Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232342e302f32302d3234203d3e203631383531.roa
File:                     3137372e37352e3232342e302f32302d3234203d3e203631383531.roa (raw, json)
Hash identifier:          g+/Iv2Ju58yCtbgqJjoZ2g7pFpWkWQCslw3e65Xf+aY=
Subject key identifier:   C9:AF:36:D5:32:6C:2F:ED:64:64:DB:49:04:71:E1:9F:17:C2:58:8D
Certificate issuer:       /CN=E08831199EA949E55408336EDE9CA089E4C3F686
Certificate serial:       6D5FDE83EA934EFD8FBAC85B16868EE645976772
Authority key identifier: E0:88:31:19:9E:A9:49:E5:54:08:33:6E:DE:9C:A0:89:E4:C3:F6:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E08831199EA949E55408336EDE9CA089E4C3F686.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232342e302f32302d3234203d3e203631383531.roa
Signing time:             Tue 03 Feb 2026 18:30:03 +0000
ROA not before:           Tue 03 Feb 2026 18:25:03 +0000
ROA not after:            Tue 02 Feb 2027 18:30:03 +0000
asID:                     61851
IP address blocks:        177.75.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/E08831199EA949E55408336EDE9CA089E4C3F686.crl
                          rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/E08831199EA949E55408336EDE9CA089E4C3F686.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E08831199EA949E55408336EDE9CA089E4C3F686.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 20:44:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:5f:de:83:ea:93:4e:fd:8f:ba:c8:5b:16:86:8e:e6:45:97:67:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E08831199EA949E55408336EDE9CA089E4C3F686
        Validity
            Not Before: Feb  3 18:25:03 2026 GMT
            Not After : Feb  2 18:30:03 2027 GMT
        Subject: CN=C9AF36D5326C2FED6464DB490471E19F17C2588D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6c:d6:8f:dd:5c:1d:7c:81:ee:fc:ad:aa:b0:
                    90:6f:63:99:20:4c:4a:db:32:86:48:03:a7:c1:4b:
                    39:7b:23:d9:cd:d0:a1:42:d9:9f:3a:fb:7c:80:cb:
                    87:3a:29:47:b3:e7:c2:46:8f:1b:54:a2:ae:6a:99:
                    45:c3:db:04:0c:da:27:16:0e:b3:4e:2b:49:ee:51:
                    86:1b:37:e3:6c:ae:00:c2:5f:b7:31:98:c5:35:5c:
                    a7:10:17:01:45:38:f3:e8:40:d8:63:15:d6:01:00:
                    d5:35:a2:d8:b2:be:e7:0e:93:03:46:2c:78:90:b0:
                    72:01:f6:04:ae:45:5f:bd:fd:1c:c0:cb:6b:4c:c2:
                    fc:27:e2:38:ce:83:b1:19:9a:f1:e8:be:9d:d2:0a:
                    89:57:92:8e:bb:f2:4d:68:d4:ab:2d:74:e5:9c:9e:
                    af:8d:34:a5:dc:3c:29:49:0a:c4:70:9d:e8:6a:26:
                    a7:7b:ff:a6:01:85:03:bc:6f:0d:c6:c6:10:66:67:
                    58:ac:6f:27:ff:8d:1d:94:8e:e1:3a:64:5d:f8:69:
                    de:35:44:50:e4:fc:a8:4a:e4:7f:d2:c4:a4:45:32:
                    0f:3f:57:16:ef:e8:ed:da:9a:25:c5:d4:e1:38:68:
                    ea:4f:a4:ad:16:3e:fc:27:4d:65:ed:2a:38:58:0f:
                    fa:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:AF:36:D5:32:6C:2F:ED:64:64:DB:49:04:71:E1:9F:17:C2:58:8D
            X509v3 Authority Key Identifier:
