Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39342e302f32332d3233203d3e203533303437.roa
File:                     3137372e3130312e39342e302f32332d3233203d3e203533303437.roa (raw, json)
Hash identifier:          9l9k6fY2qGCygOLMvxgRPbGQ+nCDMZ2GjU6d4SbNamg=
Subject key identifier:   14:73:64:2F:78:EF:A2:57:23:FC:2C:8F:D5:F6:DA:8E:55:5F:E8:7C
Certificate issuer:       /CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Certificate serial:       69B35DCBFABB78AE2A6BED89C86F3DA4BE002D4F
Authority key identifier: D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39342e302f32332d3233203d3e203533303437.roa
Signing time:             Thu 08 Oct 2026 13:39:43 +0000
ROA not before:           Thu 08 Oct 2026 13:34:43 +0000
ROA not after:            Thu 07 Oct 2027 13:39:43 +0000
asID:                     53047
IP address blocks:        177.101.94.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 12:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:b3:5d:cb:fa:bb:78:ae:2a:6b:ed:89:c8:6f:3d:a4:be:00:2d:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
        Validity
            Not Before: Oct  8 13:34:43 2026 GMT
            Not After : Oct  7 13:39:43 2027 GMT
        Subject: CN=1473642F78EFA25723FC2C8FD5F6DA8E555FE87C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d3:a0:af:c8:cb:7f:13:f8:a0:2c:f3:2c:a9:
                    55:0c:c5:41:b8:b2:8f:3a:14:b8:93:ca:20:0d:7b:
                    0d:91:75:da:45:a5:8e:1a:df:b4:63:92:cd:1b:84:
                    e9:5a:e6:99:c4:36:43:b5:85:a9:bb:72:5c:7c:4d:
                    b3:c7:88:54:b1:42:f3:02:fa:c0:b4:99:da:41:62:
                    9c:17:24:2b:73:de:2e:ba:b9:ca:30:08:07:be:c8:
                    2e:d6:ed:43:0c:29:09:8e:d6:c0:5d:7b:79:69:4e:
                    c9:13:d7:58:ef:1c:7e:aa:31:15:fa:71:1b:cd:89:
                    50:4e:a5:d6:4a:fc:4a:74:f1:2f:86:e4:af:1a:d1:
                    bb:06:cc:65:e0:bb:7d:68:0c:df:a0:59:d5:78:00:
                    b4:73:a0:7e:ac:b5:4b:db:10:fd:0d:47:95:b2:8d:
                    fd:b1:72:87:21:22:e2:2d:ee:d1:8b:5a:70:7c:6d:
                    61:b2:69:b5:1d:08:01:38:85:7c:80:13:92:55:68:
                    dc:f0:d7:f8:a2:44:9b:a1:40:3f:12:f6:aa:95:d4:
                    72:df:42:69:95:e4:4e:e9:2d:db:d7:ee:84:0f:8f:
                    d1:d5:30:48:ca:99:26:39:4d:3b:d4:f1:98:3c:00:
                    ac:b2:71:40:4b:d0:5a:ef:d9:04:ec:da:04:a5:23:
                    54:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:73:64:2F:78:EF:A2:57:23:FC:2C:8F:D5:F6:DA:8E:55:5F:E8:7C
            X509v3 Authority Key Identifier:
                keyid:D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39342e302f32332d3233203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:46:ba:f7:ac:08:be:6f:89:18:ed:d2:f6:64:75:18:cf:be:
         08:1c:0a:d3:4e:0c:fd:a1:ea:a6:96:01:28:7c:97:04:ae:f7:
         f1:3f:a3:96:de:69:3a:6d:f2:68:5f:f8:f3:09:d6:95:65:c3:
         1b:11:88:86:50:fa:10:c3:27:09:65:81:0c:cd:0a:4f:b4:1c:
         6c:0c:85:9d:66:c4:a2:23:58:0f:0d:0b:59:e5:0e:f8:a0:d6:
         af:93:e0:28:18:72:42:e5:70:d0:da:d7:63:bf:c2:48:6f:b0:
         a3:ac:62:03:82:01:fe:25:f9:cc:06:ca:c4:37:20:8f:11:04:
         6f:ac:3b:da:bf:f7:54:84:e7:0d:6a:7a:46:f8:0d:99:eb:11:
         d0:b7:58:a8:50:b4:3f:f3:9b:dd:4e:30:9b:ef:6c:ba:79:ea:
         93:53:42:52:26:73:03:82:1e:fb:09:96:e0:ae:b1:a6:9d:f4:
         af:e8:08:94:54:a7:cd:69:d5:9a:ea:d4:e9:65:90:22:b0:90:
         78:97:c8:8c:33:a2:ea:98:6c:74:5d:60:3b:4e:53:71:ee:88:
         f9:d1:f1:13:69:ba:01:1a:44:d8:2b:85:0e:56:5f:25:aa:4a:
         d5:7c:4e:13:1b:36:f8:02:1c:21:8e:c2:8c:ab:d3:11:d2:23:
         db:c2:4c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:17:35 2026 by rpki-client