Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e37332e3233382e302f32342d3234203d3e203533303338.roa
File:                     3137372e37332e3233382e302f32342d3234203d3e203533303338.roa (raw, json)
Hash identifier:          vOfnaKCfxMRb9xXsdhVAlXCdUzgGxlcTpxbaU/cUDmw=
Subject key identifier:   85:92:11:B9:97:39:70:70:2E:B1:1E:26:EB:92:FE:12:77:B3:69:5F
Certificate issuer:       /CN=47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832
Certificate serial:       4AAC289880063486567715466ABD5F70394BE4A4
Authority key identifier: 47:F5:D4:FF:59:FF:38:92:F3:D2:3C:49:FF:06:28:BA:F6:AC:18:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e37332e3233382e302f32342d3234203d3e203533303338.roa
Signing time:             Mon 03 Nov 2025 05:06:39 +0000
ROA not before:           Mon 03 Nov 2025 05:01:39 +0000
ROA not after:            Mon 02 Nov 2026 05:06:39 +0000
asID:                     53038
IP address blocks:        177.73.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.crl
                          rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 21:23:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ac:28:98:80:06:34:86:56:77:15:46:6a:bd:5f:70:39:4b:e4:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832
        Validity
            Not Before: Nov  3 05:01:39 2025 GMT
            Not After : Nov  2 05:06:39 2026 GMT
        Subject: CN=859211B9973970702EB11E26EB92FE1277B3695F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b8:b7:65:7e:47:c1:59:40:31:c5:1b:55:dd:
                    8b:2e:66:cf:09:8b:ff:aa:98:70:4b:ea:8d:d8:db:
                    9e:6b:9d:7d:d8:8c:7b:31:f7:08:a6:62:cd:eb:94:
                    66:e7:33:44:da:0a:ea:d7:41:47:96:fc:77:0a:53:
                    61:cc:16:b9:95:f2:41:18:e3:b3:61:ae:21:49:d0:
                    4b:ee:56:8c:bb:83:35:b3:eb:50:8f:66:47:1e:71:
                    16:9c:48:b6:f4:50:fe:80:a7:b7:7e:af:29:a4:95:
                    f7:01:7d:23:45:60:f4:66:d5:f8:32:22:1f:4e:f1:
                    c2:37:fe:1b:50:00:c7:7f:6d:53:4e:48:c4:33:56:
                    79:a7:b6:55:99:4c:33:2c:db:31:9b:0a:92:d5:5f:
                    1b:ce:8d:64:41:b8:ee:bf:a0:2c:8f:c2:a5:46:3e:
                    86:43:6f:64:ff:79:63:8d:b5:03:90:17:6a:02:e9:
                    99:b1:21:92:11:7f:cc:2a:16:81:b4:65:88:fb:e8:
                    63:34:d0:c5:b8:94:60:c4:e6:46:02:8b:24:5b:e3:
                    3b:0e:46:83:67:8c:fa:51:ec:76:08:f5:d2:39:ea:
                    77:6e:1c:f7:b7:5f:dd:85:73:79:2b:b1:30:8d:25:
                    55:8e:62:7b:26:72:79:e0:14:ed:96:c2:ac:57:9f:
                    28:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:92:11:B9:97:39:70:70:2E:B1:1E:26:EB:92:FE:12:77:B3:69:5F
            X509v3 Authority Key Identifier:
