Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3233362e302f32322d3232203d3e203631383531.roa
File:                     3137372e37352e3233362e302f32322d3232203d3e203631383531.roa (raw, json)
Hash identifier:          J+j6aP8G31zKhGGbfE5vErrSyE7XUCXkf8M3tZdaGDY=
Subject key identifier:   D3:EF:9B:4D:6A:6B:38:43:78:9D:63:34:72:53:8A:D6:F8:D8:31:03
Certificate issuer:       /CN=6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167
Certificate serial:       48BB60243AEEF7A1751FC73D9A5936C4D3E494BB
Authority key identifier: 6C:66:D3:75:B9:67:51:36:E7:C6:8B:AA:C4:F2:DD:DB:2C:E4:E1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3233362e302f32322d3232203d3e203631383531.roa
Signing time:             Wed 22 Jul 2026 22:02:12 +0000
ROA not before:           Wed 22 Jul 2026 21:57:12 +0000
ROA not after:            Wed 21 Jul 2027 22:02:12 +0000
asID:                     61851
IP address blocks:        177.75.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.crl
                          rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 09:47:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:bb:60:24:3a:ee:f7:a1:75:1f:c7:3d:9a:59:36:c4:d3:e4:94:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167
        Validity
            Not Before: Jul 22 21:57:12 2026 GMT
            Not After : Jul 21 22:02:12 2027 GMT
        Subject: CN=D3EF9B4D6A6B3843789D633472538AD6F8D83103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:31:9a:2f:7d:84:cf:7f:2d:f1:1b:e8:31:68:
                    97:ae:66:6a:32:64:5e:1f:c5:a1:7b:11:7d:51:7d:
                    78:8f:e2:5f:69:97:2b:25:2c:9a:d5:f8:a8:f6:19:
                    cb:ab:28:51:f4:1b:af:0e:bb:c2:a0:cb:3a:9a:7a:
                    f1:24:c8:e3:da:ab:4c:ca:ce:36:1d:aa:2a:55:15:
                    32:63:5e:f1:92:48:73:f2:7a:1b:e5:c4:03:11:2a:
                    b3:a0:12:c8:f5:0c:6d:cc:f8:b8:75:a0:ac:ba:0f:
                    7d:a4:88:4c:b6:1a:21:0c:50:99:97:02:aa:4a:f5:
                    29:64:23:7e:f7:79:e2:be:ba:80:1f:b4:3a:12:16:
                    9f:d5:80:4f:c7:92:c4:9e:95:0b:da:c5:1d:01:53:
                    0d:a6:88:8e:0a:56:0b:a3:6a:96:1d:53:d0:e2:75:
                    f5:dd:de:c4:e0:86:86:8a:5f:b6:8d:36:de:4f:99:
                    1d:4b:84:26:68:05:4e:7f:4c:fa:12:60:69:c6:77:
                    6d:24:aa:bd:65:e8:81:94:ef:5e:b3:d8:5b:d9:08:
                    3e:bf:46:7b:6f:4e:6a:f0:41:73:de:b2:3c:77:a7:
                    38:8f:a9:59:73:95:e2:ff:22:38:b8:60:59:97:3f:
                    2e:7a:79:64:97:33:75:28:a0:1f:51:56:a5:f8:a3:
                    9d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:EF:9B:4D:6A:6B:38:43:78:9D:63:34:72:53:8A:D6:F8:D8:31:03
            X509v3 Authority Key Identifier:
                keyid:6C:66:D3:75:B9:67:51:36:E7:C6:8B:AA:C4:F2:DD:DB:2C:E4:E1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3137372e37352e3233362e302f32322d3232203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:80:dd:4f:7d:49:8a:cf:06:77:56:21:92:40:04:a5:4a:79:
         5d:44:1d:fc:f4:27:2e:ab:a4:ab:1f:8d:de:20:d0:60:09:d8:
         8d:88:98:b0:4e:bb:f4:db:3b:f2:6d:7a:7d:44:47:9a:5a:cb:
         e2:c8:90:c1:05:d9:17:d9:f2:44:7d:47:72:f4:e4:fb:37:80:
         e5:9d:1e:ce:56:1e:e2:69:dc:b1:36:31:7e:fd:59:94:bc:85:
         aa:df:69:41:f4:c1:80:df:f7:cb:03:9e:02:69:1e:cb:13:3d:
         7a:c6:cd:d8:69:bb:a4:3b:e0:bb:2d:4a:64:6b:da:05:a4:ae:
         27:0a:36:80:a8:1b:06:36:cc:fb:71:ed:c9:a4:5e:8b:d1:df:
         bd:95:a7:a9:9d:4b:fc:43:2e:db:e7:ca:bd:72:19:b4:79:1a:
         4a:6a:d9:6d:42:6c:9c:e4:12:fd:16:d3:dd:ef:a8:4a:61:06:
         98:75:dc:3c:a6:84:5d:0f:fc:ba:5a:91:88:63:97:3d:4e:57:
         a5:ee:6b:00:4f:a4:41:1e:58:c6:37:db:81:fc:3a:dd:e2:8c:
         5d:09:f9:bf:04:ed:b5:03:10:7a:50:c6:3e:3a:8d:93:0e:f0:
         a5:91:33:16:cf:5f:b6:a4:f9:60:73:a1:82:cd:65:16:d6:6b:
         44:b8:94:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:23:25 2026 by rpki-client