Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232342e302f32342d3234203d3e203631383531.roa
File:                     3137372e37352e3232342e302f32342d3234203d3e203631383531.roa (raw, json)
Hash identifier:          V1w9htEIbpktNDsAT0uk3SblxT5el1wqj79w6mUNn8o=
Subject key identifier:   B6:71:26:A7:FC:65:B8:9B:1A:69:B9:18:ED:79:49:F1:80:8B:7F:BC
Certificate issuer:       /CN=99D7C44A0449C417C1F22D6C2A40EA99801B4649
Certificate serial:       098CC2F27E05D853EB39AD3578C7D8D3EAFEA76B
Authority key identifier: 99:D7:C4:4A:04:49:C4:17:C1:F2:2D:6C:2A:40:EA:99:80:1B:46:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D7C44A0449C417C1F22D6C2A40EA99801B4649.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232342e302f32342d3234203d3e203631383531.roa
Signing time:             Sun 07 Sep 2025 18:20:53 +0000
ROA not before:           Sun 07 Sep 2025 18:15:53 +0000
ROA not after:            Sun 06 Sep 2026 18:20:53 +0000
asID:                     61851
IP address blocks:        177.75.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/99D7C44A0449C417C1F22D6C2A40EA99801B4649.crl
                          rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/99D7C44A0449C417C1F22D6C2A40EA99801B4649.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D7C44A0449C417C1F22D6C2A40EA99801B4649.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 05:11:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:8c:c2:f2:7e:05:d8:53:eb:39:ad:35:78:c7:d8:d3:ea:fe:a7:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D7C44A0449C417C1F22D6C2A40EA99801B4649
        Validity
            Not Before: Sep  7 18:15:53 2025 GMT
            Not After : Sep  6 18:20:53 2026 GMT
        Subject: CN=B67126A7FC65B89B1A69B918ED7949F1808B7FBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f9:69:0e:ec:a3:35:c6:14:a0:8b:1d:6f:8e:
                    2f:de:1f:50:ce:a2:b8:62:02:ce:24:48:07:c1:4f:
                    70:ec:f4:37:04:02:6a:44:af:ad:f2:d9:11:09:94:
                    f7:53:ec:fb:51:71:3c:ef:7e:1e:34:d5:9b:fd:48:
                    85:f8:31:9d:ce:42:ee:0e:29:8f:95:d2:bf:23:74:
                    19:b6:dc:e0:a8:7a:f0:ec:73:f9:21:13:49:e4:48:
                    e5:ed:6e:ef:fa:19:de:0d:19:1e:89:5c:88:18:11:
                    99:e8:3a:05:e8:30:15:bf:82:04:62:27:b1:ae:92:
                    c9:56:11:1c:24:e4:40:b6:1d:44:dd:df:2c:5e:42:
                    24:fc:6a:bb:38:c4:f2:b0:2f:6d:94:ef:ff:aa:5e:
                    e7:8e:b6:b2:d1:ea:b1:8b:13:5d:5f:18:f6:54:83:
                    09:30:91:ae:69:6c:04:22:cd:14:ea:48:5c:86:2c:
                    5a:e4:71:75:76:0b:81:66:0a:18:6b:95:e6:95:9d:
                    12:81:5d:f5:52:e2:13:c6:f9:8e:11:cf:2e:05:fb:
                    b9:33:29:e1:49:43:7e:e0:73:8f:49:52:0e:f9:e1:
                    19:e6:c2:e6:c7:5c:e3:57:96:30:6c:79:d2:28:e5:
                    79:bb:62:bc:26:7a:d8:77:de:9f:84:83:6c:ec:b9:
                    73:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:71:26:A7:FC:65:B8:9B:1A:69:B9:18:ED:79:49:F1:80:8B:7F:BC
            X509v3 Authority Key Identifier:
                keyid:99:D7:C4:4A:04:49:C4:17:C1:F2:2D:6C:2A:40:EA:99:80:1B:46:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/99D7C44A0449C417C1F22D6C2A40EA99801B4649.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D7C44A0449C417C1F22D6C2A40EA99801B4649.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232342e302f32342d3234203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:5d:13:57:39:73:18:9e:ef:b7:01:d7:c3:d9:4c:f3:9a:5e:
         9b:1a:c2:b3:ed:1d:86:8b:1a:5b:35:96:eb:46:86:ac:bf:16:
         de:38:b4:87:47:91:ee:40:14:09:10:a8:35:da:eb:9e:36:bb:
         aa:40:1d:8e:48:24:d9:6e:ac:b5:8e:94:f1:29:3b:69:0c:7a:
         08:e3:d6:53:36:54:d0:a2:9e:25:a8:b2:21:d6:03:4d:d8:81:
         9e:f1:18:d9:7b:7a:8a:e3:08:aa:86:2f:ad:2d:72:08:1c:c8:
         f3:b8:c4:4d:cc:43:85:3d:18:63:b2:be:e2:1e:cb:17:ef:a0:
         00:bf:41:b0:4e:8f:c0:54:db:9a:6d:79:a8:a1:47:5a:f3:7f:
         28:16:71:05:96:39:40:b8:a5:30:ca:01:25:31:82:26:68:f7:
         2b:94:3b:39:b4:8c:5a:92:91:4a:97:c3:3e:a0:cc:b2:e3:75:
         e4:0d:51:35:1e:23:61:e1:d1:15:ba:d1:73:53:6c:75:c8:01:
         98:ae:5e:4d:25:5a:79:91:b0:f7:28:32:5c:05:ba:a0:14:31:
         37:9d:75:37:56:1a:16:6f:af:6c:78:4b:8b:6e:c7:f0:3b:61:
         22:bb:96:9f:1f:c5:1e:45:18:03:57:ea:df:3d:b2:83:5e:d8:
         1c:f9:0f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 06:57:03 2025 by rpki-client