Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232342e302f32302d3332203d3e203631383531.roa
File:                     3137372e37352e3232342e302f32302d3332203d3e203631383531.roa (raw, json)
Hash identifier:          G4gvakTEI6C0o2ywAfLupZ2BC90oFWHxAnqArIoCAb8=
Subject key identifier:   CC:BB:00:76:39:7A:91:D8:83:27:63:FF:8E:0C:03:BB:F8:20:44:1A
Certificate issuer:       /CN=7AFFCCC5202FDBB1C9C240E70FD54CCA37BD9E50
Certificate serial:       276CBDEDEEBDAFBC5CA27F89478597048C0B0161
Authority key identifier: 7A:FF:CC:C5:20:2F:DB:B1:C9:C2:40:E7:0F:D5:4C:CA:37:BD:9E:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AFFCCC5202FDBB1C9C240E70FD54CCA37BD9E50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232342e302f32302d3332203d3e203631383531.roa
Signing time:             Wed 08 Apr 2026 13:33:24 +0000
ROA not before:           Wed 08 Apr 2026 13:28:24 +0000
ROA not after:            Wed 07 Apr 2027 13:33:24 +0000
asID:                     61851
IP address blocks:        177.75.224.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/7AFFCCC5202FDBB1C9C240E70FD54CCA37BD9E50.crl
                          rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/7AFFCCC5202FDBB1C9C240E70FD54CCA37BD9E50.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AFFCCC5202FDBB1C9C240E70FD54CCA37BD9E50.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 08:22:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:6c:bd:ed:ee:bd:af:bc:5c:a2:7f:89:47:85:97:04:8c:0b:01:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AFFCCC5202FDBB1C9C240E70FD54CCA37BD9E50
        Validity
            Not Before: Apr  8 13:28:24 2026 GMT
            Not After : Apr  7 13:33:24 2027 GMT
        Subject: CN=CCBB0076397A91D8832763FF8E0C03BBF820441A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:35:5a:b9:0f:51:a9:13:2f:13:42:8a:4d:b8:
                    47:09:fa:78:f7:c5:20:34:56:cd:98:19:91:e7:35:
                    91:ef:a0:eb:28:3a:53:3d:1a:5c:40:c4:c0:cc:ff:
                    fd:fd:48:90:ec:13:36:90:1f:52:78:aa:05:58:f2:
                    f8:58:9d:47:0f:5a:97:46:d4:e2:3f:fe:2f:6c:fd:
                    f8:0e:ae:5d:84:e9:e6:84:ac:8c:34:ee:77:55:36:
                    50:a3:33:56:86:fd:d1:54:cc:c7:33:97:84:ca:ac:
                    2c:46:3f:8f:80:85:95:67:2f:eb:26:c0:03:a5:65:
                    22:01:0e:f5:46:85:72:41:00:2a:4a:98:a7:dc:00:
                    0a:5c:55:2a:40:f2:fd:1c:df:64:06:c0:fa:c3:63:
                    97:ca:98:d5:5a:64:0d:df:60:ac:ed:1e:96:ba:ea:
                    49:3e:7d:9f:76:02:c7:37:de:c3:f0:a0:7e:79:92:
                    30:a0:56:2a:1e:a3:f6:ef:f4:5d:59:70:22:60:d0:
                    9f:94:88:4b:e9:7c:35:d8:4b:a8:2f:19:dd:79:44:
                    01:37:e4:2a:5f:85:f6:6b:be:49:31:dd:50:d4:a8:
                    c2:d1:59:b6:0c:77:6f:17:cb:49:26:19:d3:e5:c6:
                    9f:ec:41:00:95:4a:89:61:b6:e4:99:7a:31:cf:59:
                    a6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:BB:00:76:39:7A:91:D8:83:27:63:FF:8E:0C:03:BB:F8:20:44:1A
            X509v3 Authority Key Identifier:
                keyid:7A:FF:CC:C5:20:2F:DB:B1:C9:C2:40:E7:0F:D5:4C:CA:37:BD:9E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/7AFFCCC5202FDBB1C9C240E70FD54CCA37BD9E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AFFCCC5202FDBB1C9C240E70FD54CCA37BD9E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232342e302f32302d3332203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ad:82:95:84:6e:25:ef:48:92:33:df:48:30:a3:a9:09:7e:9a:
         ce:62:29:e6:37:a4:8b:75:b7:9c:aa:19:69:71:1f:97:af:94:
         47:c0:23:4b:f1:9c:ed:96:42:93:3c:e8:a1:98:8f:9a:c4:7d:
         cc:e3:52:51:8c:65:42:49:57:31:40:9c:0e:0b:74:41:4a:92:
         0a:61:54:9c:93:6e:ac:8c:d4:a6:f9:1a:72:6a:6b:b5:ef:02:
         db:15:4f:5b:ee:91:bf:00:8c:90:e9:33:60:36:46:f5:a3:78:
         46:1e:31:f8:4c:7c:f9:c0:da:3d:f1:5e:f2:57:25:a9:80:34:
         0d:7d:68:b8:31:46:47:d4:f3:02:09:d5:f9:f2:4a:03:1d:5d:
         20:7d:55:1e:3e:bd:6b:13:84:fc:58:87:8f:34:1e:35:c3:5b:
         0c:3b:c0:c4:19:80:91:77:46:b6:ff:d3:04:87:80:ab:8f:88:
         42:87:58:d1:69:52:35:3b:52:48:ba:57:9a:90:43:b2:09:79:
         d9:74:93:c3:53:ea:44:01:8e:2e:8a:a9:ae:57:4b:e6:cf:e7:
         ac:e1:dc:85:ff:55:83:e6:0a:a6:f1:a3:5c:c5:bc:bb:68:f8:
         31:57:20:0a:4c:57:bc:ab:dc:c3:b7:97:66:e0:c6:a8:05:5a:
         1d:1a:8a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 18:00:09 2026 by rpki-client