Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232382e302f32322d3232203d3e203631383531.roa
File:                     3137372e37352e3232382e302f32322d3232203d3e203631383531.roa (raw, json)
Hash identifier:          fSrrknoc+Gb53eyYs7IymhU0qw85LIaPFDPHfNXWCco=
Subject key identifier:   F8:A2:F3:49:E9:AB:18:4A:94:03:F7:4D:3C:6F:AF:8D:60:27:BD:F8
Certificate issuer:       /CN=6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167
Certificate serial:       6679F1B7142586E76F278CC3C75D863166F63AE2
Authority key identifier: 6C:66:D3:75:B9:67:51:36:E7:C6:8B:AA:C4:F2:DD:DB:2C:E4:E1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232382e302f32322d3232203d3e203631383531.roa
Signing time:             Wed 22 Jul 2026 22:02:13 +0000
ROA not before:           Wed 22 Jul 2026 21:57:13 +0000
ROA not after:            Wed 21 Jul 2027 22:02:13 +0000
asID:                     61851
IP address blocks:        177.75.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.crl
                          rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 09:47:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:79:f1:b7:14:25:86:e7:6f:27:8c:c3:c7:5d:86:31:66:f6:3a:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167
        Validity
            Not Before: Jul 22 21:57:13 2026 GMT
            Not After : Jul 21 22:02:13 2027 GMT
        Subject: CN=F8A2F349E9AB184A9403F74D3C6FAF8D6027BDF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ec:ab:22:63:1e:d6:75:ef:88:6c:e4:ea:2f:
                    26:f0:1f:c5:51:9b:dd:7b:8e:ef:db:f6:a9:ba:66:
                    95:67:2f:3f:49:ff:85:5b:0e:14:b1:1f:ee:26:b5:
                    b7:fd:f7:2d:c1:eb:e2:18:a0:f8:9b:7c:75:d3:78:
                    5c:f0:05:b5:99:3e:b1:60:49:4c:e5:49:a0:7a:c5:
                    c6:fb:ed:18:8f:53:94:51:62:20:33:c9:fb:cc:19:
                    4d:9e:8d:13:5a:eb:5f:a7:1a:d2:b9:45:ef:a1:7c:
                    04:6b:a3:2c:9c:bd:cd:f8:dc:a6:c3:36:06:bb:51:
                    4c:92:5c:f7:cd:e2:90:f5:84:da:2c:76:87:21:11:
                    80:e9:5b:0a:f8:77:df:7a:33:77:1a:7a:5c:f3:ab:
                    2e:47:1a:c7:08:1f:2d:4a:33:ae:a9:cd:fd:c7:0f:
                    db:24:63:84:64:ac:54:ff:08:99:db:2c:b6:b2:55:
                    84:b3:7d:18:ed:a7:84:71:cd:d2:41:9a:7c:3e:ca:
                    87:34:5f:2a:c2:fd:c2:ec:8b:3f:d5:90:32:5b:8a:
                    39:e2:8c:09:22:96:b7:29:0f:c9:6e:f4:fa:2c:78:
                    71:98:15:8f:6d:83:ec:da:4a:35:b2:75:49:95:8f:
                    0e:93:24:21:17:f8:25:b6:41:62:15:75:9b:0f:8b:
                    f0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A2:F3:49:E9:AB:18:4A:94:03:F7:4D:3C:6F:AF:8D:60:27:BD:F8
            X509v3 Authority Key Identifier:
                keyid:6C:66:D3:75:B9:67:51:36:E7:C6:8B:AA:C4:F2:DD:DB:2C:E4:E1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232382e302f32322d3232203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:e2:7d:2d:0b:ec:23:49:16:d5:66:ef:5e:67:85:03:55:f2:
         07:b4:8f:c8:fc:6e:90:f5:4b:1e:58:bf:02:ad:01:90:06:dd:
         e0:3c:89:47:c3:74:79:52:47:04:3b:39:9b:91:f2:ab:ba:81:
         75:b6:45:97:68:8e:d8:5a:bf:95:96:86:80:c2:7e:cb:01:de:
         8d:c4:c5:3a:2a:14:a4:97:2a:0f:ce:19:c7:60:4a:8d:1f:2c:
         6c:6f:48:de:07:ff:06:75:33:dd:be:d8:22:f6:53:02:c7:b2:
         f4:8f:8c:b5:f3:18:33:0d:e4:f8:fa:11:ba:8c:67:3f:14:22:
         2f:5f:8b:42:44:c4:38:8c:a0:41:a8:39:1b:e4:cf:f5:30:7c:
         6f:c5:49:15:01:48:be:b5:5d:b3:30:37:e3:a6:cf:4d:d6:35:
         19:94:ee:d2:49:f1:af:ba:22:76:dc:9d:84:1d:80:82:52:35:
         7d:e2:13:6d:f6:86:94:29:a1:6c:5c:f7:f9:e6:b1:12:6c:30:
         68:ef:77:6d:2a:b9:39:90:e3:be:64:d0:51:6b:30:1d:b4:b6:
         9e:6e:99:c4:f6:83:67:d4:a7:16:97:ef:3c:f9:1d:0a:78:9a:
         74:5d:40:d4:9a:1e:53:e4:3e:22:26:f5:3c:d1:a6:32:01:09:
         3b:01:f5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:17:47 2026 by rpki-client