                keyid:47:F5:D4:FF:59:FF:38:92:F3:D2:3C:49:FF:06:28:BA:F6:AC:18:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e37332e3233382e302f32342d3234203d3e203533303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:37:ed:f5:7a:d2:45:07:d8:16:a4:a9:fd:45:c5:f9:d2:42:
         b6:c6:ff:28:be:a6:2c:44:61:09:cb:12:7b:41:0a:eb:88:0f:
         38:a2:7d:a9:8d:3e:20:d1:0f:06:3e:06:f4:5f:e5:12:da:8f:
         5c:af:3f:61:d7:a3:ba:7c:ce:cc:42:75:08:a5:1d:ce:1f:b3:
         fe:73:2a:a6:d1:d8:0c:c5:1b:f6:7d:4b:b4:39:af:aa:2a:fa:
         3e:e6:a6:d7:1d:da:39:c5:81:d2:20:8f:d5:b0:31:a1:48:f9:
         c7:bc:01:3f:65:bc:7a:41:b6:f8:cf:93:bc:7d:b1:d3:1d:2c:
         49:07:53:29:d8:52:6c:6f:ef:8f:2b:f9:15:ae:3e:d1:20:5c:
         29:38:06:48:0d:a8:5a:c4:d1:49:3b:f3:7b:03:40:36:08:eb:
         17:a8:ee:55:c5:ba:ee:0c:a9:42:1c:83:d2:2b:b2:2f:ff:91:
         f0:20:e9:cb:b6:55:fb:9d:98:55:3d:b5:d3:3c:76:ad:f4:cf:
         24:6b:b6:81:9d:81:a6:c3:6e:ae:08:f6:06:3e:90:d5:55:d4:
         64:c4:1b:00:33:c7:6d:28:a6:5e:89:29:18:7e:4a:52:fd:77:
         35:5c:34:db:74:8c:ee:14:2c:aa:2c:ea:31:bd:60:a2:6f:db:
         e5:bc:f7:0b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUSqwomIAGNIZWdxVGar1fcDlL5KQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDdGNUQ0RkY1OUZGMzg5MkYzRDIzQzQ5RkYwNjI4QkFG
NkFDMTgzMjAeFw0yNTExMDMwNTAxMzlaFw0yNjExMDIwNTA2MzlaMDMxMTAvBgNV
BAMTKDg1OTIxMUI5OTczOTcwNzAyRUIxMUUyNkVCOTJGRTEyNzdCMzY5NUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9uLdlfkfBWUAxxRtV3YsuZs8J
i/+qmHBL6o3Y255rnX3YjHsx9wimYs3rlGbnM0TaCurXQUeW/HcKU2HMFrmV8kEY
47NhriFJ0EvuVoy7gzWz61CPZkcecRacSLb0UP6Ap7d+rymklfcBfSNFYPRm1fgy
Ih9O8cI3/htQAMd/bVNOSMQzVnmntlWZTDMs2zGbCpLVXxvOjWRBuO6/oCyPwqVG
PoZDb2T/eWONtQOQF2oC6ZmxIZIRf8wqFoG0ZYj76GM00MW4lGDE5kYCiyRb4zsO
RoNnjPpR7HYI9dI56nduHPe3X92Fc3krsTCNJVWOYnsmcnngFO2WwqxXnygbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUhZIRuZc5cHAusR4m65L+EnezaV8wHwYDVR0j
BBgwFoAUR/XU/1n/OJLz0jxJ/wYouvasGDIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWZYSFljcW1yVDVhMWhlbkpBdERpR0JDbkFhNGpYVHZqRGlLekIxY3E3
alUvMC80N0Y1RDRGRjU5RkYzODkyRjNEMjNDNDlGRjA2MjhCQUY2QUMxODMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3RjVENEZGNTlGRjM4OTJG
M0QyM0M0OUZGMDYyOEJBRjZBQzE4MzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlmWEhZY3FtclQ1YTFoZW5KQXREaUdCQ25BYTRqWFR2akRpS3pCMWNxN2pVLzAv
MzEzNzM3MmUzNzMzMmUzMjMzMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMz
MzAzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsUnuMA0GCSqGSIb3DQEBCwUAA4IBAQBkN+31etJF
B9gWpKn9RcX50kK2xv8ovqYsRGEJyxJ7QQrriA84on2pjT4g0Q8GPgb0X+US2o9c
rz9h16O6fM7MQnUIpR3OH7P+cyqm0dgMxRv2fUu0Oa+qKvo+5qbXHdo5xYHSII/V
sDGhSPnHvAE/Zbx6Qbb4z5O8fbHTHSxJB1Mp2FJsb++PK/kVrj7RIFwpOAZIDaha
xNFJO/N7A0A2COsXqO5VxbruDKlCHIPSK7Iv/5HwIOnLtlX7nZhVPbXTPHat9M8k
a7aBnYGmw26uCPYGPpDVVdRkxBsAM8dtKKZeiSkYfkpS/Xc1XDTbdIzuFCyqLOox
vWCib9vlvPcL
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:09:25 2025 by rpki-client