Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232362e302f32332d3233203d3e203631383531.roa
File:                     3137372e37352e3232362e302f32332d3233203d3e203631383531.roa (raw, json)
Hash identifier:          cw2CKH+sUBEVquK+AlyHDJowtx7p6pH9+jXZtIpcvS8=
Subject key identifier:   84:98:6C:75:6D:23:A7:AB:76:F3:C8:CF:25:3D:44:7C:78:69:69:BB
Certificate issuer:       /CN=99D7C44A0449C417C1F22D6C2A40EA99801B4649
Certificate serial:       738808C27F262FE11411E52A2834E168D7D23FDC
Authority key identifier: 99:D7:C4:4A:04:49:C4:17:C1:F2:2D:6C:2A:40:EA:99:80:1B:46:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D7C44A0449C417C1F22D6C2A40EA99801B4649.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232362e302f32332d3233203d3e203631383531.roa
Signing time:             Sun 07 Sep 2025 18:20:48 +0000
ROA not before:           Sun 07 Sep 2025 18:15:48 +0000
ROA not after:            Sun 06 Sep 2026 18:20:48 +0000
asID:                     61851
IP address blocks:        177.75.226.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/99D7C44A0449C417C1F22D6C2A40EA99801B4649.crl
                          rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/99D7C44A0449C417C1F22D6C2A40EA99801B4649.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D7C44A0449C417C1F22D6C2A40EA99801B4649.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 05:54:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:88:08:c2:7f:26:2f:e1:14:11:e5:2a:28:34:e1:68:d7:d2:3f:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D7C44A0449C417C1F22D6C2A40EA99801B4649
        Validity
            Not Before: Sep  7 18:15:48 2025 GMT
            Not After : Sep  6 18:20:48 2026 GMT
        Subject: CN=84986C756D23A7AB76F3C8CF253D447C786969BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:50:c5:86:ec:61:a0:74:e9:af:85:79:c3:75:
                    5a:d0:f8:a3:41:03:af:77:d5:bf:24:27:40:60:04:
                    cc:8b:23:e3:5e:80:3d:ff:a3:16:01:82:e2:d1:e8:
                    33:9e:55:fc:e8:e2:26:fa:8f:6b:f2:fa:e4:a9:0a:
                    eb:33:60:b1:6a:7b:92:7e:f8:da:6c:38:68:11:a8:
                    bc:7b:ba:0d:03:12:3f:2a:ce:8b:bb:e2:9a:3f:ce:
                    c4:cb:5b:b0:ea:ef:34:0e:05:24:d7:4b:69:b2:08:
                    6e:2b:c5:8a:c4:9e:6e:ca:af:e1:b4:0a:ad:0d:50:
                    55:79:1e:26:4a:73:52:d7:57:59:a2:30:75:bc:62:
                    6f:94:61:83:0a:d5:17:06:78:ce:2f:98:43:cc:95:
                    95:63:71:9c:2e:5c:dd:10:79:93:15:de:99:27:2f:
                    b0:4d:1a:aa:70:23:1a:5c:2d:be:d0:86:e1:22:fe:
                    01:8e:9d:87:91:72:99:a9:e3:ce:fd:00:4d:12:62:
                    b1:f7:5d:5b:92:b8:0c:a8:76:45:99:99:6e:ff:4a:
                    25:50:36:16:96:62:66:4b:1e:c0:f9:42:dd:45:55:
                    08:82:a7:7a:3d:da:b4:9e:fc:48:c7:10:7c:f0:b8:
                    ab:71:f1:19:19:42:c3:fe:f3:4d:ee:b4:c0:ee:e9:
                    74:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:98:6C:75:6D:23:A7:AB:76:F3:C8:CF:25:3D:44:7C:78:69:69:BB
            X509v3 Authority Key Identifier:
                keyid:99:D7:C4:4A:04:49:C4:17:C1:F2:2D:6C:2A:40:EA:99:80:1B:46:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/99D7C44A0449C417C1F22D6C2A40EA99801B4649.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D7C44A0449C417C1F22D6C2A40EA99801B4649.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232362e302f32332d3233203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:09:60:08:d0:26:fc:39:03:90:47:47:c1:24:bb:04:51:eb:
         8f:15:10:c2:ae:1b:3a:01:ce:b5:6d:67:49:4a:4d:9f:b4:ff:
         f3:c1:36:db:61:e4:bf:75:6e:06:ad:ce:2c:5f:a6:06:c2:4c:
         c3:96:b0:5c:d8:bb:8f:2e:d7:cf:d7:fb:dd:7e:b2:ab:5e:47:
         c3:89:ce:fe:e3:aa:4e:b8:1d:ed:da:df:9b:8c:c0:06:aa:92:
         dd:ad:2f:a4:af:85:9f:ba:6f:4b:6d:1d:c8:15:45:df:d1:e4:
         ac:de:2c:d9:c3:05:5f:c5:08:30:db:78:66:b3:8a:57:2b:aa:
         28:59:60:5d:89:06:4d:13:17:f9:97:7a:06:6c:72:35:6a:03:
         d0:16:3c:a5:6a:ee:f7:30:a6:c9:5a:b7:c0:9e:f3:0c:c5:4e:
         3d:8e:1f:bf:f9:a3:d4:f5:f3:1e:57:71:a8:f4:b0:a8:9f:39:
         a7:9c:6c:06:47:7f:8b:cb:66:50:5b:b3:e7:b6:0f:5b:9b:f6:
         cb:da:68:e1:33:2e:ed:69:a4:43:1d:60:48:6d:8a:ce:35:19:
         22:0f:f1:b2:36:92:91:a4:34:16:7b:f1:8b:7c:d2:1e:3d:a7:
         6f:ae:b2:6d:45:29:a5:7e:a2:a8:7b:e2:fa:72:1c:f4:99:69:
         59:ed:e6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 13:43:18 2025 by rpki-client