Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e37332e3233322e302f32342d3234203d3e203533303338.roa
File:                     3137372e37332e3233322e302f32342d3234203d3e203533303338.roa (raw, json)
Hash identifier:          1dEOd3dBRtYBSGQO5dBPeZYhGjRGw5ff0REAZmLWiwI=
Subject key identifier:   DA:6A:29:0D:32:3B:A4:2E:85:9F:6B:78:67:A4:07:A6:AF:E1:8A:C1
Certificate issuer:       /CN=47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832
Certificate serial:       5E12293EA7AE418252765CED8164D98339B479AE
Authority key identifier: 47:F5:D4:FF:59:FF:38:92:F3:D2:3C:49:FF:06:28:BA:F6:AC:18:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e37332e3233322e302f32342d3234203d3e203533303338.roa
Signing time:             Mon 03 Nov 2025 05:06:43 +0000
ROA not before:           Mon 03 Nov 2025 05:01:43 +0000
ROA not after:            Mon 02 Nov 2026 05:06:43 +0000
asID:                     53038
IP address blocks:        177.73.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.crl
                          rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 21:23:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:12:29:3e:a7:ae:41:82:52:76:5c:ed:81:64:d9:83:39:b4:79:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832
        Validity
            Not Before: Nov  3 05:01:43 2025 GMT
            Not After : Nov  2 05:06:43 2026 GMT
        Subject: CN=DA6A290D323BA42E859F6B7867A407A6AFE18AC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:55:16:82:63:84:5f:b4:f1:a2:ad:3d:0b:9b:
                    c4:68:dc:ef:5f:48:c5:65:65:91:f7:46:37:76:9d:
                    fb:1d:7b:92:af:35:f5:42:07:9d:c1:ee:bc:34:f2:
                    42:65:cc:43:20:1a:59:6f:26:2c:57:96:f1:b7:bd:
                    dd:1b:f9:5a:39:70:f5:9f:f2:13:1d:b3:c8:59:6a:
                    30:98:62:b5:e5:af:91:05:e8:75:9b:3f:92:60:61:
                    f4:2a:9d:c0:08:52:4a:97:a1:bd:b7:bd:cc:22:d9:
                    2f:7b:ec:6d:41:d4:24:a4:52:ca:fa:58:f5:2a:ce:
                    5b:df:5b:8e:8e:58:87:12:30:68:d1:56:46:6e:67:
                    32:3c:aa:25:81:71:fc:e8:c8:91:9c:53:b6:e0:d3:
                    a2:44:8e:c7:8e:cb:6e:96:f4:3f:da:5a:ea:b3:08:
                    1d:cd:87:5a:fa:8d:b1:9c:6c:0a:69:7f:f8:72:d0:
                    bc:07:e6:63:2b:fa:10:8b:3a:0c:fd:52:62:66:d3:
                    b2:f8:07:6d:58:36:a1:08:49:99:b1:ef:61:95:dc:
                    ae:80:61:5f:df:dc:ff:28:c7:8c:1a:fd:31:f0:08:
                    51:b6:3d:1f:22:e8:46:4f:aa:1b:7e:0b:a7:53:29:
                    61:da:c7:1b:36:54:21:b2:54:af:43:7d:a9:ae:54:
                    ec:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:6A:29:0D:32:3B:A4:2E:85:9F:6B:78:67:A4:07:A6:AF:E1:8A:C1
            X509v3 Authority Key Identifier:
                keyid:47:F5:D4:FF:59:FF:38:92:F3:D2:3C:49:FF:06:28:BA:F6:AC:18:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e37332e3233322e302f32342d3234203d3e203533303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:2b:cc:66:3f:a3:9a:95:ca:80:5a:b3:fc:e4:4a:f0:a2:25:
         10:c7:a4:c0:3a:ba:0e:de:21:16:1a:4d:fd:12:bf:18:5b:76:
         2f:62:ba:f7:a3:43:09:72:a8:fe:47:63:3f:42:7a:96:d3:4f:
         85:80:5a:bc:57:52:e9:d1:cf:a9:cc:81:05:5e:91:4b:d8:31:
         b1:cb:cd:b6:79:a6:a8:f8:39:9b:06:0a:e3:7f:61:13:47:29:
         bc:ad:b5:be:b6:00:07:a5:77:a2:31:bd:bb:90:98:22:51:ac:
         04:3a:67:a4:e3:eb:f4:5f:f5:8e:12:20:b5:ba:9e:29:36:3b:
         b1:4e:71:d6:23:dd:ad:9f:cd:3e:7b:fd:c6:49:e2:cf:4f:bf:
         7c:12:2c:b4:d1:3d:90:9a:e0:36:64:1c:23:43:96:72:bf:c1:
         e6:e8:44:25:c3:9d:fc:07:35:af:a4:9c:24:79:76:9e:58:95:
         3a:ac:27:96:dd:b2:fb:da:62:15:6c:eb:11:a4:ee:f8:c0:ad:
         24:70:eb:d8:26:23:60:0e:d1:2d:90:66:45:f0:40:18:56:8c:
         9e:22:7c:06:d4:d3:c5:a6:4d:f2:7b:ce:19:7a:14:cd:7e:8e:
         ec:ad:03:29:39:40:2c:9e:74:62:c0:ef:e3:66:e3:cc:ae:1a:
         30:5a:d3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:35:02 2025 by rpki-client