Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e37332e3233362e302f32342d3234203d3e203533303338.roa
File:                     3137372e37332e3233362e302f32342d3234203d3e203533303338.roa (raw, json)
Hash identifier:          pL4yzpbIpt/gEnbvgMs4MCxM7Ove73AOoya+02D74QA=
Subject key identifier:   4F:3C:FB:25:A5:33:ED:D1:3F:05:12:4E:5D:9D:D1:02:B8:75:D2:55
Certificate issuer:       /CN=47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832
Certificate serial:       72398099F41EDFBB53750C2D53F5E811BB3F0520
Authority key identifier: 47:F5:D4:FF:59:FF:38:92:F3:D2:3C:49:FF:06:28:BA:F6:AC:18:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e37332e3233362e302f32342d3234203d3e203533303338.roa
Signing time:             Mon 03 Nov 2025 05:06:43 +0000
ROA not before:           Mon 03 Nov 2025 05:01:43 +0000
ROA not after:            Mon 02 Nov 2026 05:06:43 +0000
asID:                     53038
IP address blocks:        177.73.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.crl
                          rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 21:23:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:39:80:99:f4:1e:df:bb:53:75:0c:2d:53:f5:e8:11:bb:3f:05:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832
        Validity
            Not Before: Nov  3 05:01:43 2025 GMT
            Not After : Nov  2 05:06:43 2026 GMT
        Subject: CN=4F3CFB25A533EDD13F05124E5D9DD102B875D255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:38:0e:6c:7d:02:1b:43:e9:2e:b2:03:70:76:
                    88:cf:02:ca:cf:91:7b:c0:90:52:46:e7:ff:d0:e9:
                    3c:f6:48:a6:2f:b8:16:ba:43:be:e0:e5:f4:64:ad:
                    67:06:f1:6e:50:b1:7c:2f:51:fb:37:37:b2:a4:c1:
                    05:1d:04:83:5f:84:74:de:8b:45:8b:0c:f8:6b:8f:
                    cf:2d:ef:65:7d:2f:97:73:fc:d2:d3:18:88:fb:59:
                    26:4f:9b:3a:2c:3c:c4:9a:fe:57:f2:b8:99:33:87:
                    c6:b8:b0:97:69:dc:38:50:a1:4f:6e:3c:11:f7:9e:
                    70:60:bb:b9:8e:54:05:78:07:e9:40:b5:a2:97:23:
                    16:aa:ea:5d:98:7c:6a:86:b2:ad:cd:2c:09:55:2e:
                    ef:ee:e0:1f:45:74:dc:c8:30:51:35:fd:b9:7c:cc:
                    3c:f7:21:d8:7c:29:5c:a7:79:89:94:51:e2:2c:2f:
                    56:b6:63:c1:6b:7c:a5:e4:fc:ce:1d:8d:fc:f7:10:
                    67:b9:b7:1e:0d:b7:28:3a:c1:35:95:f5:44:e2:28:
                    70:02:24:ac:be:b3:e6:2f:1b:03:22:89:61:3b:7c:
                    d4:13:c5:72:20:d3:96:d5:42:ca:38:6c:7b:6c:15:
                    9a:49:7d:c8:2e:d6:4c:88:19:46:f1:b7:48:5d:8f:
                    f7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:3C:FB:25:A5:33:ED:D1:3F:05:12:4E:5D:9D:D1:02:B8:75:D2:55
            X509v3 Authority Key Identifier:
