Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3233322e302f32322d3232203d3e203631383531.roa
File:                     3137372e37352e3233322e302f32322d3232203d3e203631383531.roa (raw, json)
Hash identifier:          N3VMrA8ahwWGnseHvfdNCAlRz5zd7ZW7L9Eoi2Ez23g=
Subject key identifier:   C0:60:E9:81:DA:06:8B:96:D9:A3:51:45:22:D5:86:6B:46:83:98:6E
Certificate issuer:       /CN=6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167
Certificate serial:       42C665D7E14BF0E023F5E7CD915398BE8FBD8C03
Authority key identifier: 6C:66:D3:75:B9:67:51:36:E7:C6:8B:AA:C4:F2:DD:DB:2C:E4:E1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3233322e302f32322d3232203d3e203631383531.roa
Signing time:             Wed 22 Jul 2026 22:02:08 +0000
ROA not before:           Wed 22 Jul 2026 21:57:08 +0000
ROA not after:            Wed 21 Jul 2027 22:02:08 +0000
asID:                     61851
IP address blocks:        177.75.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.crl
                          rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 09:47:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:c6:65:d7:e1:4b:f0:e0:23:f5:e7:cd:91:53:98:be:8f:bd:8c:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167
        Validity
            Not Before: Jul 22 21:57:08 2026 GMT
            Not After : Jul 21 22:02:08 2027 GMT
        Subject: CN=C060E981DA068B96D9A3514522D5866B4683986E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a8:86:3c:74:88:42:eb:86:84:40:a5:32:e0:
                    81:43:f6:18:52:84:92:bd:55:eb:96:3f:71:3a:5b:
                    59:a1:ed:88:8b:55:09:3b:a1:48:82:4c:ac:99:6b:
                    fc:1c:67:3a:5f:dc:1f:bd:eb:64:86:2f:b0:6d:ff:
                    83:1c:f0:f6:47:51:53:44:e4:ea:20:eb:bf:39:07:
                    66:d7:41:41:a2:fe:58:b1:e4:5e:b8:6a:e0:9b:98:
                    fe:74:b9:67:e4:38:02:51:c0:9f:44:5c:3e:3c:4c:
                    86:34:17:17:c4:21:96:77:78:f0:25:2c:9e:f0:b0:
                    5f:78:cd:17:dc:6b:e8:bc:01:65:08:a2:81:ff:04:
                    b9:10:ff:b2:c8:1b:30:6f:5f:4b:62:d5:1f:b1:9f:
                    48:9f:7f:3d:f6:17:40:53:66:89:1b:e7:70:4d:dc:
                    e3:bf:07:b4:47:7d:fe:e5:04:4c:3a:f5:57:53:b8:
                    25:49:79:ea:e7:5e:1c:de:01:7c:ce:f3:d2:73:8d:
                    c7:db:37:32:b0:d5:c5:94:02:55:26:e8:f3:15:e7:
                    bb:d5:61:e0:2e:ec:b6:44:33:d7:31:6f:af:9f:89:
                    19:dd:a8:e9:f0:d7:6a:4c:4b:34:4d:32:65:fc:90:
                    f7:cd:ca:7d:d6:c2:94:b3:8c:84:f0:b3:fb:cd:8c:
                    28:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:60:E9:81:DA:06:8B:96:D9:A3:51:45:22:D5:86:6B:46:83:98:6E
            X509v3 Authority Key Identifier:
                keyid:6C:66:D3:75:B9:67:51:36:E7:C6:8B:AA:C4:F2:DD:DB:2C:E4:E1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3233322e302f32322d3232203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:7c:2f:c1:3d:13:c3:6f:39:5f:71:aa:b2:e7:32:fd:e8:b3:
         18:68:b2:c8:5b:9c:f4:75:10:c7:f8:37:6a:ab:53:28:fb:c9:
         fe:84:de:19:7a:3c:03:d8:ff:3f:9f:10:b8:b1:40:f5:c8:4f:
         26:d8:83:5c:0b:0c:c9:d9:c9:88:33:e1:8a:a1:58:71:3a:5f:
         1e:1b:cd:0d:ca:aa:d2:13:0d:40:53:29:e2:b6:71:8c:93:a9:
         38:cf:58:75:05:98:29:15:b2:5c:90:9f:f5:32:62:fd:98:20:
         71:ce:76:d2:74:f7:7d:df:e5:2c:bc:3a:8a:cf:76:d9:65:89:
         16:65:0d:b2:1b:5f:63:4c:05:82:b5:2b:15:70:49:e2:5f:be:
         95:53:b6:47:d1:bb:ac:df:9a:39:05:53:77:0d:dd:dd:ed:60:
         e0:f0:a9:97:88:bc:93:81:e2:c4:26:bf:ec:60:14:80:94:26:
         d6:fc:8d:ad:47:5f:dd:70:46:2b:6f:a1:8e:24:fc:a3:0a:84:
         49:ed:d1:a5:73:a5:f3:b8:8a:c2:9b:11:a1:ba:63:e4:6f:c8:
         5a:3b:d8:d0:5f:5c:4d:b0:a7:08:31:91:39:09:e0:4a:6b:61:
         77:29:37:29:0a:72:71:01:9f:f8:b8:17:ae:f9:82:0b:68:18:
         1a:9d:00:37
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQsZl1+FL8OAj9efNkVOYvo+9jAMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkM2NkQzNzVCOTY3NTEzNkU3QzY4QkFBQzRGMkREREIy
Q0U0RTE2NzAeFw0yNjA3MjIyMTU3MDhaFw0yNzA3MjEyMjAyMDhaMDMxMTAvBgNV
BAMTKEMwNjBFOTgxREEwNjhCOTZEOUEzNTE0NTIyRDU4NjZCNDY4Mzk4NkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPqIY8dIhC64aEQKUy4IFD9hhS
hJK9VeuWP3E6W1mh7YiLVQk7oUiCTKyZa/wcZzpf3B+962SGL7Bt/4Mc8PZHUVNE
5Oog6785B2bXQUGi/lix5F64auCbmP50uWfkOAJRwJ9EXD48TIY0FxfEIZZ3ePAl
LJ7wsF94zRfca+i8AWUIooH/BLkQ/7LIGzBvX0ti1R+xn0iffz32F0BTZokb53BN
3OO/B7RHff7lBEw69VdTuCVJeernXhzeAXzO89JzjcfbNzKw1cWUAlUm6PMV57vV
YeAu7LZEM9cxb6+fiRndqOnw12pMSzRNMmX8kPfNyn3WwpSzjITws/vNjChRAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUwGDpgdoGi5bZo1FFItWGa0aDmG4wHwYDVR0j
BBgwFoAUbGbTdblnUTbnxouqxPLd2yzk4WcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOU1lNzgyWWFacUV3V0YzdVBFSzlrR0g3b0E4a0FzRjlSa2lxdDZUZGpR
QjkvMC82QzY2RDM3NUI5Njc1MTM2RTdDNjhCQUFDNEYyREREQjJDRTRFMTY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZDNjZEMzc1Qjk2NzUxMzZF
N0M2OEJBQUM0RjJERERCMkNFNEUxNjcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlNZTc4MllhWnFFd1dGM3VQRUs5a0dIN29BOGtBc0Y5UmtpcXQ2VGRqUUI5LzAv
MzEzNzM3MmUzNzM1MmUzMjMzMzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNjMx
MzgzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsUvoMA0GCSqGSIb3DQEBCwUAA4IBAQCbfC/BPRPD
bzlfcaqy5zL96LMYaLLIW5z0dRDH+Ddqq1Mo+8n+hN4ZejwD2P8/nxC4sUD1yE8m
2INcCwzJ2cmIM+GKoVhxOl8eG80NyqrSEw1AUynitnGMk6k4z1h1BZgpFbJckJ/1
MmL9mCBxznbSdPd93+UsvDqKz3bZZYkWZQ2yG19jTAWCtSsVcEniX76VU7ZH0bus
35o5BVN3Dd3d7WDg8KmXiLyTgeLEJr/sYBSAlCbW/I2tR1/dcEYrb6GOJPyjCoRJ
7dGlc6XzuIrCmxGhumPkb8haO9jQX1xNsKcIMZE5CeBKa2F3KTcpCnJxAZ/4uBeu
+YILaBganQA3
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:18:18 2026 by rpki-client