Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3230312e3134392e3132352e302f32342d3234203d3e203631383531.roa
File:                     3230312e3134392e3132352e302f32342d3234203d3e203631383531.roa (raw, json)
Hash identifier:          sOxhggooOk5za2kJqQUDCiTsv78U8A9EGoL2qVepY4s=
Subject key identifier:   51:19:BF:6D:16:C0:14:28:58:94:DB:03:70:AD:10:B5:0B:30:37:13
Certificate issuer:       /CN=99D7C44A0449C417C1F22D6C2A40EA99801B4649
Certificate serial:       1DC8E897360D0456BD867CBFA1F64C29367BDA0F
Authority key identifier: 99:D7:C4:4A:04:49:C4:17:C1:F2:2D:6C:2A:40:EA:99:80:1B:46:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D7C44A0449C417C1F22D6C2A40EA99801B4649.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3230312e3134392e3132352e302f32342d3234203d3e203631383531.roa
Signing time:             Sun 07 Sep 2025 18:20:44 +0000
ROA not before:           Sun 07 Sep 2025 18:15:44 +0000
ROA not after:            Sun 06 Sep 2026 18:20:44 +0000
asID:                     61851
IP address blocks:        201.149.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/99D7C44A0449C417C1F22D6C2A40EA99801B4649.crl
                          rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/99D7C44A0449C417C1F22D6C2A40EA99801B4649.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D7C44A0449C417C1F22D6C2A40EA99801B4649.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 05:11:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:c8:e8:97:36:0d:04:56:bd:86:7c:bf:a1:f6:4c:29:36:7b:da:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D7C44A0449C417C1F22D6C2A40EA99801B4649
        Validity
            Not Before: Sep  7 18:15:44 2025 GMT
            Not After : Sep  6 18:20:44 2026 GMT
        Subject: CN=5119BF6D16C014285894DB0370AD10B50B303713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c3:45:95:13:70:43:6c:f4:8a:0e:82:3f:27:
                    c2:94:84:f0:27:b8:5b:27:c8:ec:54:4e:47:4a:8e:
                    a8:fd:8a:88:69:a7:74:ae:75:5d:75:5f:5f:f8:22:
                    9d:b9:ab:80:ad:87:bc:fa:b2:4b:b2:2b:47:98:49:
                    43:71:60:c8:e9:1f:e2:6d:76:e0:59:aa:88:08:74:
                    5e:d1:b5:fc:4b:9e:8a:30:8e:d7:1f:82:f6:49:b4:
                    b3:04:1d:93:23:c1:7e:43:1d:ea:ff:a3:82:d5:ae:
                    d2:1d:8b:1b:ad:e8:8e:3b:da:79:22:68:a3:ea:6b:
                    92:93:be:ec:f3:7b:d4:fb:0c:15:df:aa:a5:fe:80:
                    b6:b0:61:62:76:71:10:06:cd:7c:eb:e0:d7:2c:e3:
                    10:5b:a0:a7:da:e2:b9:69:f4:42:d3:38:ce:21:10:
                    f3:38:6c:bc:8b:d4:26:b0:5b:0f:64:ad:e8:15:80:
                    4d:2f:f4:21:80:fd:6f:f5:d1:95:51:cb:d5:de:83:
                    a7:d6:3a:ea:39:ee:51:2b:a9:d9:d3:6f:ab:d8:c3:
                    41:92:f5:22:78:92:4d:dd:2b:bf:18:e1:7b:dc:73:
                    ff:d0:df:4f:2b:14:f6:48:32:3f:4d:20:e0:59:5f:
                    16:ee:4c:5f:3f:64:3b:84:69:d8:0b:17:03:4f:ee:
                    11:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:19:BF:6D:16:C0:14:28:58:94:DB:03:70:AD:10:B5:0B:30:37:13
            X509v3 Authority Key Identifier:
                keyid:99:D7:C4:4A:04:49:C4:17:C1:F2:2D:6C:2A:40:EA:99:80:1B:46:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/99D7C44A0449C417C1F22D6C2A40EA99801B4649.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D7C44A0449C417C1F22D6C2A40EA99801B4649.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3230312e3134392e3132352e302f32342d3234203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.149.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:02:b8:b1:d2:9d:3d:5b:06:63:1e:6c:9d:27:24:f1:d1:1f:
         84:23:74:74:96:3c:c5:e2:d3:60:64:8c:7e:8a:c3:95:a6:ac:
         2a:f6:80:a4:16:57:02:29:67:75:70:4d:34:25:59:d8:52:b5:
         fd:0f:2b:db:3b:5a:72:68:38:5f:6b:2f:30:55:1a:93:7a:ee:
         e2:a0:59:04:fa:48:4a:70:ab:8a:f6:d7:17:66:4d:ab:77:7e:
         3f:28:71:f5:86:4b:48:ba:fa:47:e4:02:ac:fa:5a:a4:84:c8:
         ec:3e:09:7f:be:ae:0d:15:7f:94:f0:5c:81:a3:c0:4a:0e:be:
         8d:e1:01:20:e7:91:aa:7b:54:13:65:3d:c2:8f:17:87:68:18:
         49:1c:5f:b2:83:da:9c:95:03:d1:72:48:b7:93:24:84:fd:5a:
         9b:ee:ce:90:7e:c1:f1:4b:cc:ad:ee:84:16:70:3a:ba:ee:d1:
         f8:50:28:01:81:47:f3:24:ed:da:44:dd:b7:5d:c9:2b:99:33:
         c5:de:cb:45:c4:a8:4b:39:94:c1:96:e4:e8:37:ed:dd:f2:b5:
         d9:81:47:a9:e3:c1:90:62:75:34:8d:20:de:49:20:ef:55:e8:
         ae:81:ff:ba:1c:b3:3a:c6:f8:0f:85:3f:f5:f5:18:06:47:d2:
         35:bc:82:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 08:34:35 2025 by rpki-client