Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3137372e3138352e3139322e302f32302d3234203d3e203238323939.roa
File:                     3137372e3138352e3139322e302f32302d3234203d3e203238323939.roa (raw, json)
Hash identifier:          WOxkFZ1zqCvjFetxzwuAtznsRoz8jxsbadLVzYTIAP4=
Subject key identifier:   70:79:0A:BA:4D:98:77:73:84:90:60:3C:5B:F8:96:C4:F7:73:00:AC
Certificate issuer:       /CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
Certificate serial:       257511098A4EFF9BD379B08D93AC4AE745188974
Authority key identifier: 50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3137372e3138352e3139322e302f32302d3234203d3e203238323939.roa
Signing time:             Thu 17 Jul 2025 16:11:23 +0000
ROA not before:           Thu 17 Jul 2025 16:06:23 +0000
ROA not after:            Thu 16 Jul 2026 16:11:23 +0000
asID:                     28299
IP address blocks:        177.185.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl
                          rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 07:11:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:75:11:09:8a:4e:ff:9b:d3:79:b0:8d:93:ac:4a:e7:45:18:89:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
        Validity
            Not Before: Jul 17 16:06:23 2025 GMT
            Not After : Jul 16 16:11:23 2026 GMT
        Subject: CN=70790ABA4D9877738490603C5BF896C4F77300AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9b:27:c8:dc:e1:0a:f8:bc:b1:d0:47:04:0c:
                    cc:f9:14:6c:54:8f:47:9f:2f:62:5a:e7:13:40:39:
                    a4:fb:48:91:5c:48:3d:58:8d:83:ab:32:42:cd:95:
                    04:7e:55:d9:f5:be:78:8e:45:2c:f1:95:45:29:55:
                    6b:af:15:6d:be:0c:3f:e9:6f:64:b8:48:cc:12:f1:
                    3f:da:99:de:1b:af:0e:9a:d8:f6:db:71:7b:e2:3f:
                    02:4b:4a:db:f6:47:34:39:43:d5:1d:80:2c:1c:4a:
                    d1:92:fa:21:4f:1b:00:a0:1e:81:4b:84:f1:2b:c9:
                    47:58:f7:7a:5d:e8:e1:30:be:fa:e5:ed:41:21:0b:
                    ce:71:fb:13:98:40:80:5f:18:e6:f1:9b:ac:84:d1:
                    83:68:34:6a:fe:44:71:e4:2b:f1:93:16:fe:c3:d4:
                    f3:fb:4e:b0:39:21:6c:e2:a9:7c:3b:0a:1f:9c:17:
                    27:dd:c5:76:d4:a5:b1:3a:4a:1a:6d:39:17:da:52:
                    f0:1e:1e:0f:45:9a:d6:e5:d3:9a:dc:79:f7:18:4e:
                    9d:67:ed:1e:76:b8:07:93:8a:cb:14:6a:f7:0b:d4:
                    6e:1e:81:14:c0:e6:03:af:19:ab:e5:2e:bd:0a:a3:
                    13:10:ed:71:ef:4d:fa:a4:d1:6d:1e:b1:c3:af:0a:
                    ca:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:79:0A:BA:4D:98:77:73:84:90:60:3C:5B:F8:96:C4:F7:73:00:AC
            X509v3 Authority Key Identifier:
                keyid:50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3137372e3138352e3139322e302f32302d3234203d3e203238323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3a:b2:47:c0:ae:c2:37:22:14:2d:4f:3f:dd:08:57:76:95:c0:
         fe:59:67:1f:38:9d:27:39:c8:e3:94:d6:0f:75:bb:aa:50:1d:
         b6:41:65:2a:f3:1b:7f:c5:96:10:69:a3:3d:40:15:41:e5:c7:
         51:3c:33:9c:80:5d:69:6c:06:e2:a5:7c:17:27:77:1a:50:cf:
         97:08:5b:cc:c9:bf:d4:11:99:56:a6:02:80:4a:c0:32:25:6a:
         fe:7c:e6:f8:ac:b1:d5:aa:01:10:25:9a:2b:42:0e:51:9a:1d:
         19:a0:3b:f1:2b:49:0c:be:35:cd:a2:cf:9d:6a:b9:31:1b:3a:
         60:d5:fd:d3:d4:70:17:57:ab:5b:c9:07:ee:55:db:0d:38:bc:
         f2:67:4c:4e:1f:ca:ae:78:40:fc:83:28:75:47:60:e8:bf:08:
         63:80:a5:0c:17:67:fb:73:fb:d4:7d:b8:5f:4a:ef:ff:57:c0:
         a1:09:ea:d3:b9:66:18:5d:67:ba:69:1f:3f:91:ec:e6:05:5e:
         0b:a6:9a:48:c1:2c:d1:19:6b:6a:45:e6:25:2f:56:de:ad:f7:
         e4:b6:e0:b3:fd:ef:2b:40:6e:12:d3:01:c9:22:89:d7:68:74:
         1c:54:eb:87:63:e8:50:12:31:f7:8b:39:43:9a:64:18:70:31:
         00:0b:28:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:56:27 2025 by rpki-client