Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3137372e3138352e3139332e302f32342d3234203d3e203237373135.roa
File:                     3137372e3138352e3139332e302f32342d3234203d3e203237373135.roa (raw, json)
Hash identifier:          R91KNQYqqh/LczbBkKPLaqiihh8/l0tLwKkFOpFrkik=
Subject key identifier:   94:E3:6A:19:52:5A:4C:C0:B5:74:B8:C3:3C:45:BF:3A:0D:08:09:9F
Certificate issuer:       /CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
Certificate serial:       095E028BBF843E1A3C4304BF1E19EDF2635753C0
Authority key identifier: 50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3137372e3138352e3139332e302f32342d3234203d3e203237373135.roa
Signing time:             Mon 21 Sep 2026 12:31:02 +0000
ROA not before:           Mon 21 Sep 2026 12:26:02 +0000
ROA not after:            Mon 20 Sep 2027 12:31:02 +0000
asID:                     27715
IP address blocks:        177.185.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl
                          rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 18:55:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:5e:02:8b:bf:84:3e:1a:3c:43:04:bf:1e:19:ed:f2:63:57:53:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
        Validity
            Not Before: Sep 21 12:26:02 2026 GMT
            Not After : Sep 20 12:31:02 2027 GMT
        Subject: CN=94E36A19525A4CC0B574B8C33C45BF3A0D08099F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ea:b4:6f:bb:2d:c3:28:31:c9:15:7f:3d:1d:
                    28:47:e4:17:d2:f6:8b:67:c0:ac:25:10:85:ff:94:
                    5e:e3:ae:33:0b:15:c0:74:78:91:74:39:af:94:38:
                    56:85:59:17:ca:71:29:6f:e7:f2:fc:41:af:72:3d:
                    13:4c:3b:d5:63:69:45:7e:a3:87:f3:1d:24:8d:b8:
                    6a:49:e0:1f:17:4e:0e:3e:dd:d2:7f:31:90:70:14:
                    5f:58:fb:d4:d0:ef:55:93:af:4c:a1:80:63:48:1f:
                    43:57:82:6b:57:e7:1c:2c:42:55:e2:33:77:9e:36:
                    5a:7c:a5:10:7f:60:16:cd:fe:dd:6c:5b:fe:6e:86:
                    86:d3:f9:6a:2b:b3:79:70:fa:a5:e3:6a:9f:61:1a:
                    ac:28:dc:4f:49:06:9f:d1:29:5a:b3:1f:87:99:eb:
                    52:e5:ee:15:07:fd:14:6e:4a:39:4d:63:5c:51:2b:
                    b6:c3:79:04:2f:a1:74:24:ce:2e:c5:a8:6c:38:dc:
                    fb:fe:fb:59:0d:b4:d8:29:d0:7c:c9:dd:3b:71:63:
                    b4:ac:79:55:81:25:48:bb:f0:09:54:00:b8:3b:11:
                    08:51:7d:ed:a3:ce:13:f5:bc:a8:d4:34:73:62:6c:
                    28:60:0c:4a:ea:10:be:65:34:8f:0a:f2:82:6e:b2:
                    fc:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E3:6A:19:52:5A:4C:C0:B5:74:B8:C3:3C:45:BF:3A:0D:08:09:9F
            X509v3 Authority Key Identifier:
