Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232342e302f32302d3230203d3e203631383531.roa
File:                     3137372e37352e3232342e302f32302d3230203d3e203631383531.roa (raw, json)
Hash identifier:          9CR7tTA9J2DmQv05l4YlqZRM1LfXhaz7p8PsnC08ERY=
Subject key identifier:   72:70:EE:43:E9:16:74:19:9E:BD:AE:29:D0:92:4B:E6:58:2A:67:F2
Certificate issuer:       /CN=6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167
Certificate serial:       5BA080F05CFB938C53649846C4CA6248042C5AF4
Authority key identifier: 6C:66:D3:75:B9:67:51:36:E7:C6:8B:AA:C4:F2:DD:DB:2C:E4:E1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232342e302f32302d3230203d3e203631383531.roa
Signing time:             Wed 22 Jul 2026 22:02:08 +0000
ROA not before:           Wed 22 Jul 2026 21:57:08 +0000
ROA not after:            Wed 21 Jul 2027 22:02:08 +0000
asID:                     61851
IP address blocks:        177.75.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.crl
                          rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 09:47:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:a0:80:f0:5c:fb:93:8c:53:64:98:46:c4:ca:62:48:04:2c:5a:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167
        Validity
            Not Before: Jul 22 21:57:08 2026 GMT
            Not After : Jul 21 22:02:08 2027 GMT
        Subject: CN=7270EE43E91674199EBDAE29D0924BE6582A67F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b4:f4:7d:63:18:10:e3:af:8d:47:eb:5e:22:
                    83:3d:46:73:29:41:64:56:83:7b:a9:e5:33:e6:ff:
                    cb:b5:d6:72:c3:45:eb:8b:2f:c8:c8:d7:5f:4f:d3:
                    c9:a8:00:34:04:d2:aa:70:83:c0:4c:c7:18:15:32:
                    5e:6f:69:23:5e:94:19:22:b6:d9:2b:4e:a1:63:eb:
                    44:da:62:a2:20:78:3c:14:e8:10:8b:36:81:9d:3e:
                    96:b1:0e:6c:1e:8c:b8:bf:77:de:01:ac:12:d7:52:
                    24:80:26:b7:15:58:14:4b:06:c2:01:05:8c:01:af:
                    25:1d:b2:78:67:e4:1c:c5:66:8d:4a:eb:a4:dc:d8:
                    83:2e:85:54:5a:e6:33:57:72:81:45:32:14:f6:ef:
                    2d:50:f6:eb:46:25:6a:e5:ea:66:df:16:6c:af:fd:
                    3a:aa:e1:7b:a4:b8:cb:de:dc:a9:60:4b:2d:d3:2c:
                    93:92:d4:19:ce:d9:6d:58:ad:9a:ce:61:7c:30:9e:
                    48:ef:a6:89:88:a7:7a:59:a7:bf:cb:78:a0:fb:28:
                    1b:d7:ad:7b:d9:4a:d8:b7:74:dd:e5:6d:ed:be:1a:
                    6c:27:00:99:8e:ac:85:e4:b6:ff:21:7c:00:c6:e7:
                    7b:99:ea:43:13:1c:d7:2c:88:54:a0:d7:2e:27:3f:
                    e4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:70:EE:43:E9:16:74:19:9E:BD:AE:29:D0:92:4B:E6:58:2A:67:F2
            X509v3 Authority Key Identifier:
                keyid:6C:66:D3:75:B9:67:51:36:E7:C6:8B:AA:C4:F2:DD:DB:2C:E4:E1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232342e302f32302d3230203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0c:55:f3:c0:68:ea:76:6b:f3:59:9d:95:26:fe:34:6f:f8:7a:
         81:8f:f1:aa:74:2d:3d:30:3b:51:3f:46:1e:fe:79:74:ca:18:
         fe:2c:b2:a1:d1:b0:59:a0:ec:de:b4:01:68:14:33:f3:e8:a5:
         9f:32:6b:f8:a5:5d:94:da:32:3c:6a:46:cf:e0:dd:93:1a:31:
         76:ba:ae:31:18:22:c1:d8:f6:7d:01:ee:cc:b6:89:76:b3:22:
         89:70:26:5a:42:bf:20:aa:40:80:c8:02:55:db:22:c2:7c:44:
         dd:e6:08:3a:b9:f1:de:60:22:b1:1e:c2:ea:bf:7e:23:c8:b8:
         22:32:ce:4d:69:c6:d0:82:ba:b8:64:ba:9b:5d:57:fb:37:ed:
         f7:a4:14:33:21:36:b7:6f:2b:03:b3:d6:f3:c3:8f:48:63:d3:
         df:42:07:79:fc:9e:b8:77:5c:e6:3a:28:f4:30:37:6b:24:2a:
         ba:b7:88:29:35:f5:ad:d2:93:08:5c:ed:db:8b:85:b2:4d:ee:
         b8:ac:cd:26:13:2b:89:de:fe:73:0b:af:fc:47:c6:67:1b:b8:
         61:82:e8:a9:65:10:26:fb:62:b8:16:7b:ab:ce:3e:46:c9:1b:
         2f:4e:a2:02:a7:3b:cd:4e:54:ca:3c:dd:f6:9b:51:b9:0f:bb:
         b2:fe:a0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:28:37 2026 by rpki-client