Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3233302e302f32332d3233203d3e203631383531.roa
File:                     3137372e37352e3233302e302f32332d3233203d3e203631383531.roa (raw, json)
Hash identifier:          alnQ7NrrJlAQyNdTXF+pDYVD78uW/wI8sozQ340KAJc=
Subject key identifier:   94:51:76:3E:FC:14:5D:6F:24:6A:A1:7D:37:70:71:EC:16:B7:86:68
Certificate issuer:       /CN=99D7C44A0449C417C1F22D6C2A40EA99801B4649
Certificate serial:       3401C7120EED19C7F19ECF071E11432B90828E05
Authority key identifier: 99:D7:C4:4A:04:49:C4:17:C1:F2:2D:6C:2A:40:EA:99:80:1B:46:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D7C44A0449C417C1F22D6C2A40EA99801B4649.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3233302e302f32332d3233203d3e203631383531.roa
Signing time:             Sun 07 Sep 2025 18:20:52 +0000
ROA not before:           Sun 07 Sep 2025 18:15:52 +0000
ROA not after:            Sun 06 Sep 2026 18:20:52 +0000
asID:                     61851
IP address blocks:        177.75.230.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/99D7C44A0449C417C1F22D6C2A40EA99801B4649.crl
                          rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/99D7C44A0449C417C1F22D6C2A40EA99801B4649.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D7C44A0449C417C1F22D6C2A40EA99801B4649.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 05:11:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:01:c7:12:0e:ed:19:c7:f1:9e:cf:07:1e:11:43:2b:90:82:8e:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D7C44A0449C417C1F22D6C2A40EA99801B4649
        Validity
            Not Before: Sep  7 18:15:52 2025 GMT
            Not After : Sep  6 18:20:52 2026 GMT
        Subject: CN=9451763EFC145D6F246AA17D377071EC16B78668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b1:e0:30:eb:bc:9f:51:5d:ff:4a:07:60:76:
                    d0:77:b2:5f:04:cc:68:af:8e:ca:99:d1:3e:d4:ea:
                    6e:59:df:d2:b5:5f:2f:5a:ff:6f:02:b2:b8:24:3e:
                    b0:c2:e7:83:ac:b7:b6:ad:77:71:2e:04:f9:22:65:
                    99:60:ef:26:bb:ef:bb:9e:1e:84:19:4b:d9:c2:47:
                    f0:f6:bd:8d:65:9d:70:10:72:c0:0b:3b:7a:08:6e:
                    8a:a8:06:c6:5b:98:93:20:35:93:94:70:42:bf:c0:
                    7c:d0:2d:58:66:2c:5c:bd:4a:8b:2a:04:23:cb:7d:
                    0d:fa:52:dc:ca:09:9f:7a:3c:05:0e:e9:21:02:7a:
                    d1:50:2b:f1:0f:77:e9:f6:c4:5b:00:bd:62:32:b1:
                    2d:46:b8:89:7f:62:2f:6b:37:41:ef:e5:7d:bd:cb:
                    2b:ad:c3:90:50:e1:5f:24:7e:8b:b9:4c:c9:0c:79:
                    73:68:68:01:37:fa:62:69:e1:74:e9:71:e5:ca:8d:
                    13:ff:4d:15:12:e5:3d:1e:bd:76:fe:21:17:3e:9e:
                    c0:08:35:cd:b6:2b:eb:80:02:9a:37:6b:c1:7b:52:
                    c2:0f:34:cc:a1:7f:2a:83:91:fd:63:3b:15:94:dd:
                    36:4d:30:5f:18:24:b9:6b:09:0b:eb:15:c5:b6:fc:
                    a7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:51:76:3E:FC:14:5D:6F:24:6A:A1:7D:37:70:71:EC:16:B7:86:68
            X509v3 Authority Key Identifier:
                keyid:99:D7:C4:4A:04:49:C4:17:C1:F2:2D:6C:2A:40:EA:99:80:1B:46:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/99D7C44A0449C417C1F22D6C2A40EA99801B4649.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D7C44A0449C417C1F22D6C2A40EA99801B4649.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3233302e302f32332d3233203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:1c:c1:cb:1c:77:9f:53:24:d2:de:48:09:9c:04:a7:f0:b9:
         10:48:cf:fd:f3:b7:da:91:b9:b6:c9:d5:8b:84:f7:c2:9b:51:
         53:7e:8b:a9:9a:dd:ee:d4:88:ca:ca:7c:82:0c:fe:44:20:4d:
         bb:18:0f:2d:fb:6c:4f:d7:bb:46:1e:ee:1f:37:bb:ae:e4:26:
         1b:da:83:0c:f4:e0:a5:1a:18:23:e7:8a:75:4d:96:c6:13:2a:
         04:c0:2d:0c:2c:39:0d:21:61:e4:3f:35:18:9a:02:41:1b:ef:
         c6:8d:08:7f:f2:44:88:5c:74:a9:91:b6:0d:50:99:86:b2:ec:
         39:56:0b:4b:47:14:a1:fc:a8:1a:15:60:aa:27:f7:b5:f7:ec:
         ed:ed:e9:a8:c2:12:ff:c5:ec:c0:1b:8b:d8:24:ef:13:3a:70:
         c8:84:68:ee:e8:fd:32:6b:46:fc:bb:2b:ee:dc:3b:2f:2c:d5:
         28:cc:3d:77:a2:a3:d4:f6:6f:cb:df:a1:4c:ca:b3:9e:23:b1:
         a5:b4:49:ec:6c:d0:84:2e:9d:fa:d4:e9:fe:e9:3a:ce:94:f6:
         59:52:d1:b6:e2:83:a0:38:3d:87:15:c1:4a:a3:b1:7b:b2:d1:
         59:75:d3:1a:49:03:64:a8:f2:f3:72:76:d3:52:3a:dd:ea:bb:
         27:2a:79:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 06:50:44 2025 by rpki-client