                keyid:47:F5:D4:FF:59:FF:38:92:F3:D2:3C:49:FF:06:28:BA:F6:AC:18:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e37332e3233362e302f32342d3234203d3e203533303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:3e:19:d2:05:4d:72:7c:b8:8d:02:84:17:0b:53:a4:4a:28:
         10:58:19:c8:ef:ad:41:80:61:8f:db:26:81:3e:c7:ef:42:18:
         54:8a:9f:38:83:dd:ec:9f:8c:ec:e0:90:b6:f3:cd:6e:4e:1e:
         ee:7f:0d:91:bf:3d:c0:17:31:7a:be:9e:c1:87:9d:9a:66:91:
         d9:3c:ce:b8:a3:04:91:cd:25:95:f9:49:fa:85:1c:01:77:9e:
         56:a2:61:ee:e9:1a:9e:7e:7f:63:63:13:6d:79:e6:8a:e7:df:
         2c:f7:57:dd:76:7e:0b:95:31:b1:49:b4:62:56:d1:73:d7:81:
         21:a7:24:74:51:a4:7c:4f:83:d9:08:d9:bf:e8:d3:3b:71:94:
         fb:f2:75:40:d5:1d:15:93:c5:7c:70:b6:e5:cf:16:f4:41:c4:
         41:34:9a:a7:01:17:7c:80:d7:54:72:06:8d:0a:74:3e:22:43:
         0a:1f:06:d4:b9:28:02:db:b8:8c:6c:00:2d:7c:ec:a1:f4:53:
         22:cc:7d:e7:63:a1:61:3f:84:85:73:cb:9d:c4:23:db:22:52:
         40:31:13:32:05:6d:6b:73:37:aa:e6:bc:65:7c:99:89:c4:b9:
         15:fa:ae:47:43:8c:ce:42:9e:04:ff:ac:44:f3:ad:f5:d1:7f:
         2a:76:0a:48
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUcjmAmfQe37tTdQwtU/XoEbs/BSAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDdGNUQ0RkY1OUZGMzg5MkYzRDIzQzQ5RkYwNjI4QkFG
NkFDMTgzMjAeFw0yNTExMDMwNTAxNDNaFw0yNjExMDIwNTA2NDNaMDMxMTAvBgNV
BAMTKDRGM0NGQjI1QTUzM0VERDEzRjA1MTI0RTVEOUREMTAyQjg3NUQyNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjOA5sfQIbQ+kusgNwdojPAsrP
kXvAkFJG5//Q6Tz2SKYvuBa6Q77g5fRkrWcG8W5QsXwvUfs3N7KkwQUdBINfhHTe
i0WLDPhrj88t72V9L5dz/NLTGIj7WSZPmzosPMSa/lfyuJkzh8a4sJdp3DhQoU9u
PBH3nnBgu7mOVAV4B+lAtaKXIxaq6l2YfGqGsq3NLAlVLu/u4B9FdNzIMFE1/bl8
zDz3Idh8KVyneYmUUeIsL1a2Y8FrfKXk/M4djfz3EGe5tx4Ntyg6wTWV9UTiKHAC
JKy+s+YvGwMiiWE7fNQTxXIg05bVQso4bHtsFZpJfcgu1kyIGUbxt0hdj/ebAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUTzz7JaUz7dE/BRJOXZ3RArh10lUwHwYDVR0j
BBgwFoAUR/XU/1n/OJLz0jxJ/wYouvasGDIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWZYSFljcW1yVDVhMWhlbkpBdERpR0JDbkFhNGpYVHZqRGlLekIxY3E3
alUvMC80N0Y1RDRGRjU5RkYzODkyRjNEMjNDNDlGRjA2MjhCQUY2QUMxODMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3RjVENEZGNTlGRjM4OTJG
M0QyM0M0OUZGMDYyOEJBRjZBQzE4MzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlmWEhZY3FtclQ1YTFoZW5KQXREaUdCQ25BYTRqWFR2akRpS3pCMWNxN2pVLzAv
MzEzNzM3MmUzNzMzMmUzMjMzMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMz
MzAzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsUnsMA0GCSqGSIb3DQEBCwUAA4IBAQAxPhnSBU1y
fLiNAoQXC1OkSigQWBnI761BgGGP2yaBPsfvQhhUip84g93sn4zs4JC2881uTh7u
fw2Rvz3AFzF6vp7Bh52aZpHZPM64owSRzSWV+Un6hRwBd55WomHu6Rqefn9jYxNt
eeaK598s91fddn4LlTGxSbRiVtFz14EhpyR0UaR8T4PZCNm/6NM7cZT78nVA1R0V
k8V8cLblzxb0QcRBNJqnARd8gNdUcgaNCnQ+IkMKHwbUuSgC27iMbAAtfOyh9FMi
zH3nY6FhP4SFc8udxCPbIlJAMRMyBW1rczeq5rxlfJmJxLkV+q5HQ4zOQp4E/6xE
86310X8qdgpI
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:59:47 2025 by rpki-client