Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3233342e302f32332d3233203d3e203631383531.roa
File:                     3137372e37352e3233342e302f32332d3233203d3e203631383531.roa (raw, json)
Hash identifier:          b4fiCaVMrK9nRNKRAsxR+yMS5DMHQltnDgKBP7NXwtc=
Subject key identifier:   A9:B0:E8:20:29:F5:02:E3:E3:74:1B:C2:8C:81:BA:39:0F:0E:02:84
Certificate issuer:       /CN=99D7C44A0449C417C1F22D6C2A40EA99801B4649
Certificate serial:       1EBC91A18FEB984E74D55BCA35FE2DD0DFA060ED
Authority key identifier: 99:D7:C4:4A:04:49:C4:17:C1:F2:2D:6C:2A:40:EA:99:80:1B:46:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D7C44A0449C417C1F22D6C2A40EA99801B4649.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3233342e302f32332d3233203d3e203631383531.roa
Signing time:             Sun 07 Sep 2025 18:20:49 +0000
ROA not before:           Sun 07 Sep 2025 18:15:49 +0000
ROA not after:            Sun 06 Sep 2026 18:20:49 +0000
asID:                     61851
IP address blocks:        177.75.234.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/99D7C44A0449C417C1F22D6C2A40EA99801B4649.crl
                          rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/99D7C44A0449C417C1F22D6C2A40EA99801B4649.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D7C44A0449C417C1F22D6C2A40EA99801B4649.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 05:54:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:bc:91:a1:8f:eb:98:4e:74:d5:5b:ca:35:fe:2d:d0:df:a0:60:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D7C44A0449C417C1F22D6C2A40EA99801B4649
        Validity
            Not Before: Sep  7 18:15:49 2025 GMT
            Not After : Sep  6 18:20:49 2026 GMT
        Subject: CN=A9B0E82029F502E3E3741BC28C81BA390F0E0284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:ff:dc:72:ce:c9:60:35:7a:a5:a4:4a:b3:b5:
                    7d:b2:73:88:73:ed:5d:ea:0f:58:a0:63:c8:ce:aa:
                    29:cb:12:4b:b8:ee:05:7c:33:aa:1b:f2:37:6c:ef:
                    2e:d5:82:22:c3:40:66:73:05:7b:dd:eb:6c:10:4c:
                    8e:2c:3f:f5:dc:db:d3:a4:33:b1:32:9b:04:81:cf:
                    df:51:33:d5:e2:07:01:f6:db:1f:52:0d:cd:6b:8c:
                    4b:1c:24:b3:15:59:7b:de:0b:80:76:5d:85:aa:6e:
                    23:5c:f8:ac:82:92:cb:6b:74:50:00:78:e6:76:90:
                    8d:a7:57:ef:a2:73:2b:e9:f4:a4:a0:39:eb:ae:c1:
                    f4:34:04:23:39:92:c9:82:14:d9:b1:69:cb:a2:11:
                    8a:04:e6:38:32:82:f2:0c:40:e0:14:c6:ef:41:0e:
                    98:45:be:8b:3a:87:b5:74:7f:18:92:3c:e5:37:fd:
                    e6:8b:6c:b4:53:1a:d1:26:6c:9d:45:42:e1:a2:14:
                    60:27:73:bd:97:a9:fc:62:40:5c:5a:7a:66:c9:59:
                    85:73:55:89:64:8a:4a:c4:3a:5c:9f:f7:9e:ed:3b:
                    85:74:e9:24:0e:20:28:a4:48:2c:68:c6:8b:fb:74:
                    16:62:51:9b:4e:54:50:71:ac:a6:04:3b:7e:9c:ce:
                    b6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B0:E8:20:29:F5:02:E3:E3:74:1B:C2:8C:81:BA:39:0F:0E:02:84
            X509v3 Authority Key Identifier:
                keyid:99:D7:C4:4A:04:49:C4:17:C1:F2:2D:6C:2A:40:EA:99:80:1B:46:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/99D7C44A0449C417C1F22D6C2A40EA99801B4649.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D7C44A0449C417C1F22D6C2A40EA99801B4649.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3233342e302f32332d3233203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:b7:b4:43:9e:26:f6:77:6d:7e:bf:b7:89:54:6f:c1:8b:78:
         5c:f1:70:27:9b:a6:ca:c5:d1:94:b6:5e:09:76:f5:09:4d:6b:
         50:96:36:41:de:38:d4:c1:c5:75:a5:00:6d:8b:d0:2b:49:51:
         9c:70:b6:82:e8:f3:ed:93:dc:24:e1:c3:aa:40:5a:a6:90:c9:
         55:a5:89:ad:33:0f:4e:b9:2c:3e:64:c2:12:a0:04:f4:8f:e9:
         23:4b:10:cf:07:e2:27:e2:47:d1:6c:61:52:8c:cd:f5:9b:b4:
         73:9a:e5:d8:94:ce:b8:08:dc:10:1d:ea:9d:c5:83:71:e6:57:
         9a:8e:29:26:ec:a9:cc:96:3b:0b:35:86:9f:f8:45:ae:31:6b:
         6f:19:64:0e:e2:48:5d:40:f4:9c:64:a0:9d:69:90:00:80:10:
         92:80:29:50:c3:34:d5:67:ab:5e:1c:1e:f0:41:80:e3:16:cb:
         a4:bb:90:6b:ec:69:01:5f:63:aa:56:17:8d:dd:ad:f7:7d:0e:
         74:ec:50:c1:93:1b:cf:58:07:30:ad:d9:75:70:ab:84:0e:7d:
         07:15:1f:e8:09:ae:b1:2d:26:cd:b4:6b:20:d6:fc:f1:26:4f:
         f4:b3:47:ad:2e:53:9d:8e:23:e8:03:77:10:ac:09:79:aa:96:
         9c:16:49:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 10:20:01 2025 by rpki-client