                keyid:50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3137372e3138352e3139332e302f32342d3234203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:af:d5:b3:44:73:a9:a6:07:15:7e:37:5f:96:c3:cf:2a:4b:
         0c:05:b0:99:b7:b1:a7:e7:31:fe:ad:e0:d5:cc:fe:75:e0:46:
         fc:08:7c:7c:b1:ad:ad:da:3c:08:c3:87:20:e7:7c:cb:b1:ec:
         29:f0:f1:8e:dd:01:1c:8e:2a:96:e6:c2:2e:22:1d:ec:75:9f:
         a9:7a:15:64:3c:07:f0:c0:70:37:f4:6d:1d:28:0d:a9:a6:5b:
         25:d8:e7:99:e6:01:a1:a7:ee:9f:77:bf:d5:43:42:da:df:a7:
         43:ed:90:32:46:ad:5e:98:4f:b3:36:a9:00:bc:8d:40:73:9f:
         ee:c7:b4:a3:07:54:13:7a:37:ba:27:e8:79:bd:18:69:7b:48:
         12:30:5a:ab:9e:39:bb:72:c6:58:c2:cf:b7:33:6c:2b:f1:a5:
         67:dc:be:80:56:91:ef:89:1c:4a:e9:c1:5b:cf:52:1d:35:47:
         b6:ec:ae:3d:06:3a:0e:76:a2:95:f8:0b:80:9a:c7:9b:af:86:
         94:9b:dd:88:cf:5b:b4:e1:dd:b7:a5:11:fd:d0:81:56:d9:e9:
         3d:b3:1b:89:12:e9:be:75:80:8d:d5:c5:2f:42:84:ba:48:46:
         2a:20:b0:1c:5d:35:c8:6d:6b:32:d2:c3:74:d3:79:90:c4:67:
         63:1a:06:03
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCV4Ci7+EPho8QwS/Hhnt8mNXU8AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTAxQUQ2MUExQTVBNDlCMDhGOUQ4Q0ZFOTlEMjU4MjM1
NUE5RENFODAeFw0yNjA5MjExMjI2MDJaFw0yNzA5MjAxMjMxMDJaMDMxMTAvBgNV
BAMTKDk0RTM2QTE5NTI1QTRDQzBCNTc0QjhDMzNDNDVCRjNBMEQwODA5OUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT6rRvuy3DKDHJFX89HShH5BfS
9otnwKwlEIX/lF7jrjMLFcB0eJF0Oa+UOFaFWRfKcSlv5/L8Qa9yPRNMO9VjaUV+
o4fzHSSNuGpJ4B8XTg4+3dJ/MZBwFF9Y+9TQ71WTr0yhgGNIH0NXgmtX5xwsQlXi
M3eeNlp8pRB/YBbN/t1sW/5uhobT+Wors3lw+qXjap9hGqwo3E9JBp/RKVqzH4eZ
61Ll7hUH/RRuSjlNY1xRK7bDeQQvoXQkzi7FqGw43Pv++1kNtNgp0HzJ3TtxY7Ss
eVWBJUi78AlUALg7EQhRfe2jzhP1vKjUNHNibChgDErqEL5lNI8K8oJusvxDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUlONqGVJaTMC1dLjDPEW/Og0ICZ8wHwYDVR0j
BBgwFoAUUBrWGhpaSbCPnYz+mdJYI1Wp3OgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWo5eTlxQ2pMaGdZR3YxWmRoN2E2WXozZlRhbmR2VEJOclVteWhVMWRR
N1UvMC81MDFBRDYxQTFBNUE0OUIwOEY5RDhDRkU5OUQyNTgyMzU1QTlEQ0U4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUwMUFENjFBMUE1QTQ5QjA4
RjlEOENGRTk5RDI1ODIzNTVBOURDRTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VqOXk5cUNqTGhnWUd2MVpkaDdhNll6M2ZUYW5kdlRCTnJVbXloVTFkUTdVLzAv
MzEzNzM3MmUzMTM4MzUyZTMxMzkzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczNzMxMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxucEwDQYJKoZIhvcNAQELBQADggEBAHCv1bNE
c6mmBxV+N1+Ww88qSwwFsJm3safnMf6t4NXM/nXgRvwIfHyxra3aPAjDhyDnfMux
7Cnw8Y7dARyOKpbmwi4iHex1n6l6FWQ8B/DAcDf0bR0oDammWyXY55nmAaGn7p93
v9VDQtrfp0PtkDJGrV6YT7M2qQC8jUBzn+7HtKMHVBN6N7on6Hm9GGl7SBIwWque
ObtyxljCz7czbCvxpWfcvoBWke+JHErpwVvPUh01R7bsrj0GOg52opX4C4Cax5uv
hpSb3YjPW7Th3belEf3QgVbZ6T2zG4kS6b51gI3VxS9ChLpIRiogsBxdNchtazLS
w3TTeZDEZ2MaBgM=
-----END CERTIFICATE-----
Generated at Sat Oct 31 08:16:30 2026 by rpki-client