Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232382e302f32332d3233203d3e203631383531.roa
File:                     3137372e37352e3232382e302f32332d3233203d3e203631383531.roa (raw, json)
Hash identifier:          0Wy0792EUy/JzN7oZ0Mfw5S1WCizJ2Nh9Jm+OY5B2UA=
Subject key identifier:   41:83:8C:FD:C9:50:74:3F:A4:DB:F0:29:0C:7D:E2:6C:E5:0F:97:CA
Certificate issuer:       /CN=99D7C44A0449C417C1F22D6C2A40EA99801B4649
Certificate serial:       6FB1F1D32CF05DD2C30542FFAEB6AA8FA8EE1E26
Authority key identifier: 99:D7:C4:4A:04:49:C4:17:C1:F2:2D:6C:2A:40:EA:99:80:1B:46:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D7C44A0449C417C1F22D6C2A40EA99801B4649.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232382e302f32332d3233203d3e203631383531.roa
Signing time:             Sun 07 Sep 2025 18:20:55 +0000
ROA not before:           Sun 07 Sep 2025 18:15:55 +0000
ROA not after:            Sun 06 Sep 2026 18:20:55 +0000
asID:                     61851
IP address blocks:        177.75.228.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/99D7C44A0449C417C1F22D6C2A40EA99801B4649.crl
                          rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/99D7C44A0449C417C1F22D6C2A40EA99801B4649.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D7C44A0449C417C1F22D6C2A40EA99801B4649.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 21:28:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:b1:f1:d3:2c:f0:5d:d2:c3:05:42:ff:ae:b6:aa:8f:a8:ee:1e:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D7C44A0449C417C1F22D6C2A40EA99801B4649
        Validity
            Not Before: Sep  7 18:15:55 2025 GMT
            Not After : Sep  6 18:20:55 2026 GMT
        Subject: CN=41838CFDC950743FA4DBF0290C7DE26CE50F97CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fc:b1:a3:ef:1c:02:3a:14:3e:28:af:80:39:
                    8a:57:b2:4e:24:c4:86:cb:62:aa:61:d0:14:96:40:
                    e0:90:0d:ab:cc:5a:11:59:50:22:4f:41:00:08:c7:
                    58:c6:b4:43:b5:c6:71:65:c6:a3:7f:39:81:73:00:
                    79:99:45:69:41:cf:d0:3b:c8:74:54:dc:a1:47:d7:
                    05:cd:32:cd:bd:86:77:de:f1:e2:1c:6b:a2:ed:3b:
                    56:40:55:c5:51:a3:c2:67:1c:d5:c6:ed:da:71:8f:
                    8a:2e:8a:8e:a3:3f:5b:94:41:e0:9a:42:b6:c2:13:
                    4e:3a:43:ca:bf:a7:ec:c9:12:ec:18:f4:50:f9:cc:
                    d9:bf:61:d7:86:f6:8c:4d:b7:9a:36:5d:57:e9:eb:
                    5d:36:09:90:1a:09:83:83:2e:34:0b:96:de:17:44:
                    d1:ef:d8:6a:03:4a:ea:70:10:a0:0b:e2:cb:ad:45:
                    99:b9:2a:d4:44:cb:7f:f6:df:52:66:a7:1f:19:2e:
                    ff:35:fd:28:46:96:7e:d9:be:f9:13:77:42:a3:f4:
                    a5:5b:a9:e5:21:42:e0:08:2d:71:97:00:2b:df:35:
                    ed:e6:bf:49:21:bf:e3:4b:16:fb:64:de:c6:45:f1:
                    88:08:d8:82:17:20:1a:5f:5e:24:3d:ec:11:61:b7:
                    c2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:83:8C:FD:C9:50:74:3F:A4:DB:F0:29:0C:7D:E2:6C:E5:0F:97:CA
            X509v3 Authority Key Identifier:
                keyid:99:D7:C4:4A:04:49:C4:17:C1:F2:2D:6C:2A:40:EA:99:80:1B:46:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/99D7C44A0449C417C1F22D6C2A40EA99801B4649.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D7C44A0449C417C1F22D6C2A40EA99801B4649.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3232382e302f32332d3233203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:f8:f0:dc:86:c0:8b:6d:4b:55:e8:68:f3:d9:3e:99:8c:b4:
         e8:45:71:79:bb:8d:b3:42:85:29:58:c7:eb:9b:a6:7f:76:d2:
         91:76:90:2f:99:b2:a1:6c:73:9b:3d:e2:ca:f7:aa:1c:d9:dc:
         59:8f:ed:9d:8a:ec:7e:43:8b:f3:66:09:f6:98:46:a3:3c:e5:
         0b:7e:c6:6f:16:52:11:cd:f4:1a:b0:a9:2e:ce:b9:a8:ab:c3:
         7c:f4:58:20:39:1e:1b:c3:d6:6b:13:c5:9c:6d:8a:77:5b:ac:
         46:a8:1f:68:74:79:9a:55:86:7a:20:d1:b1:00:77:51:ba:ae:
         f7:f5:fa:dc:93:57:8c:d4:07:aa:6d:bf:5a:9c:db:ea:60:6f:
         f8:f7:a2:ad:c4:15:73:6a:93:f4:fb:f3:68:63:03:c7:4e:f2:
         c5:6f:d7:85:62:71:fe:7c:ec:ff:b7:bc:df:f9:6d:0f:fd:a0:
         2f:99:e2:0d:e2:39:11:f9:a3:aa:ea:38:55:df:e4:01:2a:e3:
         de:df:ad:96:58:8f:72:e4:17:56:4a:6e:3b:9f:d5:f2:29:d2:
         a3:7c:d4:21:1e:ee:3a:a6:c3:b3:e4:86:1b:b1:67:56:72:a8:
         8e:2d:62:a7:c8:96:e8:8a:24:86:7d:4b:94:a7:3d:87:1c:34:
         16:21:2d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:18:36 2025 by rpki-client