Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232342e302f32302d3332203d3e203631383531.roa
File:                     3137372e37352e3232342e302f32302d3332203d3e203631383531.roa (raw, json)
Hash identifier:          7NT03ZSiy2QX40+zrSPoIefAiFM5Ih4adanrn3UwSHg=
Subject key identifier:   36:B4:2D:A0:39:58:99:D1:1D:F9:25:00:D7:2F:6A:A4:F3:49:A2:75
Certificate issuer:       /CN=141E15C03B57F1E481B53D5740AF085A8A76FB3B
Certificate serial:       105B28359A901CF993CA0849774AAF2B7D5D2513
Authority key identifier: 14:1E:15:C0:3B:57:F1:E4:81:B5:3D:57:40:AF:08:5A:8A:76:FB:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/141E15C03B57F1E481B53D5740AF085A8A76FB3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232342e302f32302d3332203d3e203631383531.roa
Signing time:             Fri 13 Mar 2026 20:34:24 +0000
ROA not before:           Fri 13 Mar 2026 20:29:24 +0000
ROA not after:            Fri 12 Mar 2027 20:34:24 +0000
asID:                     61851
IP address blocks:        177.75.224.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/141E15C03B57F1E481B53D5740AF085A8A76FB3B.crl
                          rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/141E15C03B57F1E481B53D5740AF085A8A76FB3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/141E15C03B57F1E481B53D5740AF085A8A76FB3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 20:10:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:5b:28:35:9a:90:1c:f9:93:ca:08:49:77:4a:af:2b:7d:5d:25:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=141E15C03B57F1E481B53D5740AF085A8A76FB3B
        Validity
            Not Before: Mar 13 20:29:24 2026 GMT
            Not After : Mar 12 20:34:24 2027 GMT
        Subject: CN=36B42DA0395899D11DF92500D72F6AA4F349A275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f2:fb:d1:c6:b8:d3:be:7e:c2:eb:68:2d:85:
                    55:48:d0:9e:8c:90:57:51:51:12:9c:3b:f3:b3:f5:
                    3b:06:56:32:b2:fc:60:02:8f:46:08:6b:53:c9:83:
                    c5:ce:a6:d2:39:06:ea:10:a8:23:ed:c2:40:09:9c:
                    ed:06:09:d0:01:93:aa:f2:dc:e6:a6:09:27:8b:a0:
                    29:0e:37:ae:96:bb:8f:6b:f7:a5:a4:21:0a:9a:36:
                    d6:27:b3:2e:b1:92:64:1a:12:c3:d6:b7:1f:5d:2b:
                    58:78:2d:0b:50:8a:4e:d6:e0:af:6a:c6:d1:08:6f:
                    d9:52:33:dc:5e:be:65:2d:b4:99:a2:24:f3:d1:bf:
                    f9:db:46:e9:e4:ff:ef:2b:85:7d:68:bc:1a:e8:58:
                    d9:79:95:d9:5a:f3:d7:86:08:43:83:13:b3:9f:34:
                    7c:ed:10:00:53:99:ff:10:d4:8b:86:b1:cb:1d:c1:
                    17:fb:a7:03:da:64:84:f8:a0:ec:d8:32:8b:40:26:
                    1f:a7:13:04:25:dc:55:f9:ec:87:ad:3b:27:e9:67:
                    2d:4c:f5:84:3b:03:3a:bc:f3:45:4a:34:a3:a4:9e:
                    d6:c8:f7:07:52:6f:f3:a8:28:d4:97:1d:96:7c:14:
                    58:02:4b:b2:25:16:22:08:66:02:5c:0a:d5:13:7d:
                    f5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:B4:2D:A0:39:58:99:D1:1D:F9:25:00:D7:2F:6A:A4:F3:49:A2:75
            X509v3 Authority Key Identifier:
                keyid:14:1E:15:C0:3B:57:F1:E4:81:B5:3D:57:40:AF:08:5A:8A:76:FB:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/141E15C03B57F1E481B53D5740AF085A8A76FB3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/141E15C03B57F1E481B53D5740AF085A8A76FB3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232342e302f32302d3332203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6b:10:dc:78:f9:a3:fd:b1:3c:99:e7:c0:20:14:e5:5d:92:fe:
         fb:01:8c:90:04:e9:8b:3f:2b:01:49:8a:96:a9:0c:32:0d:8e:
         c0:51:5a:44:45:29:54:56:0c:c2:e5:bd:80:a4:54:6e:df:da:
         c2:5e:9d:c3:30:35:dd:78:e9:6d:d3:2a:1e:59:94:6a:74:14:
         2e:38:14:7c:78:17:b4:6d:da:15:6e:c3:3e:83:26:aa:60:cf:
         7b:83:b5:0e:cf:33:12:8c:84:33:70:69:7d:12:60:37:7a:fe:
         e4:50:a4:50:7b:f8:5f:f7:d9:75:27:a4:71:31:94:9c:e4:51:
         ed:cf:0b:64:f5:46:f6:69:b4:cb:0d:e4:5b:c8:c6:d0:59:f1:
         af:72:33:b5:63:fd:52:8d:ec:b7:fa:2b:c3:de:af:4e:c3:59:
         be:f7:cb:95:d3:6d:dd:d0:91:b1:ce:8c:ab:dd:89:01:4f:d4:
         f8:5c:26:4a:48:19:0c:15:24:c6:ea:31:1d:bf:ca:a4:3f:6a:
         a5:4d:cf:32:46:0f:60:83:e0:1f:c5:ae:83:75:87:09:da:7b:
         a8:b9:0e:1f:dc:53:eb:97:e4:98:80:7e:8e:72:10:ac:59:ad:
         63:6d:99:40:32:69:05:d8:63:a5:49:77:a7:b8:14:e1:3e:02:
         08:2d:15:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:20:18 2026 by rpki-client