2EAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f7:3a:af:bc:12:8d:d3:99:2e:68:ae:29:d0:
                    dc:39:84:6e:ec:55:07:22:42:91:64:17:7c:7f:7e:
                    38:32:e6:de:c7:99:9a:0f:f8:e5:7d:ad:fe:6f:4c:
                    5d:24:b2:36:6e:1c:ad:bb:53:c1:a9:3a:59:ea:8f:
                    a8:41:8c:70:de:b6:af:09:07:71:47:a6:9d:3f:7d:
                    59:75:8a:f8:af:b4:4d:cd:5c:a3:97:7a:b4:93:01:
                    e8:63:8e:7e:27:95:be:f7:c1:d0:ab:44:ae:d4:68:
                    7d:71:04:7e:97:82:a8:74:6a:96:89:19:d0:d7:4b:
                    9e:72:5c:13:d6:21:b8:8a:94:17:ff:da:4c:7d:a0:
                    f5:1d:5d:b9:e3:d4:17:1a:01:87:d7:b1:23:62:e9:
                    cb:21:3b:73:ed:8e:cf:76:63:64:06:52:a5:bb:04:
                    1c:f0:72:4d:48:4b:7c:37:e2:84:f8:29:da:79:e6:
                    70:77:53:fb:51:a8:20:9d:b6:e8:5a:db:d1:dc:98:
                    14:ef:7e:00:d3:57:db:b0:b4:6f:b3:fb:e1:a5:df:
                    30:94:ca:04:3a:22:b4:15:56:c9:24:a3:e4:bf:49:
                    46:d8:0b:b7:b3:da:10:3d:e3:d6:fc:79:6e:79:d9:
                    b9:ef:47:82:0e:a6:42:4b:47:67:0c:b2:93:29:59:
                    8e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:0F:32:4F:58:D4:A1:41:3D:82:B0:0F:F8:69:6C:F8:99:AB:2E:AD
            X509v3 Authority Key Identifier:
                keyid:47:F5:D4:FF:59:FF:38:92:F3:D2:3C:49:FF:06:28:BA:F6:AC:18:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3138352e302f32342d3234203d3e203533303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:21:6d:26:3b:57:1c:02:b4:40:b5:45:46:32:57:f5:43:d8:
         f5:80:c1:66:43:e1:3b:88:10:c6:74:71:ce:c5:a8:a0:3a:47:
         df:32:e9:bb:a0:b7:ec:4d:63:a5:e7:f5:79:db:3a:6b:af:6e:
         13:c2:c7:1c:4a:78:b1:7d:cc:1d:24:02:1a:b6:ab:ee:ca:e5:
         c1:36:b1:a1:06:18:c0:bb:37:3f:0e:a9:75:14:06:17:c7:ef:
         9d:25:43:f6:8e:f8:83:52:ef:45:52:8e:db:93:9b:25:2c:df:
         d4:28:53:68:d3:11:24:56:ac:5c:75:e8:2e:fe:49:da:f4:c4:
         fa:80:22:fb:d3:1c:a7:60:26:a8:03:93:17:01:58:7e:15:dd:
         64:5a:b0:db:b1:8d:fd:94:59:22:bc:bf:f4:9a:72:41:58:36:
         22:1f:46:70:38:a8:3e:93:e9:ae:4c:7f:f5:a5:ea:24:72:ab:
         74:4c:3b:1f:7d:a6:95:fc:67:8a:d8:b7:52:e8:75:a9:f8:9d:
         76:4e:4a:a6:b4:de:6f:a1:9b:01:02:aa:0c:7e:3d:58:ad:d8:
         17:a6:eb:b2:4d:d8:c3:90:ff:93:18:35:c6:0d:e7:5b:de:bd:
         ec:1d:09:fe:a9:d4:fd:cf:d1:77:cf:51:78:ec:23:92:04:53:
         e4:6e:49:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:08:25 2025 by rpki-client