Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e37332e3233392e302f32342d3234203d3e203533303338.roa
File:                     3137372e37332e3233392e302f32342d3234203d3e203533303338.roa (raw, json)
Hash identifier:          dCDsiOSPCo6WwzI551PGfeHw8a3UaB3S2gp5FpIsmNg=
Subject key identifier:   9E:EE:28:AF:86:9D:D8:50:0D:4E:74:94:1E:AA:E3:EB:8C:38:24:61
Certificate issuer:       /CN=47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832
Certificate serial:       08E3D15AFD89E5A6659B80F1A8963309ACA496AD
Authority key identifier: 47:F5:D4:FF:59:FF:38:92:F3:D2:3C:49:FF:06:28:BA:F6:AC:18:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e37332e3233392e302f32342d3234203d3e203533303338.roa
Signing time:             Mon 03 Nov 2025 05:06:39 +0000
ROA not before:           Mon 03 Nov 2025 05:01:39 +0000
ROA not after:            Mon 02 Nov 2026 05:06:39 +0000
asID:                     53038
IP address blocks:        177.73.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.crl
                          rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 21:23:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:e3:d1:5a:fd:89:e5:a6:65:9b:80:f1:a8:96:33:09:ac:a4:96:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832
        Validity
            Not Before: Nov  3 05:01:39 2025 GMT
            Not After : Nov  2 05:06:39 2026 GMT
        Subject: CN=9EEE28AF869DD8500D4E74941EAAE3EB8C382461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:99:84:24:18:8e:0b:74:f0:94:3e:46:d2:b3:
                    64:a6:51:c0:18:47:26:83:d7:ab:5b:3c:e3:a4:82:
                    d4:c5:4d:ce:29:af:63:97:2e:68:ee:9e:a2:63:98:
                    21:c2:d1:28:8b:f9:6d:83:53:a4:9f:5a:65:a6:e0:
                    49:4f:c0:a4:ce:a1:d6:77:a8:8b:f5:a1:3c:32:a5:
                    17:37:ea:65:31:05:f7:70:07:91:37:7e:95:fb:70:
                    cc:0e:71:4b:ff:41:9f:12:1f:a3:04:f5:35:17:c3:
                    cb:39:d5:f7:57:36:ad:a6:86:fb:fc:fe:46:e4:c1:
                    88:73:28:bc:0c:a7:f1:16:b4:16:bc:8e:7d:97:db:
                    7f:96:d8:52:bc:b8:a5:8e:46:a9:aa:3f:6c:56:bd:
                    05:4a:85:9b:bb:e0:6c:fc:44:85:aa:ff:5f:dd:8f:
                    a3:f0:fa:85:79:b4:b5:6b:09:52:ed:95:10:e3:28:
                    1a:69:e0:fa:c7:ec:11:68:d2:65:a2:4d:2a:da:d0:
                    f8:d1:0f:01:93:32:bf:7e:9c:0b:96:c7:ef:ec:af:
                    11:b3:91:76:3a:ef:1f:1e:9a:91:47:8d:04:da:d7:
                    0d:e6:52:f4:23:61:f9:8e:90:a5:41:39:38:11:e3:
                    c9:a6:c6:ec:1c:31:2a:77:40:cf:5a:9b:16:76:12:
                    26:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:EE:28:AF:86:9D:D8:50:0D:4E:74:94:1E:AA:E3:EB:8C:38:24:61
            X509v3 Authority Key Identifier:
                keyid:47:F5:D4:FF:59:FF:38:92:F3:D2:3C:49:FF:06:28:BA:F6:AC:18:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e37332e3233392e302f32342d3234203d3e203533303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:5f:c2:bc:5b:f4:e2:e5:d6:f8:2b:a4:14:b2:71:f7:ac:01:
         24:62:16:cc:63:f8:07:60:f9:49:02:e2:e1:f5:bc:27:4f:d7:
         1d:7c:c7:01:0a:12:db:8d:e0:48:4a:c1:05:2f:ae:b1:a9:36:
         fc:a5:f3:6f:45:37:38:75:75:79:b8:26:72:51:8e:4f:20:2d:
         fc:59:c0:96:4f:b7:bb:ea:42:ae:49:94:6b:58:2a:d9:f3:30:
         da:ba:d3:7d:ff:4e:47:41:a5:e9:f1:e2:5d:18:2a:28:9f:7f:
         01:76:07:50:ba:4d:b9:e9:47:e5:ef:d7:20:c9:d7:cd:29:52:
         96:15:21:9a:3f:6c:8d:01:ff:87:21:fe:d9:22:c5:29:04:5b:
         1d:46:88:d0:bb:49:2c:a8:0e:94:3b:08:ec:3a:b6:af:16:7d:
         e1:f6:90:d4:a4:53:4c:25:3c:ac:73:15:fc:5e:4e:01:67:d5:
         b5:4b:40:a4:9c:e5:06:44:d8:4b:bd:6f:22:53:9d:f0:d5:40:
         f2:88:40:9e:e8:3b:ef:08:bf:8e:8f:e7:f2:55:40:71:3b:e1:
         5f:dd:7b:79:85:70:fb:0a:59:70:83:4f:22:99:52:b7:b1:34:
         98:c0:b8:0e:7a:e8:bd:72:98:ba:6d:0c:5e:d6:c3:3b:ac:c3:
         34:55:5f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:03:04 2025 by rpki-client