Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232342e302f32322d3232203d3e203631383531.roa
File:                     3137372e37352e3232342e302f32322d3232203d3e203631383531.roa (raw, json)
Hash identifier:          1L+gsUK+VTuSF5mFNp488HbJjB4lgQ4Fo7HYQtIRUUw=
Subject key identifier:   98:85:26:B8:07:2E:67:CD:B9:1F:6E:E7:AD:C1:B7:4B:6D:5E:E8:3C
Certificate issuer:       /CN=6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167
Certificate serial:       40BC44E8823D9F47F971F890548AAE1F6CD42734
Authority key identifier: 6C:66:D3:75:B9:67:51:36:E7:C6:8B:AA:C4:F2:DD:DB:2C:E4:E1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232342e302f32322d3232203d3e203631383531.roa
Signing time:             Wed 22 Jul 2026 22:02:06 +0000
ROA not before:           Wed 22 Jul 2026 21:57:06 +0000
ROA not after:            Wed 21 Jul 2027 22:02:06 +0000
asID:                     61851
IP address blocks:        177.75.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.crl
                          rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 09:47:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:bc:44:e8:82:3d:9f:47:f9:71:f8:90:54:8a:ae:1f:6c:d4:27:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167
        Validity
            Not Before: Jul 22 21:57:06 2026 GMT
            Not After : Jul 21 22:02:06 2027 GMT
        Subject: CN=988526B8072E67CDB91F6EE7ADC1B74B6D5EE83C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4b:76:39:8b:73:f5:d5:2d:e1:ea:e7:57:0f:
                    70:43:a8:14:36:a6:da:a6:d8:6d:91:72:9a:7b:a8:
                    52:e5:87:1a:a8:f5:e3:72:f6:c8:84:da:b7:43:0c:
                    f7:ac:9f:73:68:e4:80:1d:8d:ff:bc:e4:4c:6a:52:
                    61:7d:1e:9c:76:67:96:32:18:fe:da:4f:de:e3:d2:
                    75:54:8c:55:e4:fa:c0:4e:23:7b:95:26:f2:f1:1f:
                    5f:41:67:89:de:7d:18:1c:24:b4:b8:25:0b:4c:2c:
                    3b:34:86:da:66:83:48:63:a2:4c:e9:6f:65:ac:62:
                    8e:99:e4:8b:9e:90:40:6c:8e:bf:01:4f:37:3b:f4:
                    92:c0:e9:f2:2a:6e:70:d7:30:44:89:12:75:d2:b8:
                    ce:70:18:2f:55:eb:72:4c:33:98:fd:99:c5:e3:15:
                    b4:81:18:81:2d:c1:67:16:56:27:32:52:99:40:1d:
                    e5:52:8a:79:c2:46:97:1c:86:7a:1d:8f:d5:b7:b1:
                    c0:f9:dc:1f:4f:5a:17:76:48:8c:f6:5e:8f:56:cd:
                    05:7f:88:be:0e:c7:f3:bc:a5:07:31:de:1b:20:7b:
                    2c:4d:42:39:47:11:a1:9e:d3:a3:d0:a2:07:21:d0:
                    91:28:42:6f:65:30:05:06:8e:ec:bf:ee:a7:01:43:
                    dc:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:85:26:B8:07:2E:67:CD:B9:1F:6E:E7:AD:C1:B7:4B:6D:5E:E8:3C
            X509v3 Authority Key Identifier:
                keyid:6C:66:D3:75:B9:67:51:36:E7:C6:8B:AA:C4:F2:DD:DB:2C:E4:E1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232342e302f32322d3232203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:88:fc:c0:80:8a:58:77:ec:43:4a:0d:a6:af:91:f9:a3:f9:
         61:24:8b:56:ca:1c:da:77:c8:0e:3b:3a:13:8e:97:68:17:30:
         94:bd:4d:b5:32:54:f1:a8:85:d7:b1:a2:af:74:68:e5:86:55:
         e2:b8:af:e3:0a:0e:1f:7a:4a:03:ca:c3:0e:1f:ea:47:30:4e:
         19:be:68:11:64:24:f7:b7:58:9f:5a:06:ac:91:db:ec:79:a0:
         a5:3d:40:64:1d:35:a1:bf:5c:bf:b8:64:e0:a4:88:11:1d:b9:
         34:56:b5:05:be:99:d8:9c:69:a6:03:3a:52:55:5a:7f:80:ae:
         bd:24:c4:c5:50:e2:09:4d:22:d2:57:2f:ef:e2:8a:ef:01:78:
         48:58:f7:fb:55:76:d5:65:c5:5f:84:d5:21:6f:66:dc:83:65:
         0f:5b:91:1e:60:6f:b3:b0:bf:47:fe:38:08:63:fc:e4:8a:93:
         34:f1:2b:72:96:fd:df:b8:e3:7b:87:39:19:13:bf:48:6a:2a:
         84:ad:c3:3f:60:d1:89:ae:51:4d:86:09:b7:ee:17:22:b4:3d:
         1c:53:22:3c:8d:1b:da:82:9d:7c:44:f0:90:35:6c:dc:8c:14:
         51:72:ec:7f:21:72:99:c2:61:67:c8:0c:45:b0:d3:6b:d3:73:
         8b:9e:ae:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:42:44 2026 by rpki-client