Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3233322e302f32332d3233203d3e203631383531.roa
File:                     3137372e37352e3233322e302f32332d3233203d3e203631383531.roa (raw, json)
Hash identifier:          pG940FZ4h3B0wqcQYD9Cz5cvG/KAfkFgAxRphmBYNRs=
Subject key identifier:   B0:30:A2:8D:A8:AA:DD:4B:5F:DA:4A:1B:1E:93:B8:9D:B6:7E:1E:D9
Certificate issuer:       /CN=6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167
Certificate serial:       15BAC476E08C74EDB3FA890E1C130D0AC2A6B53F
Authority key identifier: 6C:66:D3:75:B9:67:51:36:E7:C6:8B:AA:C4:F2:DD:DB:2C:E4:E1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3233322e302f32332d3233203d3e203631383531.roa
Signing time:             Wed 22 Jul 2026 22:02:11 +0000
ROA not before:           Wed 22 Jul 2026 21:57:11 +0000
ROA not after:            Wed 21 Jul 2027 22:02:11 +0000
asID:                     61851
IP address blocks:        177.75.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.crl
                          rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 09:47:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ba:c4:76:e0:8c:74:ed:b3:fa:89:0e:1c:13:0d:0a:c2:a6:b5:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167
        Validity
            Not Before: Jul 22 21:57:11 2026 GMT
            Not After : Jul 21 22:02:11 2027 GMT
        Subject: CN=B030A28DA8AADD4B5FDA4A1B1E93B89DB67E1ED9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:67:2a:90:5e:27:97:9d:9b:70:14:99:ca:7f:
                    d0:19:47:c2:4a:02:59:4e:a2:af:4c:4f:ab:c5:3c:
                    06:ca:0a:98:97:2d:ce:ae:23:8f:97:0c:48:2e:f4:
                    b9:1e:e1:da:aa:9d:0a:4b:08:1e:2d:8d:65:35:dd:
                    f3:ae:86:bf:36:e4:59:bf:83:7c:20:7f:d9:76:8c:
                    7d:ae:75:fb:df:d8:75:ee:6e:3b:bf:58:67:b7:c5:
                    98:6c:0a:6c:a4:12:10:b9:13:4b:48:0f:25:c7:92:
                    c1:50:48:46:43:55:55:e2:ff:bc:dd:eb:08:29:ab:
                    8b:00:83:cc:16:8d:6a:ac:3c:49:57:78:b2:d8:b9:
                    da:0e:fa:96:24:52:56:3a:fb:3a:6b:c4:ed:da:72:
                    52:c7:1a:29:e0:37:43:30:e4:61:c6:c8:c0:ea:2f:
                    13:01:ca:f1:1e:be:52:7d:e2:3b:bb:b1:0d:b7:43:
                    35:59:8d:de:90:2d:60:2f:d0:3c:5b:93:cf:24:02:
                    06:1b:a5:21:40:29:24:18:13:b7:5c:44:1a:d4:39:
                    fc:27:4d:ca:46:1a:7f:94:42:f7:0f:d4:36:16:f5:
                    0d:29:ce:d8:d0:d2:80:80:3c:44:bd:d3:d4:0d:dc:
                    42:d0:4f:e6:00:cf:3a:63:6f:df:be:11:b2:cd:cd:
                    45:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:30:A2:8D:A8:AA:DD:4B:5F:DA:4A:1B:1E:93:B8:9D:B6:7E:1E:D9
            X509v3 Authority Key Identifier:
                keyid:6C:66:D3:75:B9:67:51:36:E7:C6:8B:AA:C4:F2:DD:DB:2C:E4:E1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3233322e302f32332d3233203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:2c:89:bd:11:7f:26:29:e4:84:6a:5e:7f:42:84:d8:5a:40:
         02:fc:88:52:20:3e:30:38:58:0f:42:68:eb:38:9a:e9:cc:42:
         27:94:f7:58:b7:f6:57:25:0a:97:0c:f8:71:df:c6:b3:59:83:
         a5:5b:6a:e6:89:94:bd:91:f3:ab:c3:db:0d:dd:a8:f3:20:ef:
         38:ec:46:a2:77:6b:01:98:93:7c:85:63:32:9d:45:c8:74:55:
         a6:bb:ee:9f:d6:50:76:34:a2:40:bd:16:aa:fd:4d:77:37:12:
         99:ca:77:58:dc:72:de:e6:5c:9b:d8:2e:4b:f1:d9:42:28:59:
         d6:b7:39:46:b7:29:73:49:54:24:02:18:79:de:47:0d:99:93:
         ce:cc:8e:57:39:d5:7c:30:f4:52:a0:93:33:5d:9a:fe:89:9d:
         3b:61:da:16:63:51:27:36:90:0c:5f:a0:af:40:9d:2d:30:ae:
         75:9d:27:8a:4b:c2:f0:b2:7b:66:b4:f5:6e:9a:64:f6:e5:e7:
         20:37:ab:9e:75:b9:8d:e0:8f:00:75:b0:ad:6c:9f:3d:7c:e6:
         f6:fc:53:f7:2f:62:39:ad:c0:8b:cd:fd:17:7f:b5:60:44:85:
         35:47:d7:f4:60:0c:f6:94:09:df:8d:d2:e6:fc:a7:a3:39:11:
         89:fd:cd:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:04:01 2026 by rpki-client