Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3137372e31322e3136372e302f32342d3234203d3e203237373135.roa
File:                     3137372e31322e3136372e302f32342d3234203d3e203237373135.roa (raw, json)
Hash identifier:          4uSnsmrnzygiCTFe2VhpeyCFh3eQGgoauJNTrPYfL0Y=
Subject key identifier:   9F:5C:53:6D:24:FE:9E:54:B0:C5:F5:3F:D8:52:71:DC:BE:A9:1B:D4
Certificate issuer:       /CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
Certificate serial:       613ABDD128D2E3316D416E95C98738A3A95A5740
Authority key identifier: 50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3137372e31322e3136372e302f32342d3234203d3e203237373135.roa
Signing time:             Mon 20 Oct 2025 11:33:25 +0000
ROA not before:           Mon 20 Oct 2025 11:28:25 +0000
ROA not after:            Mon 19 Oct 2026 11:33:25 +0000
asID:                     27715
IP address blocks:        177.12.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl
                          rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:3a:bd:d1:28:d2:e3:31:6d:41:6e:95:c9:87:38:a3:a9:5a:57:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
        Validity
            Not Before: Oct 20 11:28:25 2025 GMT
            Not After : Oct 19 11:33:25 2026 GMT
        Subject: CN=9F5C536D24FE9E54B0C5F53FD85271DCBEA91BD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:dc:2b:03:5d:81:03:6e:e7:0a:3c:ed:cc:d3:
                    a1:c3:73:7f:4f:a9:15:e3:a0:ee:f5:90:75:9a:6f:
                    06:78:06:2f:51:5f:54:33:14:c2:7a:9b:f2:8a:69:
                    c1:48:d0:80:43:38:78:3b:16:1d:51:2c:a4:3f:4c:
                    9a:a1:b6:a6:c6:5d:b4:8b:02:df:a8:7c:9a:0d:83:
                    6d:ea:0f:a4:01:aa:0d:4e:1a:f4:4a:97:3c:59:69:
                    07:9c:ae:99:c4:70:33:0f:0e:72:79:e2:ff:13:3f:
                    20:b2:9e:f2:11:7a:b3:51:e6:e7:e8:2a:d3:a7:c5:
                    48:5c:12:58:f4:43:fe:73:50:58:1b:c4:f1:b5:02:
                    d9:ee:5e:b7:81:ae:12:2c:5e:79:f5:e9:c9:55:42:
                    bb:e2:10:c1:5c:e7:14:f1:96:8c:54:8f:bd:3f:37:
                    bd:27:75:52:cc:92:24:cb:f1:b0:ea:a9:ba:dd:9d:
                    1b:eb:aa:07:8d:8e:b3:ad:eb:0e:01:08:c0:04:3b:
                    5c:a0:6b:8c:c7:8d:6f:a4:bd:eb:54:d3:91:e5:ba:
                    22:31:19:8b:a3:af:da:5f:df:a4:1d:63:42:81:b2:
                    43:d4:14:59:6d:32:c7:bd:7f:dc:95:8f:b4:0c:93:
                    75:01:81:02:7d:60:0f:a7:db:c9:97:ba:02:46:49:
                    57:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:5C:53:6D:24:FE:9E:54:B0:C5:F5:3F:D8:52:71:DC:BE:A9:1B:D4
            X509v3 Authority Key Identifier:
                keyid:50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3137372e31322e3136372e302f32342d3234203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:cd:2a:d9:0d:c1:4b:f0:26:d7:8f:ad:02:6e:ad:ff:6e:22:
         63:55:d5:3b:68:b4:40:71:9b:a3:27:ef:7a:44:ac:e4:e9:d7:
         e2:1d:db:db:9a:c5:4b:db:b4:09:e1:a2:79:bd:b6:99:67:84:
         a0:87:38:86:90:9f:a1:79:f1:67:88:cf:8b:3a:e8:9d:c4:89:
         ee:10:c2:84:a4:51:76:2e:20:43:71:7a:36:78:03:56:79:82:
         4d:e0:54:1e:76:56:e0:9b:bc:de:07:fd:45:0a:82:61:0a:be:
         1d:2d:66:f8:1b:5e:2c:5a:2b:c0:41:7a:f4:1e:a2:7d:d1:31:
         7a:6b:17:b5:09:80:76:9b:e9:ba:90:47:48:2f:e8:7a:b6:1f:
         3a:a1:cc:21:9a:d7:7c:60:e1:e4:0b:b8:86:1a:8d:08:ba:b2:
         f0:9f:a3:10:b2:8e:c2:17:c1:b1:8d:11:95:5f:92:9b:54:db:
         3e:fa:9c:58:1d:ff:f2:d1:ee:0b:73:35:d6:20:8e:d7:a6:9c:
         70:22:b4:56:80:8b:7e:1d:4e:a4:b0:8c:b6:82:54:6d:4d:e9:
         f0:49:53:90:c9:f2:6f:b4:eb:e4:9e:92:c3:b8:40:cc:61:ac:
         4c:53:d4:40:fb:0e:98:01:ea:12:1b:08:92:b8:0c:b6:d7:48:
         0d:f8:2d:d8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUYTq90SjS4zFtQW6VyYc4o6laV0AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTAxQUQ2MUExQTVBNDlCMDhGOUQ4Q0ZFOTlEMjU4MjM1
NUE5RENFODAeFw0yNTEwMjAxMTI4MjVaFw0yNjEwMTkxMTMzMjVaMDMxMTAvBgNV
BAMTKDlGNUM1MzZEMjRGRTlFNTRCMEM1RjUzRkQ4NTI3MURDQkVBOTFCRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE3CsDXYEDbucKPO3M06HDc39P
qRXjoO71kHWabwZ4Bi9RX1QzFMJ6m/KKacFI0IBDOHg7Fh1RLKQ/TJqhtqbGXbSL
At+ofJoNg23qD6QBqg1OGvRKlzxZaQecrpnEcDMPDnJ54v8TPyCynvIRerNR5ufo
KtOnxUhcElj0Q/5zUFgbxPG1AtnuXreBrhIsXnn16clVQrviEMFc5xTxloxUj70/
N70ndVLMkiTL8bDqqbrdnRvrqgeNjrOt6w4BCMAEO1yga4zHjW+kvetU05HluiIx
GYujr9pf36QdY0KBskPUFFltMse9f9yVj7QMk3UBgQJ9YA+n28mXugJGSVcZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUn1xTbST+nlSwxfU/2FJx3L6pG9QwHwYDVR0j
BBgwFoAUUBrWGhpaSbCPnYz+mdJYI1Wp3OgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWo5eTlxQ2pMaGdZR3YxWmRoN2E2WXozZlRhbmR2VEJOclVteWhVMWRR
N1UvMC81MDFBRDYxQTFBNUE0OUIwOEY5RDhDRkU5OUQyNTgyMzU1QTlEQ0U4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUwMUFENjFBMUE1QTQ5QjA4
RjlEOENGRTk5RDI1ODIzNTVBOURDRTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VqOXk5cUNqTGhnWUd2MVpkaDdhNll6M2ZUYW5kdlRCTnJVbXloVTFkUTdVLzAv
MzEzNzM3MmUzMTMyMmUzMTM2MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzczMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsQynMA0GCSqGSIb3DQEBCwUAA4IBAQCczSrZDcFL
8CbXj60Cbq3/biJjVdU7aLRAcZujJ+96RKzk6dfiHdvbmsVL27QJ4aJ5vbaZZ4Sg
hziGkJ+hefFniM+LOuidxInuEMKEpFF2LiBDcXo2eANWeYJN4FQedlbgm7zeB/1F
CoJhCr4dLWb4G14sWivAQXr0HqJ90TF6axe1CYB2m+m6kEdIL+h6th86ocwhmtd8
YOHkC7iGGo0IurLwn6MQso7CF8GxjRGVX5KbVNs++pxYHf/y0e4LczXWII7Xppxw
IrRWgIt+HU6ksIy2glRtTenwSVOQyfJvtOvknpLDuEDMYaxMU9RA+w6YAeoSGwiS
uAy210gN+C3Y
-----END CERTIFICATE-----
Generated at Tue Oct 21 01:08:15 2025 by rpki-client