Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232372e302f32342d3234203d3e203631383531.roa
File:                     3137372e37352e3232372e302f32342d3234203d3e203631383531.roa (raw, json)
Hash identifier:          4C/hg7b3/aiOy1y/8H1eP6EOLASM42AT4DTVr8Hk08o=
Subject key identifier:   A3:1C:DF:2B:7B:D7:71:BC:6D:01:1F:63:80:4B:D6:C6:78:03:36:87
Certificate issuer:       /CN=99D7C44A0449C417C1F22D6C2A40EA99801B4649
Certificate serial:       15D89FA56DA17796C9BDB9CA6DF6E97226DA5AFF
Authority key identifier: 99:D7:C4:4A:04:49:C4:17:C1:F2:2D:6C:2A:40:EA:99:80:1B:46:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D7C44A0449C417C1F22D6C2A40EA99801B4649.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232372e302f32342d3234203d3e203631383531.roa
Signing time:             Sun 07 Sep 2025 18:20:49 +0000
ROA not before:           Sun 07 Sep 2025 18:15:49 +0000
ROA not after:            Sun 06 Sep 2026 18:20:49 +0000
asID:                     61851
IP address blocks:        177.75.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/99D7C44A0449C417C1F22D6C2A40EA99801B4649.crl
                          rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/99D7C44A0449C417C1F22D6C2A40EA99801B4649.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D7C44A0449C417C1F22D6C2A40EA99801B4649.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 05:11:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:d8:9f:a5:6d:a1:77:96:c9:bd:b9:ca:6d:f6:e9:72:26:da:5a:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D7C44A0449C417C1F22D6C2A40EA99801B4649
        Validity
            Not Before: Sep  7 18:15:49 2025 GMT
            Not After : Sep  6 18:20:49 2026 GMT
        Subject: CN=A31CDF2B7BD771BC6D011F63804BD6C678033687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5c:c7:06:e1:0c:cc:40:11:a6:09:68:57:03:
                    9f:54:2f:f9:f1:ed:32:1d:df:e3:e6:c8:9f:d2:9a:
                    ca:c3:0c:38:06:0e:fb:e8:41:8b:7b:87:e3:a3:4d:
                    18:0b:a8:64:f2:fb:3a:15:75:27:b2:22:73:65:38:
                    5b:9e:e7:18:6f:02:36:a3:8c:96:1f:aa:d7:57:30:
                    da:90:2f:d9:a8:cd:96:b0:51:b4:01:42:08:a3:20:
                    35:3c:07:6f:21:ef:bb:ea:f2:4c:eb:ec:15:74:bf:
                    8d:83:76:32:3b:af:de:3a:78:27:ce:43:13:75:5d:
                    9d:8e:04:29:9f:73:62:ec:a7:05:62:2c:3a:f7:bc:
                    70:3a:99:be:e7:a9:f7:f2:da:8e:64:36:da:04:7a:
                    4c:90:62:8b:68:77:83:32:62:dd:4f:16:f0:74:1a:
                    b2:d7:32:9a:7e:dc:3e:d0:da:4e:e4:2c:41:bd:9e:
                    d5:e7:d8:3c:1c:65:70:d8:1f:8f:ca:ea:ac:6a:e6:
                    95:e5:23:79:3d:b3:f9:eb:95:77:22:89:4b:7c:4b:
                    83:73:ac:1b:7c:e6:01:1f:fa:62:4c:80:e6:1b:29:
                    dd:ee:48:5c:40:b8:f7:e7:e6:98:79:01:bc:36:91:
                    8f:30:e0:d7:2a:aa:79:7a:d9:06:df:ba:94:37:c0:
                    f1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:1C:DF:2B:7B:D7:71:BC:6D:01:1F:63:80:4B:D6:C6:78:03:36:87
            X509v3 Authority Key Identifier:
                keyid:99:D7:C4:4A:04:49:C4:17:C1:F2:2D:6C:2A:40:EA:99:80:1B:46:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/99D7C44A0449C417C1F22D6C2A40EA99801B4649.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D7C44A0449C417C1F22D6C2A40EA99801B4649.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232372e302f32342d3234203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:eb:31:cb:f6:f1:6f:a1:36:26:37:93:73:da:92:7b:f8:fe:
         79:7c:ac:86:7a:16:b9:fa:c7:f6:ff:ed:72:e3:ab:b5:46:38:
         71:b4:ec:ef:3c:75:fa:b1:c7:1a:c5:6d:b9:c4:08:3f:85:fc:
         2c:ce:fe:15:bd:5b:7e:b5:e0:d1:d4:42:f0:4d:75:c8:62:3d:
         1f:75:a8:80:88:6d:f1:36:02:e6:43:77:39:0f:e4:7c:13:39:
         33:ef:56:29:c3:b7:7c:8f:2c:62:ac:d9:2a:c0:34:1c:6c:a1:
         ea:94:1c:de:15:3b:d7:6f:ab:e3:12:f7:39:12:4b:93:67:de:
         27:53:dd:46:dc:b9:14:61:ca:ac:34:29:4c:92:f5:b5:7a:19:
         18:55:5c:05:b4:9f:70:fd:40:2e:54:84:73:71:28:af:7f:bb:
         0e:2e:a5:b9:92:5f:fc:59:40:c7:96:2b:39:02:77:67:cf:d7:
         00:56:c7:8c:85:24:35:cd:30:9f:c6:8e:5f:e1:7f:6b:b3:99:
         e9:71:f5:52:f4:81:e4:e0:8f:f8:35:55:5f:84:ea:1c:ba:82:
         a3:f7:e9:2f:e3:89:2e:36:d2:6f:c9:1e:ea:a4:b3:8a:ce:e0:
         7a:47:d5:e5:25:f9:5d:87:9a:ef:ac:ad:6f:21:97:90:4d:06:
         de:0c:94:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 06:50:35 2025 by rpki-client