Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3137372e31322e3136302e302f32302d3234203d3e203238323939.roa
File:                     3137372e31322e3136302e302f32302d3234203d3e203238323939.roa (raw, json)
Hash identifier:          wzMBdr6EwrUsZqEfo5mLwMHTNR2yKvYGJX+fGkUDGdI=
Subject key identifier:   9B:78:3F:54:4D:CA:80:DA:D3:BC:D9:AB:F7:02:B2:90:8A:11:A3:D9
Certificate issuer:       /CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
Certificate serial:       4D9BF09BE7E9A977DC0EE9D8AC9AC096AEF12FDF
Authority key identifier: 50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3137372e31322e3136302e302f32302d3234203d3e203238323939.roa
Signing time:             Thu 17 Jul 2025 16:11:32 +0000
ROA not before:           Thu 17 Jul 2025 16:06:32 +0000
ROA not after:            Thu 16 Jul 2026 16:11:32 +0000
asID:                     28299
IP address blocks:        177.12.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl
                          rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 00:39:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:9b:f0:9b:e7:e9:a9:77:dc:0e:e9:d8:ac:9a:c0:96:ae:f1:2f:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
        Validity
            Not Before: Jul 17 16:06:32 2025 GMT
            Not After : Jul 16 16:11:32 2026 GMT
        Subject: CN=9B783F544DCA80DAD3BCD9ABF702B2908A11A3D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:40:7a:58:ce:e8:92:10:3f:ad:5b:ad:9a:9f:
                    f2:6a:5b:2f:68:87:c3:0e:05:12:45:4a:48:76:70:
                    88:c4:fd:c0:8d:1e:32:d8:55:f9:c5:39:a1:07:ec:
                    d0:0c:a1:f0:c4:24:06:98:90:ec:57:4f:da:e3:41:
                    a3:5c:7f:e3:59:9b:c3:49:42:4a:32:b1:74:9b:df:
                    82:a0:ed:8a:47:fb:03:a2:af:32:e0:8b:81:17:8c:
                    81:ce:8f:e7:37:2e:06:49:af:68:8c:1d:8b:e4:ac:
                    8a:08:62:f6:75:a4:32:b8:f8:9b:1f:d6:27:38:65:
                    33:a2:07:0f:88:55:b2:09:64:e8:02:b3:21:63:05:
                    fc:01:64:6d:10:a4:cf:3b:15:12:b6:5c:3d:33:8c:
                    e9:af:fa:f2:e9:7d:ec:dd:44:a3:b2:69:82:1b:1d:
                    e7:60:c3:49:8f:a1:c7:79:63:41:03:ee:35:77:87:
                    39:c7:63:ff:da:40:d8:49:46:c8:4d:c4:42:05:91:
                    da:f3:1c:70:9c:eb:f5:fd:32:3e:54:ec:8c:58:f6:
                    74:ee:39:78:2d:9b:06:d1:5c:cd:94:6b:7a:0d:82:
                    79:c5:5b:42:7d:13:59:c3:75:27:fd:29:11:1f:17:
                    47:70:e7:00:48:ac:ad:27:1a:42:bb:d5:b4:40:a5:
                    f7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:78:3F:54:4D:CA:80:DA:D3:BC:D9:AB:F7:02:B2:90:8A:11:A3:D9
            X509v3 Authority Key Identifier:
                keyid:50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3137372e31322e3136302e302f32302d3234203d3e203238323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         48:b1:48:18:3e:df:57:23:d1:89:09:e7:a9:06:8d:15:f3:4a:
         2d:69:5d:e6:48:a5:0f:17:6e:7c:89:85:e0:1c:e0:70:a0:9a:
         67:a1:8c:76:10:d0:65:1c:17:68:0e:d7:51:a4:89:75:f1:c4:
         25:9a:75:28:be:50:33:cc:af:b3:a6:e5:65:63:bd:17:c7:36:
         40:af:fb:8a:16:b9:10:7d:81:f6:51:24:2c:59:25:6f:30:4c:
         2c:46:14:86:1e:88:4d:93:cb:f7:25:53:a6:e9:76:9f:2d:69:
         40:93:89:b3:ca:63:95:ac:7e:7f:5e:c4:99:a3:5e:47:4a:88:
         53:e0:ed:23:48:42:94:8f:0a:eb:14:eb:f9:7f:70:09:7a:e2:
         7a:f9:6e:38:27:21:5a:0b:f5:c1:5e:76:ff:93:d5:db:01:00:
         49:57:9d:95:ff:ee:cf:26:3c:0e:76:b5:b1:00:2c:3a:30:61:
         9b:8d:30:47:a5:50:0e:4c:ff:55:07:af:a0:18:1b:44:3b:2d:
         4f:77:e4:35:f3:dd:59:56:e4:47:74:eb:f8:85:7e:28:cd:7b:
         ce:3b:73:a6:e3:d1:52:d2:7c:cf:fd:de:f9:e8:c6:a5:d2:0c:
         83:9b:87:3e:73:9b:c3:b5:0a:84:f6:0f:de:9f:18:b4:1c:4f:
         9b:9f:bc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:29:55 2025 by rpki-client