Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232352e302f32342d3234203d3e203631383531.roa
File:                     3137372e37352e3232352e302f32342d3234203d3e203631383531.roa (raw, json)
Hash identifier:          7ZZUpzJ6vMS6PMWTNhzG8gZUDXRy/7DvX87my3I4MTo=
Subject key identifier:   FD:88:8B:E0:52:0E:24:27:E3:32:37:42:92:FE:C2:F1:3C:FC:56:F7
Certificate issuer:       /CN=99D7C44A0449C417C1F22D6C2A40EA99801B4649
Certificate serial:       4C009E2D764CBF3A173F57F846ED891B8F380808
Authority key identifier: 99:D7:C4:4A:04:49:C4:17:C1:F2:2D:6C:2A:40:EA:99:80:1B:46:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D7C44A0449C417C1F22D6C2A40EA99801B4649.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232352e302f32342d3234203d3e203631383531.roa
Signing time:             Sun 07 Sep 2025 18:20:48 +0000
ROA not before:           Sun 07 Sep 2025 18:15:48 +0000
ROA not after:            Sun 06 Sep 2026 18:20:48 +0000
asID:                     61851
IP address blocks:        177.75.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/99D7C44A0449C417C1F22D6C2A40EA99801B4649.crl
                          rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/99D7C44A0449C417C1F22D6C2A40EA99801B4649.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D7C44A0449C417C1F22D6C2A40EA99801B4649.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 05:11:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:00:9e:2d:76:4c:bf:3a:17:3f:57:f8:46:ed:89:1b:8f:38:08:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D7C44A0449C417C1F22D6C2A40EA99801B4649
        Validity
            Not Before: Sep  7 18:15:48 2025 GMT
            Not After : Sep  6 18:20:48 2026 GMT
        Subject: CN=FD888BE0520E2427E332374292FEC2F13CFC56F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:65:bd:12:9e:27:a0:48:65:c0:54:1f:c2:59:
                    3f:f0:d2:db:80:5b:03:21:d3:16:54:1a:1f:bf:1e:
                    3d:c4:a0:56:73:da:59:a1:55:fa:c6:e6:af:64:a3:
                    fb:bc:14:34:83:b0:55:0f:13:fb:f5:d1:07:2f:8e:
                    1f:cb:e7:73:15:b4:f3:4f:70:cc:46:48:98:6a:96:
                    8d:1a:06:6c:eb:21:5b:16:69:3b:da:2b:5a:36:d5:
                    c3:9c:a1:29:95:06:85:fb:f2:0f:f8:6e:7b:64:35:
                    30:18:54:ff:64:d4:4a:cc:91:cc:32:85:3f:f5:a6:
                    78:03:48:c1:10:84:66:74:0b:63:5f:3f:b3:85:b4:
                    84:b3:9c:e6:96:ea:74:4a:dc:b1:8b:6e:cc:cc:23:
                    6a:f6:5a:c9:85:fc:ad:b4:f8:aa:94:cd:3a:2f:11:
                    ba:31:a6:91:b3:29:e2:3d:50:0d:dc:ac:c3:86:51:
                    62:3b:0a:60:d4:7d:0d:68:b2:43:9a:43:fc:3e:f1:
                    3f:6f:94:62:64:6d:72:df:11:d8:5d:c8:18:11:22:
                    a1:f1:95:28:57:a7:ba:a9:1e:2b:7c:a0:36:56:65:
                    f2:67:75:37:aa:02:a3:cd:93:b4:05:f8:40:b4:aa:
                    09:94:a1:49:6f:ec:f4:0b:d3:98:fd:d4:88:62:4d:
                    8d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:88:8B:E0:52:0E:24:27:E3:32:37:42:92:FE:C2:F1:3C:FC:56:F7
            X509v3 Authority Key Identifier:
                keyid:99:D7:C4:4A:04:49:C4:17:C1:F2:2D:6C:2A:40:EA:99:80:1B:46:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/99D7C44A0449C417C1F22D6C2A40EA99801B4649.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D7C44A0449C417C1F22D6C2A40EA99801B4649.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232352e302f32342d3234203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:08:75:4d:5b:5b:6e:46:64:7e:f0:33:2b:aa:6a:65:04:d9:
         02:e4:73:e3:b5:77:ed:f0:6b:17:b8:41:3e:a7:5c:f5:61:d7:
         a1:95:d8:ba:97:33:78:17:22:d5:28:72:5f:e6:c6:db:26:c4:
         40:fc:66:44:19:c2:0d:c2:9f:cd:2c:39:63:d3:21:62:7a:1c:
         03:1f:19:be:50:9b:7f:82:93:84:cf:5e:9a:d0:28:cc:46:ec:
         9e:51:01:86:f6:bd:81:36:e4:63:b6:a5:d0:43:42:8c:27:7c:
         43:53:f0:81:8e:cf:7d:cb:bc:98:41:9f:08:fd:cf:aa:3c:be:
         c6:ef:a9:9e:2b:8a:51:7c:fb:af:d1:e5:dc:4c:43:22:a3:07:
         1e:6d:53:11:01:b7:ab:a2:ec:d8:22:b3:77:a7:a5:c3:09:81:
         c3:51:2c:a0:93:29:0b:30:1d:3b:29:83:ca:97:90:99:5a:18:
         1b:9f:bc:a8:cc:bd:26:80:77:b1:c5:2a:e9:c4:5a:c1:f8:75:
         61:ce:88:73:56:df:79:3e:c8:46:c0:3c:a6:84:b3:50:1f:d1:
         63:b2:34:65:7e:94:4e:0d:81:ff:ca:e9:5f:84:7a:bf:c4:b3:
         c2:cd:80:0a:c4:0b:51:df:f8:86:14:c9:55:50:ab:0e:e5:26:
         2f:91:a4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 06:56:55 2025 by rpki-client