Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3137372e31322e3137352e302f32342d3234203d3e203237373135.roa
File:                     3137372e31322e3137352e302f32342d3234203d3e203237373135.roa (raw, json)
Hash identifier:          7WIcXSji7BTRcuZyUJ+07BBfq4PWj/BEEvomZQTq490=
Subject key identifier:   7C:E7:75:10:CC:16:F1:C9:C8:79:DC:CE:45:92:F0:4C:E9:0B:39:15
Certificate issuer:       /CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
Certificate serial:       7AB673F9CD80E44A177AAEA93BE04E5812925CBC
Authority key identifier: 50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3137372e31322e3137352e302f32342d3234203d3e203237373135.roa
Signing time:             Mon 20 Oct 2025 11:38:37 +0000
ROA not before:           Mon 20 Oct 2025 11:33:37 +0000
ROA not after:            Mon 19 Oct 2026 11:38:37 +0000
asID:                     27715
IP address blocks:        177.12.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl
                          rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:b6:73:f9:cd:80:e4:4a:17:7a:ae:a9:3b:e0:4e:58:12:92:5c:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
        Validity
            Not Before: Oct 20 11:33:37 2025 GMT
            Not After : Oct 19 11:38:37 2026 GMT
        Subject: CN=7CE77510CC16F1C9C879DCCE4592F04CE90B3915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:22:56:93:17:36:ee:ad:1b:ce:c3:06:74:78:
                    09:83:5b:37:f5:36:b2:83:0f:ce:2a:8e:85:6b:18:
                    03:db:04:e5:d3:0a:22:8c:cb:1e:dd:cb:3f:6e:5d:
                    65:6d:29:7f:27:05:ab:a0:17:90:a7:e8:3b:78:6e:
                    b6:33:94:de:52:cf:69:5a:2e:71:9b:1a:a5:45:0a:
                    fd:03:a4:8d:bb:e4:56:8e:60:ce:77:2b:cd:47:02:
                    68:17:cf:a5:59:cf:84:32:10:b1:48:52:fc:2e:94:
                    89:cc:75:09:b4:f3:79:1d:ea:db:b4:76:a6:d2:a0:
                    a3:47:9d:e7:13:11:2d:2a:32:92:6c:20:bb:c1:39:
                    f4:02:ee:73:9a:58:8c:e8:1c:f7:dd:02:20:8a:b5:
                    3e:f2:30:8d:d0:3b:ac:5b:7a:cb:6b:23:c6:76:1d:
                    f8:59:b4:39:3b:a9:d2:a6:00:6d:d6:60:17:55:70:
                    2f:a5:19:a6:61:3a:2c:57:f4:94:74:b3:3e:a1:e8:
                    67:d4:47:4f:69:92:a6:c8:19:06:e5:a8:9c:c6:1b:
                    00:25:15:fc:14:07:46:fa:bf:9b:c2:e3:2e:38:b0:
                    2f:54:64:e2:eb:fe:1c:f3:9e:89:6f:9b:b8:5b:56:
                    24:63:e3:5f:9a:6d:82:32:ae:67:ca:fe:7d:45:8c:
                    e1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E7:75:10:CC:16:F1:C9:C8:79:DC:CE:45:92:F0:4C:E9:0B:39:15
            X509v3 Authority Key Identifier:
                keyid:50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3137372e31322e3137352e302f32342d3234203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:7a:43:a4:86:f9:27:be:59:2f:a9:75:d1:7e:74:6e:74:9a:
         24:28:7b:31:ae:29:1d:d1:b6:ae:65:d0:a1:ac:b6:8c:50:5c:
         06:7a:d2:fc:6d:48:aa:42:8a:79:3f:02:63:74:86:97:9c:a3:
         87:25:a2:e7:80:c0:1b:84:2c:fb:81:cc:67:fd:d6:12:98:4e:
         b9:36:18:32:9b:be:9e:cd:c8:c8:1c:ce:c1:b5:a8:14:33:25:
         5f:11:90:fe:4b:ec:2b:62:a8:45:4e:f4:1d:df:e2:34:af:ac:
         74:52:29:d3:40:d1:91:2c:d9:2d:0b:ee:2a:85:92:46:70:8e:
         9c:db:64:5e:49:4b:8a:45:65:bc:5f:49:54:83:ea:38:74:00:
         65:30:05:d7:1c:3f:eb:4c:5c:17:a9:21:cc:c7:56:8f:4c:89:
         4b:eb:61:d1:28:18:bb:95:d7:c8:8f:62:01:8c:60:a0:ca:42:
         40:51:ed:bc:bf:63:bd:ef:ed:96:20:1c:9f:aa:f2:46:e4:c3:
         67:c5:9c:cb:2c:d5:f9:e2:5d:95:80:41:29:06:fb:2f:0c:7c:
         88:51:3a:6b:f4:1c:05:97:f0:02:27:44:62:46:54:a3:c5:a4:
         f9:99:4c:b2:62:76:99:88:d2:16:1c:b5:8d:fc:95:7a:ac:9f:
         7d:cf:9b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:08:09 2025 by rpki-client