Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3137372e3138352e3139342e302f32342d3234203d3e203237373135.roa
File:                     3137372e3138352e3139342e302f32342d3234203d3e203237373135.roa (raw, json)
Hash identifier:          9akoPfLvrla3/ezzhgzfZgBQ7cyXkkFoO6xaFhsZzho=
Subject key identifier:   1A:1F:BA:13:60:88:7A:27:C3:11:3E:1D:67:E0:A2:78:DE:88:09:A6
Certificate issuer:       /CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
Certificate serial:       168D2F6F69267AF43EA4BF97C056E1AC52D380F9
Authority key identifier: 50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3137372e3138352e3139342e302f32342d3234203d3e203237373135.roa
Signing time:             Mon 20 Oct 2025 11:46:24 +0000
ROA not before:           Mon 20 Oct 2025 11:41:24 +0000
ROA not after:            Mon 19 Oct 2026 11:46:24 +0000
asID:                     27715
IP address blocks:        177.185.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl
                          rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:8d:2f:6f:69:26:7a:f4:3e:a4:bf:97:c0:56:e1:ac:52:d3:80:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
        Validity
            Not Before: Oct 20 11:41:24 2025 GMT
            Not After : Oct 19 11:46:24 2026 GMT
        Subject: CN=1A1FBA1360887A27C3113E1D67E0A278DE8809A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:11:c5:65:49:34:86:bf:bc:d2:c3:59:45:89:
                    19:2a:c3:ee:50:a8:66:ce:5a:64:0a:b4:e6:cd:87:
                    2a:69:09:56:bb:2e:e8:97:8f:c3:08:86:43:47:07:
                    01:a2:f4:b8:b6:03:1b:d5:a7:41:c3:9f:ce:72:b5:
                    70:12:16:e0:e3:a3:cb:10:e8:ed:a7:43:e9:6d:55:
                    d8:f6:9b:47:8f:13:6b:48:97:e1:7a:aa:22:11:c6:
                    f0:95:ae:f0:d8:b0:ba:be:9c:88:94:aa:37:2d:69:
                    8a:1d:0b:44:71:e0:61:09:45:e7:ff:f9:d0:0c:6e:
                    1b:5a:5c:1b:40:57:06:c5:83:68:38:08:9b:6c:c9:
                    bf:4f:a8:17:cd:3a:2e:55:cc:8e:14:af:1f:3f:99:
                    15:ee:b9:9d:c9:6d:b3:e2:4c:da:fc:a8:49:bb:14:
                    db:96:ba:05:04:99:c1:0e:f2:5b:f0:19:1f:95:5e:
                    6b:be:8c:f8:fa:1b:dc:b1:01:44:1e:d7:96:60:18:
                    41:ce:e1:d3:07:84:ca:48:d1:3b:5c:e6:4b:b1:35:
                    f1:57:7d:08:bd:32:f0:25:77:bb:bf:80:e7:78:ee:
                    9d:3f:83:da:8d:a3:5c:36:9d:02:c2:c1:da:24:b9:
                    1b:6e:e3:96:24:5f:33:8b:fc:1f:69:8e:f8:cb:a5:
                    84:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:1F:BA:13:60:88:7A:27:C3:11:3E:1D:67:E0:A2:78:DE:88:09:A6
            X509v3 Authority Key Identifier:
                keyid:50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3137372e3138352e3139342e302f32342d3234203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:71:4d:0b:5a:4f:8e:a2:a7:fd:43:f3:75:5f:8f:7f:c7:a7:
         7d:7c:33:7f:d4:ef:ba:08:5f:8a:53:c8:2d:b3:4e:6f:cd:46:
         5e:f1:d1:e0:78:b6:89:aa:a2:29:09:c5:31:c0:af:8b:8c:62:
         f6:ce:11:02:70:6e:d0:96:69:e4:53:6e:e5:c6:15:eb:1e:6d:
         c8:09:da:ad:30:a3:ce:1c:9d:00:5d:cf:af:41:1d:39:16:ca:
         10:18:2a:cd:65:fb:f3:4a:f5:3a:3a:ff:06:d5:64:5a:69:62:
         e5:90:e3:a6:ba:53:a7:21:87:5c:1b:c4:b1:1a:39:76:eb:97:
         ed:4e:f8:72:a2:48:3b:5a:b7:d4:3c:38:84:e6:f5:b1:5d:48:
         f9:8a:db:4b:16:a4:39:b5:2b:7b:c8:fc:d2:37:76:f3:c3:fc:
         93:7a:13:fa:85:7f:26:ce:9e:03:7c:7b:ab:77:43:85:29:39:
         fb:f6:ca:af:27:8e:8e:30:ba:c0:e4:4c:63:f5:66:cb:36:c3:
         a4:0b:ee:30:b4:48:df:14:0c:e8:dc:0b:4c:3b:2b:fa:e9:09:
         44:8a:55:d5:f6:9c:cc:ae:22:06:db:1d:3f:14:b1:43:49:c3:
         70:28:ea:37:01:c0:e3:88:0c:a7:f5:d4:ed:d8:64:c7:b1:3b:
         2f:03:20:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:09:28 2025 by rpki-client