Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3233322e302f32332d3233203d3e203631383531.roa
File:                     3137372e37352e3233322e302f32332d3233203d3e203631383531.roa (raw, json)
Hash identifier:          ughgnBSj1N45Mr1zk8eKHFN3QCZyQtTg/rOgKXgrzwg=
Subject key identifier:   08:D7:F2:E7:6C:A2:3D:81:AF:0A:EB:A2:CE:9B:64:5B:FF:5B:0A:97
Certificate issuer:       /CN=99D7C44A0449C417C1F22D6C2A40EA99801B4649
Certificate serial:       25AC8977B5B3E5226964EE59AF76E0B045A03767
Authority key identifier: 99:D7:C4:4A:04:49:C4:17:C1:F2:2D:6C:2A:40:EA:99:80:1B:46:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D7C44A0449C417C1F22D6C2A40EA99801B4649.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3233322e302f32332d3233203d3e203631383531.roa
Signing time:             Sun 07 Sep 2025 18:20:46 +0000
ROA not before:           Sun 07 Sep 2025 18:15:46 +0000
ROA not after:            Sun 06 Sep 2026 18:20:46 +0000
asID:                     61851
IP address blocks:        177.75.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/99D7C44A0449C417C1F22D6C2A40EA99801B4649.crl
                          rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/99D7C44A0449C417C1F22D6C2A40EA99801B4649.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D7C44A0449C417C1F22D6C2A40EA99801B4649.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 05:54:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:ac:89:77:b5:b3:e5:22:69:64:ee:59:af:76:e0:b0:45:a0:37:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D7C44A0449C417C1F22D6C2A40EA99801B4649
        Validity
            Not Before: Sep  7 18:15:46 2025 GMT
            Not After : Sep  6 18:20:46 2026 GMT
        Subject: CN=08D7F2E76CA23D81AF0AEBA2CE9B645BFF5B0A97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:42:c6:a7:79:d1:2c:fc:83:54:bf:f7:73:4a:
                    d0:d1:62:7e:18:7c:0c:02:b0:e7:00:c0:74:d9:bb:
                    5c:6c:11:69:6c:f3:17:e3:d7:2d:f6:c3:3a:7b:df:
                    27:3e:d7:ec:3f:34:10:0c:1f:eb:84:c0:7c:69:54:
                    3d:4e:dc:df:9c:5a:df:74:f9:c3:39:7e:37:ae:5b:
                    89:ef:9f:7d:ca:6b:d3:ab:79:21:fd:f9:8d:95:7d:
                    6b:a3:dc:d6:3e:f0:28:b8:87:ee:c0:5c:c3:2b:70:
                    5f:54:b6:a1:88:a8:d3:b4:5c:ea:bc:14:cb:27:ab:
                    5e:64:cb:53:f3:55:2f:96:71:f4:67:40:4d:65:97:
                    39:cb:95:3d:4d:a2:38:ea:1f:79:22:09:16:ec:08:
                    cc:e6:31:9b:da:fb:79:9a:4b:20:14:10:d1:29:a8:
                    f2:04:4e:d7:1f:34:f8:6c:cb:1f:0e:14:6c:19:bb:
                    96:ca:92:87:f5:d3:10:69:0a:52:ed:a8:b7:52:8d:
                    ee:62:1c:79:bf:96:9f:bc:8d:b3:ce:e2:dc:55:f4:
                    f9:9c:10:e2:82:db:57:2b:f7:5b:0b:5a:e1:84:b8:
                    5f:cf:51:0d:a7:a1:08:dc:95:76:90:65:40:56:c1:
                    47:a4:b4:2c:00:9f:b6:f0:f1:cf:a2:38:34:2d:28:
                    54:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D7:F2:E7:6C:A2:3D:81:AF:0A:EB:A2:CE:9B:64:5B:FF:5B:0A:97
            X509v3 Authority Key Identifier:
                keyid:99:D7:C4:4A:04:49:C4:17:C1:F2:2D:6C:2A:40:EA:99:80:1B:46:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/99D7C44A0449C417C1F22D6C2A40EA99801B4649.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D7C44A0449C417C1F22D6C2A40EA99801B4649.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3233322e302f32332d3233203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:79:08:5e:f2:36:fe:90:1d:ae:c2:d7:ff:eb:1b:5a:05:a3:
         f4:1c:cb:26:d7:f4:26:e6:19:c3:39:fb:60:8c:41:5a:36:d4:
         ad:fe:ee:0a:ba:92:7f:19:74:3c:a3:f2:42:83:a2:55:21:9c:
         88:13:a3:32:ac:b8:c3:e2:fd:ea:c1:f0:a7:71:a9:f4:65:57:
         24:a7:1c:93:12:ef:45:c8:78:a0:d8:49:e7:a6:87:47:ce:7b:
         05:0f:1b:41:3d:5e:23:e6:2f:34:e9:97:71:5a:4f:a6:ef:bb:
         bf:83:fa:d3:4d:6c:9f:fd:ff:f5:c5:8d:66:39:fd:1f:da:b8:
         3d:1e:87:d1:2f:4e:9e:7d:c5:f8:e1:ea:5f:33:31:45:96:54:
         1e:7c:5e:26:4a:42:60:b9:13:0e:83:7e:c9:e2:1d:5b:0e:c6:
         c3:a3:2e:b6:cd:44:68:19:63:53:da:34:05:ce:b1:82:46:5e:
         63:2b:2e:f0:06:d6:e0:94:73:b3:b0:f2:48:fc:ea:32:ed:e9:
         c8:f4:81:6a:15:0b:bf:15:d7:c2:77:01:02:50:d4:ed:4b:a7:
         f6:75:d9:c0:c3:c6:cb:94:a0:ec:88:af:30:56:52:f3:7f:56:
         ec:04:74:70:2a:af:c3:e5:76:ef:c5:8f:cf:55:af:59:9b:9f:
         07:f3:ea:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 10:18:14 2025 by rpki-client