Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3137372e3138352e3139382e302f32342d3234203d3e203237373135.roa
File:                     3137372e3138352e3139382e302f32342d3234203d3e203237373135.roa (raw, json)
Hash identifier:          Ih2ogxYeOBXt6kayXb7F6gwnv3vlO4skniqxDwbi4tE=
Subject key identifier:   26:D5:31:BE:EC:2C:5B:3C:41:28:CB:0C:3A:53:45:3D:43:29:EC:FA
Certificate issuer:       /CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
Certificate serial:       5D1F6A1EF711FAA7D7B0AFF9B7C2388D9CFC16C8
Authority key identifier: 50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3137372e3138352e3139382e302f32342d3234203d3e203237373135.roa
Signing time:             Mon 21 Sep 2026 12:30:55 +0000
ROA not before:           Mon 21 Sep 2026 12:25:55 +0000
ROA not after:            Mon 20 Sep 2027 12:30:55 +0000
asID:                     27715
IP address blocks:        177.185.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl
                          rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 04:29:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:1f:6a:1e:f7:11:fa:a7:d7:b0:af:f9:b7:c2:38:8d:9c:fc:16:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
        Validity
            Not Before: Sep 21 12:25:55 2026 GMT
            Not After : Sep 20 12:30:55 2027 GMT
        Subject: CN=26D531BEEC2C5B3C4128CB0C3A53453D4329ECFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:4d:6b:d9:4a:15:2c:fb:c6:1f:93:d0:11:9e:
                    37:42:98:7e:38:7e:11:c4:d6:b9:53:d5:e0:fa:46:
                    96:15:5b:da:c2:f6:30:b6:76:10:a3:c3:d1:7e:17:
                    8f:c1:86:88:89:56:b4:6c:01:8b:d0:fd:cf:29:e8:
                    1d:01:be:da:c0:81:bc:9a:b2:26:69:c7:9f:5f:aa:
                    f1:02:2a:9d:b1:97:88:79:79:71:9e:57:ef:98:a1:
                    f1:a2:b6:97:2d:4a:cb:c4:a1:18:10:8f:27:c3:78:
                    b3:ec:8c:70:93:2c:90:92:8f:97:81:2f:e2:a0:57:
                    83:49:e0:a9:c8:3d:97:e1:9e:15:ca:43:43:4e:76:
                    8d:16:b7:de:ef:1f:b7:37:0c:cf:8f:38:5b:d2:7f:
                    17:05:d9:d1:7d:d3:6a:2d:ff:67:e9:99:1b:05:92:
                    9f:16:e7:6a:64:02:1a:e3:90:48:55:bd:2d:d5:26:
                    be:3a:7c:c8:46:1d:22:26:5a:f7:3a:08:87:60:f4:
                    d0:09:dc:8d:32:66:06:d9:b4:25:d9:a6:6c:db:0b:
                    8e:2d:bf:93:37:a1:6d:1b:1a:6d:f3:b5:fa:14:0c:
                    9d:75:09:8e:fb:67:16:9d:43:8c:db:a2:96:51:ef:
                    aa:fe:a6:89:5d:32:4c:d5:8c:90:c6:9f:c4:09:d1:
                    4e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:D5:31:BE:EC:2C:5B:3C:41:28:CB:0C:3A:53:45:3D:43:29:EC:FA
            X509v3 Authority Key Identifier:
