Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3137372e31322e3137342e302f32342d3234203d3e203237373135.roa
File:                     3137372e31322e3137342e302f32342d3234203d3e203237373135.roa (raw, json)
Hash identifier:          Ba/01y2VEXOXxaK/gbwSnmTUDuz84tZN+MRlksyiFQE=
Subject key identifier:   26:A3:92:8E:96:CE:18:C0:9D:C3:09:87:F8:19:6C:44:5D:C1:43:71
Certificate issuer:       /CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
Certificate serial:       48CFB40DBEECB200626705FC9F8C664460E9125D
Authority key identifier: 50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3137372e31322e3137342e302f32342d3234203d3e203237373135.roa
Signing time:             Mon 20 Oct 2025 11:36:55 +0000
ROA not before:           Mon 20 Oct 2025 11:31:55 +0000
ROA not after:            Mon 19 Oct 2026 11:36:55 +0000
asID:                     27715
IP address blocks:        177.12.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl
                          rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:cf:b4:0d:be:ec:b2:00:62:67:05:fc:9f:8c:66:44:60:e9:12:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
        Validity
            Not Before: Oct 20 11:31:55 2025 GMT
            Not After : Oct 19 11:36:55 2026 GMT
        Subject: CN=26A3928E96CE18C09DC30987F8196C445DC14371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7b:98:2e:b8:41:0a:95:75:87:37:0b:64:f9:
                    9a:22:b4:18:a7:b4:a1:f0:bd:01:fe:71:4a:dd:58:
                    c2:50:86:22:51:61:2d:44:f2:b3:67:62:e3:08:fc:
                    61:2b:3a:4b:de:92:ab:d2:84:49:ce:3e:31:9f:6a:
                    a9:79:dc:85:52:b6:12:25:bd:63:1d:29:7e:81:a9:
                    65:e9:f4:77:a3:b5:95:0e:a9:f1:05:34:16:77:f7:
                    d9:69:bf:61:75:8f:84:c8:e8:cd:0c:cc:aa:d6:fa:
                    46:f7:3f:2c:f3:f1:fd:4b:c5:a2:2a:8c:52:bc:b8:
                    ce:14:0c:4c:79:33:9d:4d:14:1b:45:e7:13:90:81:
                    19:23:35:07:68:4b:59:89:16:fb:4e:5e:6e:e9:68:
                    0e:a0:95:88:52:11:1b:12:af:a4:bc:5c:b0:83:bd:
                    05:ea:a2:28:38:da:72:8e:af:8b:53:a0:41:17:e8:
                    97:d3:b3:6b:58:67:d3:75:96:68:0d:43:b1:48:b5:
                    23:59:9c:a5:00:6c:ec:8c:c7:6f:41:a7:76:ed:35:
                    16:67:5d:ae:31:3f:9b:02:ba:35:e5:7f:38:65:e1:
                    cb:e1:5c:a5:35:9b:e6:21:b6:1f:eb:60:8c:2a:8b:
                    76:85:0a:30:98:5c:b5:ef:a1:c9:33:97:a5:d6:8d:
                    94:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A3:92:8E:96:CE:18:C0:9D:C3:09:87:F8:19:6C:44:5D:C1:43:71
            X509v3 Authority Key Identifier:
                keyid:50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3137372e31322e3137342e302f32342d3234203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:18:6a:45:8c:75:89:bd:e7:f9:18:c8:06:ac:48:e4:1b:1a:
         20:24:de:b2:e6:ee:55:b7:50:d6:3a:74:b4:d8:16:90:64:93:
         9c:1d:37:69:1a:26:c8:01:a6:90:ee:bd:47:a6:02:4e:ef:de:
         4d:2b:71:64:16:49:e4:09:e6:4a:23:cf:eb:29:73:0b:30:d1:
         62:d7:2f:eb:a7:b9:1e:e5:b0:35:80:77:16:73:93:1e:21:80:
         25:a1:41:f8:99:b2:55:e7:b7:03:69:27:a9:cf:0f:d4:a5:40:
         62:aa:fa:0f:54:2c:14:d3:55:da:05:a2:51:7c:61:38:85:06:
         27:c0:e5:33:95:df:61:0d:3b:93:8a:67:46:57:28:7e:de:3d:
         a6:cf:bc:f1:1d:e1:4f:db:6f:0f:4b:2c:12:a6:06:d7:d5:74:
         c7:2d:a1:6d:19:57:86:f9:23:f4:17:52:82:4e:8b:19:6c:27:
         67:05:50:f5:37:89:f3:59:17:3a:64:a9:9b:ba:db:9b:01:f3:
         2b:15:ec:5f:ab:f2:a4:39:f4:08:4c:21:fe:06:62:5c:a9:a8:
         8d:d6:71:ea:c3:13:ee:80:39:94:d5:96:64:4f:81:f1:d2:ed:
         c4:c6:0d:03:4e:e9:a0:d0:47:cc:2a:48:ff:82:87:ba:e1:af:
         1c:7f:e6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:08:12 2025 by rpki-client