Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3137372e3138352e3139392e302f32342d3234203d3e203237373135.roa
File:                     3137372e3138352e3139392e302f32342d3234203d3e203237373135.roa (raw, json)
Hash identifier:          3w+XDRVZSBwnRgscG2lYMtkZNWu9nOFdko4RzSoFeeo=
Subject key identifier:   F9:00:1F:D2:56:10:D5:6B:A1:3A:0E:13:6D:F6:2F:93:83:F6:01:FF
Certificate issuer:       /CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
Certificate serial:       18C5E9F6B994D53877D037B49FE3B362C6BBF6D5
Authority key identifier: 50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3137372e3138352e3139392e302f32342d3234203d3e203237373135.roa
Signing time:             Mon 20 Oct 2025 11:54:59 +0000
ROA not before:           Mon 20 Oct 2025 11:49:59 +0000
ROA not after:            Mon 19 Oct 2026 11:54:59 +0000
asID:                     27715
IP address blocks:        177.185.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl
                          rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:c5:e9:f6:b9:94:d5:38:77:d0:37:b4:9f:e3:b3:62:c6:bb:f6:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
        Validity
            Not Before: Oct 20 11:49:59 2025 GMT
            Not After : Oct 19 11:54:59 2026 GMT
        Subject: CN=F9001FD25610D56BA13A0E136DF62F9383F601FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:dd:67:2b:fd:8e:c1:29:05:d1:8f:66:66:ff:
                    6c:ca:ff:0a:88:66:c1:43:77:63:ce:ea:b6:f1:6e:
                    da:24:09:04:07:69:3e:9f:ae:68:f3:ad:32:00:31:
                    56:f8:f9:08:01:51:48:5a:5c:2f:e7:90:a6:cf:b8:
                    76:87:b0:ad:97:29:73:c9:f8:fd:40:91:a2:ff:c3:
                    68:48:1b:d3:ac:78:1b:88:a2:62:69:66:87:0c:3b:
                    d9:dc:0d:54:da:6e:dc:ee:8a:3b:3a:91:b2:60:25:
                    0d:95:c7:53:0d:dd:ea:e3:ca:17:25:93:17:8f:28:
                    3c:71:24:53:9a:11:77:80:71:20:44:e1:d6:90:3d:
                    a9:de:38:2f:12:c9:ae:2e:2d:1a:72:3e:12:fa:32:
                    74:b0:02:63:4c:24:8e:8f:2d:1e:76:a6:cc:61:ef:
                    b0:e7:38:17:5c:84:f1:4f:3e:47:d1:fa:7e:ea:24:
                    75:5c:9a:5e:77:a0:e6:72:ea:09:9a:5a:35:50:4c:
                    fa:ef:1c:04:08:fd:74:6b:37:d5:fd:29:2e:28:88:
                    48:39:fa:07:8e:12:a5:70:1e:e8:55:b7:a3:76:36:
                    74:10:05:a4:f8:41:6d:2b:3a:1d:d8:5e:64:62:1c:
                    40:bb:8d:6c:ef:fb:6f:e5:d6:5f:a8:0e:19:02:92:
                    25:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:00:1F:D2:56:10:D5:6B:A1:3A:0E:13:6D:F6:2F:93:83:F6:01:FF
            X509v3 Authority Key Identifier:
                keyid:50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3137372e3138352e3139392e302f32342d3234203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:da:b6:55:bb:14:f1:ac:a0:22:91:0b:60:26:7e:21:c7:f8:
         b0:4c:41:bf:14:16:4d:e9:4e:09:10:16:5d:69:d0:0e:dc:90:
         63:74:06:ef:53:ac:9f:fd:7d:84:00:f4:a9:20:49:2a:51:ff:
         9d:84:be:6d:43:aa:5e:8b:bf:fe:95:ac:dd:d3:63:a4:d4:a5:
         12:53:dd:dc:41:45:bf:46:aa:47:00:c4:a6:99:fd:fb:29:da:
         e3:9c:29:79:ce:79:bd:eb:34:22:40:71:b4:35:57:f4:fa:40:
         50:75:a4:dd:9c:93:f8:76:b4:5f:39:14:a0:46:35:69:2e:3d:
         c9:54:f9:bd:28:47:a4:0e:88:a7:9b:04:9c:f2:7d:bd:f0:8a:
         87:e3:f1:5b:2e:57:71:3e:73:9c:c9:88:8f:51:cf:a1:11:d2:
         2a:11:04:15:7d:bd:01:18:4d:03:5c:f4:a2:73:8b:a1:23:d0:
         0e:90:f4:bd:bb:cc:e1:d4:00:f5:50:9d:fd:73:fd:0e:4b:9a:
         c1:cb:9c:3b:a7:0c:e8:4a:63:0e:51:72:3c:61:fe:14:7b:b2:
         33:8e:77:e0:2a:a1:23:b4:3b:58:79:dc:a8:f1:7c:c4:3a:69:
         98:f1:93:b7:89:80:5f:57:17:e2:ac:5a:b8:9c:1c:08:a2:9f:
         6c:04:9a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:12:50 2025 by rpki-client