Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3137372e3138352e3230322e302f32342d3234203d3e203237373135.roa
File:                     3137372e3138352e3230322e302f32342d3234203d3e203237373135.roa (raw, json)
Hash identifier:          id0zuGOq0VzG3e0chxVEMrrQH2qCCwRKvfj2MthMrNE=
Subject key identifier:   24:32:25:ED:6E:2D:9E:5D:BE:FB:6E:F8:6A:C2:A5:15:17:5B:FD:72
Certificate issuer:       /CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
Certificate serial:       1C9E756E7841197A28FA74B408035567D1A67AE3
Authority key identifier: 50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3137372e3138352e3230322e302f32342d3234203d3e203237373135.roa
Signing time:             Mon 21 Sep 2026 12:30:57 +0000
ROA not before:           Mon 21 Sep 2026 12:25:57 +0000
ROA not after:            Mon 20 Sep 2027 12:30:57 +0000
asID:                     27715
IP address blocks:        177.185.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl
                          rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 04:29:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:9e:75:6e:78:41:19:7a:28:fa:74:b4:08:03:55:67:d1:a6:7a:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
        Validity
            Not Before: Sep 21 12:25:57 2026 GMT
            Not After : Sep 20 12:30:57 2027 GMT
        Subject: CN=243225ED6E2D9E5DBEFB6EF86AC2A515175BFD72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:82:10:a9:b0:85:13:ec:9f:de:92:71:79:12:
                    4c:b8:2c:1b:a4:cf:5c:9b:e9:99:31:1c:12:b0:b1:
                    5f:f6:70:17:aa:37:3f:e8:2d:73:0f:2b:8a:91:f8:
                    17:11:08:d4:e7:a6:16:ba:4a:66:fc:d1:a3:72:0a:
                    54:63:ac:0b:52:6f:f0:b8:c2:f3:e1:ec:dd:77:af:
                    d6:c6:a4:0c:61:6a:ed:73:67:14:7e:1a:4c:e6:bc:
                    b8:35:71:5f:2d:7d:95:db:07:da:3c:2e:64:59:7f:
                    f8:7c:51:4c:57:b7:0c:6e:51:0c:fa:1a:40:ca:6b:
                    15:57:00:9d:cb:0a:a7:52:35:bb:d5:65:da:4c:a7:
                    77:13:db:fa:9b:5b:c8:68:c7:b7:2b:bd:f9:19:94:
                    9c:26:8c:a8:af:0b:bc:ce:02:22:3a:8e:de:90:9b:
                    b9:22:99:dd:bf:47:6e:c4:50:ad:35:56:6f:dc:7b:
                    b9:a2:d0:94:0e:ec:0a:de:b7:c7:86:32:36:a7:be:
                    7b:08:7b:44:32:af:a6:0c:bc:c5:0d:b8:ad:8d:4d:
                    cf:72:0a:1c:4d:0d:6a:3b:31:35:c8:ee:b3:78:a3:
                    91:c2:b3:6d:8d:0a:d6:c7:80:3e:6c:1b:c7:9f:b8:
                    68:09:43:e8:1e:38:8d:c3:e3:83:ef:f7:bf:3b:2a:
                    ff:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:32:25:ED:6E:2D:9E:5D:BE:FB:6E:F8:6A:C2:A5:15:17:5B:FD:72
            X509v3 Authority Key Identifier:
                keyid:50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3137372e3138352e3230322e302f32342d3234203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:4d:2c:72:6a:26:b8:04:d3:c0:d0:a1:42:b3:c9:bf:9a:80:
         e4:8d:d2:b1:7c:7e:99:a6:bb:09:64:51:f4:9d:2a:13:b2:84:
         24:42:82:03:f7:79:33:72:cf:1a:92:30:80:91:df:0a:ea:59:
         08:f5:02:13:72:b3:09:14:15:8d:83:a0:b5:46:d5:83:15:62:
         0e:3a:2e:63:69:48:1c:93:8d:24:ac:da:83:0b:96:b7:24:2b:
         29:2d:6b:a4:95:60:33:e4:63:28:2d:e4:2c:6f:0d:67:81:d2:
         c8:79:68:c4:b4:21:4b:e8:b3:ed:f9:b6:51:50:53:10:c9:8e:
         d5:e3:5b:79:d6:7e:9d:f0:76:34:07:a5:12:67:6a:63:42:ca:
         a1:26:3c:60:35:d1:b2:1f:f8:ba:06:51:34:70:91:4c:cf:fc:
         f3:d3:e7:8b:63:a2:44:54:d3:39:f3:73:6e:43:71:32:33:7c:
         37:af:ec:44:1c:74:37:ea:29:fb:b4:9a:f1:98:4c:82:9d:50:
         0e:be:69:50:b3:66:50:63:77:07:23:c5:c6:f4:6e:10:fc:7d:
         af:d8:d8:4f:e9:86:2f:f9:f8:8f:9f:d4:13:8b:57:7f:bc:c4:
         4b:ec:cb:16:85:ec:b8:89:ca:e3:e6:e5:67:f3:29:de:d6:b2:
         aa:67:35:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 09:31:58 2026 by rpki-client