Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232362e302f32342d3234203d3e203631383531.roa
File:                     3137372e37352e3232362e302f32342d3234203d3e203631383531.roa (raw, json)
Hash identifier:          pqOUgBJ7K8YHym1XM0Iq0agEbi2Dm1hDV6VBU5c1AOo=
Subject key identifier:   75:97:E1:2C:D5:4F:A5:CD:C0:54:F4:A0:8E:FE:38:97:9D:66:8A:70
Certificate issuer:       /CN=99D7C44A0449C417C1F22D6C2A40EA99801B4649
Certificate serial:       44EA20B4BDB5F4F6E7C05BEF63F328B4464F253E
Authority key identifier: 99:D7:C4:4A:04:49:C4:17:C1:F2:2D:6C:2A:40:EA:99:80:1B:46:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D7C44A0449C417C1F22D6C2A40EA99801B4649.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232362e302f32342d3234203d3e203631383531.roa
Signing time:             Sun 07 Sep 2025 18:20:46 +0000
ROA not before:           Sun 07 Sep 2025 18:15:46 +0000
ROA not after:            Sun 06 Sep 2026 18:20:46 +0000
asID:                     61851
IP address blocks:        177.75.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/99D7C44A0449C417C1F22D6C2A40EA99801B4649.crl
                          rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/99D7C44A0449C417C1F22D6C2A40EA99801B4649.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D7C44A0449C417C1F22D6C2A40EA99801B4649.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 05:11:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:ea:20:b4:bd:b5:f4:f6:e7:c0:5b:ef:63:f3:28:b4:46:4f:25:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D7C44A0449C417C1F22D6C2A40EA99801B4649
        Validity
            Not Before: Sep  7 18:15:46 2025 GMT
            Not After : Sep  6 18:20:46 2026 GMT
        Subject: CN=7597E12CD54FA5CDC054F4A08EFE38979D668A70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fe:77:82:79:eb:98:bc:6c:02:80:ef:37:56:
                    be:cd:d1:41:4f:d8:2d:c2:1d:16:65:83:5e:55:3f:
                    0f:e5:d4:9c:6b:2f:06:1a:db:7d:f2:c3:33:41:27:
                    27:8f:eb:7d:af:2e:7d:47:07:ff:fe:24:88:3e:fe:
                    22:60:c1:d8:b1:fe:46:71:33:f8:0f:ec:b7:b3:16:
                    b4:d9:63:19:fb:f1:3f:fa:0f:13:11:bf:84:b9:b3:
                    e5:7d:26:b8:a6:a9:1b:68:54:0b:14:9e:2f:0d:9a:
                    1d:55:84:a5:17:db:52:53:02:29:94:fe:60:9a:92:
                    0e:2e:d7:fa:f7:c9:5e:0e:e5:fd:a7:da:2d:ad:b4:
                    13:f2:e1:35:49:0b:77:4d:68:a5:4c:ae:0b:39:97:
                    d1:ad:3f:d5:b7:16:e2:15:fc:27:de:c9:33:3c:ba:
                    7d:52:6a:92:1f:cf:72:40:a3:80:d6:e9:0a:b9:f5:
                    01:ee:0a:41:05:d7:cf:12:5b:c0:76:66:a1:ca:24:
                    ea:ac:fb:e5:be:d8:3a:55:bb:0e:40:00:6c:b9:e0:
                    8b:7c:99:3f:11:91:56:2d:45:11:ea:02:8b:5c:88:
                    2a:10:30:14:6a:5e:3f:f7:ca:87:ee:62:c7:20:41:
                    d4:bb:b3:0b:e4:38:16:83:71:69:e7:ec:a7:67:c0:
                    3e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:97:E1:2C:D5:4F:A5:CD:C0:54:F4:A0:8E:FE:38:97:9D:66:8A:70
            X509v3 Authority Key Identifier:
                keyid:99:D7:C4:4A:04:49:C4:17:C1:F2:2D:6C:2A:40:EA:99:80:1B:46:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/99D7C44A0449C417C1F22D6C2A40EA99801B4649.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D7C44A0449C417C1F22D6C2A40EA99801B4649.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232362e302f32342d3234203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:21:65:40:b6:92:13:bb:ba:39:77:a2:16:83:38:a8:1e:20:
         07:f2:4a:2d:6c:d5:55:16:7b:ae:2b:72:da:76:b1:83:b2:de:
         7e:ee:ff:ea:dd:37:79:52:2f:85:40:54:c4:05:18:b9:a3:2c:
         96:78:5b:ec:b5:f6:84:58:c0:4b:83:89:ec:8a:40:1b:0a:64:
         1e:24:1d:0c:a0:14:72:67:d2:6b:f5:52:71:f0:d1:a0:3d:b7:
         f7:13:82:78:b6:dd:0e:7f:74:7d:51:93:d5:f5:a9:ed:02:52:
         3a:cc:15:1f:ca:e9:5e:c3:e5:3d:6a:7d:9b:05:fb:f5:ca:96:
         94:ae:fd:28:5d:9d:e5:7d:1a:cd:60:36:50:8c:49:77:82:3d:
         5f:ce:c8:8c:e7:80:bc:d0:96:a7:83:a8:3f:2b:4d:65:0b:d2:
         eb:34:ec:e7:90:f0:a1:f9:42:86:37:6c:45:08:06:47:dc:9e:
         69:b8:2d:dd:3c:8a:f3:29:16:97:22:80:01:b6:32:d5:7d:e5:
         5e:f2:c3:00:07:a5:e3:00:c1:54:40:91:96:78:9b:f0:44:2e:
         3a:c2:ef:e6:8b:5e:0e:5a:b3:05:67:c3:92:2c:cc:fc:47:f4:
         54:6b:0a:a5:d6:d0:1a:a8:30:58:fa:53:d4:c1:b6:63:d5:a5:
         cb:a4:a7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 06:50:19 2025 by rpki-client