                keyid:E0:88:31:19:9E:A9:49:E5:54:08:33:6E:DE:9C:A0:89:E4:C3:F6:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/E08831199EA949E55408336EDE9CA089E4C3F686.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E08831199EA949E55408336EDE9CA089E4C3F686.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232342e302f32302d3234203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         48:23:d0:5c:3a:24:fb:cd:6c:96:75:d9:2d:34:2b:82:02:81:
         14:5a:75:a9:61:d6:34:ba:23:47:0e:3d:d0:44:21:43:4a:d9:
         dc:05:53:82:09:e0:f8:67:20:ca:c3:8d:d0:48:f7:ab:e7:d8:
         f6:04:7d:7b:16:02:cc:3d:d7:7c:5f:7f:2a:dc:05:a2:8c:68:
         ea:99:e6:6f:d3:17:09:8d:7b:60:e5:45:d1:26:c1:5b:ac:9d:
         bc:69:ee:e6:e8:60:58:e8:3c:aa:b5:b7:7d:8e:4a:f5:68:05:
         b3:de:18:c3:08:55:9a:18:17:c5:26:b1:37:64:68:f1:b8:d4:
         17:73:84:fe:42:07:83:71:29:f9:0b:47:8b:a4:ff:e2:50:8c:
         93:98:78:ec:83:41:4b:c4:3c:35:cb:e9:25:29:34:af:72:13:
         c6:3c:49:05:62:b3:2b:2c:f0:c8:b8:3e:c7:1c:e5:aa:a8:d6:
         40:6a:52:86:9b:2e:5e:2e:43:dc:1e:c7:d8:63:88:ad:c0:e2:
         91:d2:64:04:e2:6c:c3:1d:f4:85:bc:84:9c:c6:d0:a3:20:d3:
         9a:01:a8:a3:55:89:30:d3:cd:b9:56:6d:58:8a:e2:57:b7:40:
         b2:88:73:36:b9:49:8c:e2:d6:5f:7d:81:3c:1a:05:e7:13:b9:
         e6:92:cf:d1
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUbV/eg+qTTv2PushbFoaO5kWXZ3IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTA4ODMxMTk5RUE5NDlFNTU0MDgzMzZFREU5Q0EwODlF
NEMzRjY4NjAeFw0yNjAyMDMxODI1MDNaFw0yNzAyMDIxODMwMDNaMDMxMTAvBgNV
BAMTKEM5QUYzNkQ1MzI2QzJGRUQ2NDY0REI0OTA0NzFFMTlGMTdDMjU4OEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDObNaP3VwdfIHu/K2qsJBvY5kg
TErbMoZIA6fBSzl7I9nN0KFC2Z86+3yAy4c6KUez58JGjxtUoq5qmUXD2wQM2icW
DrNOK0nuUYYbN+NsrgDCX7cxmMU1XKcQFwFFOPPoQNhjFdYBANU1otiyvucOkwNG
LHiQsHIB9gSuRV+9/RzAy2tMwvwn4jjOg7EZmvHovp3SColXko678k1o1KstdOWc
nq+NNKXcPClJCsRwnehqJqd7/6YBhQO8bw3GxhBmZ1isbyf/jR2UjuE6ZF34ad41
RFDk/KhK5H/SxKRFMg8/Vxbv6O3amiXF1OE4aOpPpK0WPvwnTWXtKjhYD/rzAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUya821TJsL+1kZNtJBHHhnxfCWI0wHwYDVR0j
BBgwFoAU4IgxGZ6pSeVUCDNu3pygieTD9oYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOU1lNzgyWWFacUV3V0YzdVBFSzlrR0g3b0E4a0FzRjlSa2lxdDZUZGpR
QjkvMC9FMDg4MzExOTlFQTk0OUU1NTQwODMzNkVERTlDQTA4OUU0QzNGNjg2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UwODgzMTE5OUVBOTQ5RTU1
NDA4MzM2RURFOUNBMDg5RTRDM0Y2ODYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlNZTc4MllhWnFFd1dGM3VQRUs5a0dIN29BOGtBc0Y5UmtpcXQ2VGRqUUI5LzAv
MzEzNzM3MmUzNzM1MmUzMjMyMzQyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzNjMx
MzgzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEsUvgMA0GCSqGSIb3DQEBCwUAA4IBAQBII9BcOiT7
zWyWddktNCuCAoEUWnWpYdY0uiNHDj3QRCFDStncBVOCCeD4ZyDKw43QSPer59j2
BH17FgLMPdd8X38q3AWijGjqmeZv0xcJjXtg5UXRJsFbrJ28ae7m6GBY6Dyqtbd9
jkr1aAWz3hjDCFWaGBfFJrE3ZGjxuNQXc4T+QgeDcSn5C0eLpP/iUIyTmHjsg0FL
xDw1y+klKTSvchPGPEkFYrMrLPDIuD7HHOWqqNZAalKGmy5eLkPcHsfYY4itwOKR
0mQE4mzDHfSFvIScxtCjINOaAaijVYkw0825Vm1YiuJXt0CyiHM2uUmM4tZffYE8
GgXnE7nmks/R
-----END CERTIFICATE-----
Generated at Mon Feb 23 02:51:37 2026 by rpki-client