Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3137372e31322e3137332e302f32342d3234203d3e203237373135.roa
File:                     3137372e31322e3137332e302f32342d3234203d3e203237373135.roa (raw, json)
Hash identifier:          LzFo5+AJPq4keADOSRPrFb11FoRjQDNo/IUlHRLzRA4=
Subject key identifier:   E3:C1:6C:BD:5C:43:AF:7B:7E:E0:A6:C5:19:F6:EB:B0:FE:4B:B1:8B
Certificate issuer:       /CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
Certificate serial:       42DD4914302BBD6ACCDBAB2E79459FD68004C148
Authority key identifier: 50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3137372e31322e3137332e302f32342d3234203d3e203237373135.roa
Signing time:             Mon 20 Oct 2025 11:36:29 +0000
ROA not before:           Mon 20 Oct 2025 11:31:29 +0000
ROA not after:            Mon 19 Oct 2026 11:36:29 +0000
asID:                     27715
IP address blocks:        177.12.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl
                          rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:dd:49:14:30:2b:bd:6a:cc:db:ab:2e:79:45:9f:d6:80:04:c1:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
        Validity
            Not Before: Oct 20 11:31:29 2025 GMT
            Not After : Oct 19 11:36:29 2026 GMT
        Subject: CN=E3C16CBD5C43AF7B7EE0A6C519F6EBB0FE4BB18B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6a:15:cf:a2:32:45:b5:85:98:08:11:97:a0:
                    b3:04:dc:a8:c8:51:8d:eb:d1:64:d2:b7:1b:ed:9e:
                    91:0f:06:48:69:78:fa:3a:e6:13:82:34:84:9c:ab:
                    00:b3:14:6d:c6:37:5d:0f:81:a7:6e:46:0d:0a:60:
                    e6:65:c0:f8:95:43:da:0f:45:9d:0e:47:c1:60:cb:
                    25:16:42:da:63:fa:fa:36:7f:fb:6c:28:ac:f6:50:
                    13:2e:55:3c:5d:1e:48:d4:c6:23:a0:a1:55:0c:9d:
                    20:0a:40:4d:c5:5f:cd:03:2d:b2:ea:89:08:5a:f9:
                    26:80:43:77:03:a9:82:de:02:25:91:61:ff:50:1b:
                    95:81:17:dd:0d:3b:e2:0e:b0:97:1a:d4:33:2b:a1:
                    4b:cc:3d:ef:6f:a8:a7:e0:8d:b9:42:4b:e7:d5:ab:
                    f5:99:da:b4:76:87:14:d7:b5:6b:d5:51:26:fe:2b:
                    90:71:cc:77:1b:27:ed:b8:fe:09:c0:33:34:da:e8:
                    89:ff:de:dc:e8:21:4c:9d:64:ee:cf:c9:e8:c7:01:
                    d8:dc:14:48:ac:95:85:ab:32:75:94:d3:5d:85:45:
                    0c:88:af:34:cb:0c:83:43:d3:81:75:cf:96:40:81:
                    7d:83:f1:25:87:fe:06:ce:a6:75:48:11:7a:71:97:
                    69:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C1:6C:BD:5C:43:AF:7B:7E:E0:A6:C5:19:F6:EB:B0:FE:4B:B1:8B
            X509v3 Authority Key Identifier:
                keyid:50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3137372e31322e3137332e302f32342d3234203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:d3:d9:50:0d:10:62:d8:36:3b:2b:14:1e:ff:94:aa:5c:32:
         d5:4e:d3:b2:05:2a:eb:7f:6a:ad:e5:d5:a5:74:8e:ed:fa:b4:
         05:15:7b:ec:03:08:0f:98:c9:2b:0f:a7:92:63:25:d1:d0:44:
         27:97:45:1a:3e:4a:62:60:a3:a6:f9:98:0d:42:5d:21:72:02:
         9e:6b:2a:ad:d4:2e:e2:84:3f:ff:87:cd:bc:78:31:d0:0e:ef:
         9d:b5:43:03:d3:ca:64:55:84:c6:3f:68:37:00:5d:bb:9e:80:
         6c:0d:98:60:45:72:28:3f:c7:a9:43:06:61:45:c8:89:b5:c0:
         12:64:aa:14:5d:90:5a:b3:fb:d9:d2:fe:5c:01:13:e9:0f:5d:
         42:b9:71:34:31:be:54:92:f1:f0:7a:fe:19:6e:37:bb:6f:54:
         d8:e2:7f:45:28:29:b4:12:b1:26:98:79:fe:ec:50:07:c9:8b:
         87:15:b2:e7:c1:1b:ba:d0:ad:7b:37:7e:4e:45:52:77:ff:c0:
         55:a2:19:d8:fb:11:7f:bc:30:24:ca:ca:b6:18:e8:05:0d:50:
         33:88:a4:e6:02:a9:8f:cd:89:7a:61:0c:02:b5:60:88:e3:a2:
         7a:59:be:dd:32:ca:a0:de:e8:60:68:bb:89:07:04:ba:2a:4b:
         97:5b:1c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:08:11 2025 by rpki-client