                keyid:50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3137372e3138352e3139382e302f32342d3234203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:83:92:48:79:0e:52:84:fc:1b:b3:4e:1c:47:ca:50:65:b3:
         1a:22:e0:5d:1f:84:6e:62:61:6b:a7:c6:ff:8b:06:2d:a6:d6:
         aa:bd:ab:9f:4a:01:4c:9e:1f:38:95:c1:c7:cf:11:64:fe:12:
         d8:d8:82:4c:a0:de:0b:58:45:b6:25:1c:0b:ff:f3:08:9a:93:
         f3:18:7b:a5:2a:a5:51:73:a5:6b:68:03:8e:5a:0e:8d:e3:3a:
         b0:46:ae:de:35:6f:bf:57:f2:eb:a9:cf:9f:b3:8b:a3:61:96:
         08:33:11:89:b7:62:20:ec:1f:a1:63:85:d5:1b:66:3e:33:8e:
         57:62:35:bc:15:43:38:d5:b2:8c:b0:59:15:27:55:9c:db:90:
         e4:cb:c8:1b:69:26:5f:05:ba:86:f8:0e:86:a8:79:9e:d2:56:
         ed:bc:b0:65:ae:13:ae:89:a4:73:f2:32:e4:7b:38:bf:05:78:
         39:be:28:5c:b8:d1:d7:dd:28:c6:43:58:d3:b6:13:0f:c5:85:
         e2:00:6a:18:8f:4b:b1:cf:b0:91:4f:d5:e6:fc:1a:57:36:3b:
         c3:ce:a6:fe:7d:e6:33:de:5f:d0:17:b2:12:4f:49:95:2e:9f:
         50:3b:9c:a0:1d:81:4d:8d:b3:17:d0:75:11:c5:23:80:f6:fe:
         d8:29:8c:90
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXR9qHvcR+qfXsK/5t8I4jZz8FsgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTAxQUQ2MUExQTVBNDlCMDhGOUQ4Q0ZFOTlEMjU4MjM1
NUE5RENFODAeFw0yNjA5MjExMjI1NTVaFw0yNzA5MjAxMjMwNTVaMDMxMTAvBgNV
BAMTKDI2RDUzMUJFRUMyQzVCM0M0MTI4Q0IwQzNBNTM0NTNENDMyOUVDRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgTWvZShUs+8Yfk9ARnjdCmH44
fhHE1rlT1eD6RpYVW9rC9jC2dhCjw9F+F4/BhoiJVrRsAYvQ/c8p6B0BvtrAgbya
siZpx59fqvECKp2xl4h5eXGeV++YofGitpctSsvEoRgQjyfDeLPsjHCTLJCSj5eB
L+KgV4NJ4KnIPZfhnhXKQ0NOdo0Wt97vH7c3DM+POFvSfxcF2dF902ot/2fpmRsF
kp8W52pkAhrjkEhVvS3VJr46fMhGHSImWvc6CIdg9NAJ3I0yZgbZtCXZpmzbC44t
v5M3oW0bGm3ztfoUDJ11CY77ZxadQ4zbopZR76r+poldMkzVjJDGn8QJ0U5BAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUJtUxvuwsWzxBKMsMOlNFPUMp7PowHwYDVR0j
BBgwFoAUUBrWGhpaSbCPnYz+mdJYI1Wp3OgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWo5eTlxQ2pMaGdZR3YxWmRoN2E2WXozZlRhbmR2VEJOclVteWhVMWRR
N1UvMC81MDFBRDYxQTFBNUE0OUIwOEY5RDhDRkU5OUQyNTgyMzU1QTlEQ0U4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUwMUFENjFBMUE1QTQ5QjA4
RjlEOENGRTk5RDI1ODIzNTVBOURDRTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VqOXk5cUNqTGhnWUd2MVpkaDdhNll6M2ZUYW5kdlRCTnJVbXloVTFkUTdVLzAv
MzEzNzM3MmUzMTM4MzUyZTMxMzkzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczNzMxMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxucYwDQYJKoZIhvcNAQELBQADggEBAE6Dkkh5
DlKE/BuzThxHylBlsxoi4F0fhG5iYWunxv+LBi2m1qq9q59KAUyeHziVwcfPEWT+
EtjYgkyg3gtYRbYlHAv/8wiak/MYe6UqpVFzpWtoA45aDo3jOrBGrt41b79X8uup
z5+zi6NhlggzEYm3YiDsH6FjhdUbZj4zjldiNbwVQzjVsoywWRUnVZzbkOTLyBtp
Jl8Fuob4DoaoeZ7SVu28sGWuE66JpHPyMuR7OL8FeDm+KFy40dfdKMZDWNO2Ew/F
heIAahiPS7HPsJFP1eb8Glc2O8POpv595jPeX9AXshJPSZUun1A7nKAdgU2NsxfQ
dRHFI4D2/tgpjJA=
-----END CERTIFICATE-----
Generated at Sun Nov 1 06:55:55 2026 by rpki-client