Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3233382e302f32332d3233203d3e203631383531.roa
File:                     3137372e37352e3233382e302f32332d3233203d3e203631383531.roa (raw, json)
Hash identifier:          47pVpdJ9bd8EM2yRhHB45+LKe4wSqKQd8WempG5DtjU=
Subject key identifier:   ED:EE:E1:BC:E0:F4:F9:13:F5:20:D7:01:3B:AB:10:58:C5:08:BD:5B
Certificate issuer:       /CN=99D7C44A0449C417C1F22D6C2A40EA99801B4649
Certificate serial:       67DD0215AD810FCF402B4CA1563F59CCB8570B8D
Authority key identifier: 99:D7:C4:4A:04:49:C4:17:C1:F2:2D:6C:2A:40:EA:99:80:1B:46:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D7C44A0449C417C1F22D6C2A40EA99801B4649.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3233382e302f32332d3233203d3e203631383531.roa
Signing time:             Sun 07 Sep 2025 18:20:56 +0000
ROA not before:           Sun 07 Sep 2025 18:15:56 +0000
ROA not after:            Sun 06 Sep 2026 18:20:56 +0000
asID:                     61851
IP address blocks:        177.75.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/99D7C44A0449C417C1F22D6C2A40EA99801B4649.crl
                          rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/99D7C44A0449C417C1F22D6C2A40EA99801B4649.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D7C44A0449C417C1F22D6C2A40EA99801B4649.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 05:11:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:dd:02:15:ad:81:0f:cf:40:2b:4c:a1:56:3f:59:cc:b8:57:0b:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D7C44A0449C417C1F22D6C2A40EA99801B4649
        Validity
            Not Before: Sep  7 18:15:56 2025 GMT
            Not After : Sep  6 18:20:56 2026 GMT
        Subject: CN=EDEEE1BCE0F4F913F520D7013BAB1058C508BD5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:18:1e:10:96:86:c4:a4:e8:85:0e:88:eb:cc:
                    f5:47:ab:1f:95:f9:2d:13:78:9a:f6:fe:d0:cd:00:
                    86:de:89:97:31:8f:24:72:09:16:3c:67:89:88:0b:
                    ca:5d:ea:fa:e6:db:df:48:2a:63:5d:e3:c9:70:b9:
                    4c:35:69:da:d4:39:2e:99:2e:4d:97:88:6d:46:42:
                    52:7f:a0:a0:cd:c9:03:29:9d:02:a5:6b:82:49:5f:
                    48:72:38:22:85:54:52:48:ab:0a:04:11:e9:bb:c9:
                    ae:ab:4a:0b:d7:e5:19:06:6b:6b:a7:ed:04:2e:f5:
                    43:38:7a:a7:1f:eb:3c:ea:7f:32:c0:32:63:62:5a:
                    f2:89:62:1d:6f:cb:dc:6a:42:f4:91:a3:b0:e6:b7:
                    ef:a6:74:15:75:be:d5:4f:4e:05:8a:cd:cd:02:88:
                    e3:e0:54:53:50:b8:32:4f:b2:93:77:4d:08:c9:5b:
                    ec:a4:7c:f3:cb:ff:7a:ee:98:47:bb:5b:9b:d5:15:
                    24:5f:6a:a1:c7:f7:77:c0:76:ec:01:bf:e1:a1:60:
                    23:7c:75:ef:ea:96:33:66:e3:fe:38:17:82:e2:59:
                    e0:57:4d:27:2e:af:da:22:2c:cc:fb:b5:21:cb:47:
                    8e:3e:ee:a3:10:ff:ad:bc:ee:5b:f7:c6:29:ad:14:
                    20:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:EE:E1:BC:E0:F4:F9:13:F5:20:D7:01:3B:AB:10:58:C5:08:BD:5B
            X509v3 Authority Key Identifier:
                keyid:99:D7:C4:4A:04:49:C4:17:C1:F2:2D:6C:2A:40:EA:99:80:1B:46:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/99D7C44A0449C417C1F22D6C2A40EA99801B4649.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D7C44A0449C417C1F22D6C2A40EA99801B4649.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3233382e302f32332d3233203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:72:61:9c:b4:e9:5f:40:e9:78:cf:80:57:81:e1:0f:2e:55:
         9b:b6:cf:79:46:f5:46:8d:3d:25:43:a5:c3:01:8b:0b:ef:22:
         5f:c3:7c:c8:80:a9:17:e1:64:99:fb:b6:5a:a4:61:45:38:fc:
         55:8c:b0:06:61:5c:de:98:87:b7:65:84:40:f7:e3:f4:48:6a:
         89:8e:23:3d:12:c7:a2:2c:c3:d6:e6:e7:b0:83:71:ce:d0:a4:
         c6:1c:16:e5:69:b5:b3:7d:0a:31:a4:c1:1c:3d:5b:a5:bc:35:
         b1:c0:e9:c2:18:34:bf:2c:35:d4:2a:89:a4:84:ac:44:62:29:
         74:60:f4:ce:60:ad:af:34:c4:27:24:43:aa:0e:c5:08:0c:fa:
         2d:52:38:69:7a:41:72:fe:05:6c:ce:0d:36:a3:75:c0:27:ee:
         62:16:9c:36:58:1a:dd:c0:d5:8a:f2:49:b9:1b:7d:05:70:eb:
         50:61:24:65:c1:d8:b8:a7:cd:01:6b:0a:2c:ec:f6:04:53:20:
         89:9e:1e:1f:ec:d4:0a:e0:81:8e:68:7f:f6:6d:50:a5:dd:dd:
         9a:8c:75:81:a4:00:a4:b9:86:65:9c:48:fc:22:9c:44:66:18:
         87:a9:2d:48:fc:2c:0f:45:f5:9e:13:ef:eb:8e:27:55:a4:83:
         1b:63:ab:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 06:50:52 2025 by rpki-client