Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3137372e3138352e3230312e302f32342d3234203d3e203237373135.roa
File:                     3137372e3138352e3230312e302f32342d3234203d3e203237373135.roa (raw, json)
Hash identifier:          efhlNpIGvh8nUgmdIGZDGHpnWjZTmS026ophDurVFAE=
Subject key identifier:   30:E8:5C:13:BC:66:9F:92:CD:B0:58:34:16:96:E6:8D:20:9E:09:E5
Certificate issuer:       /CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
Certificate serial:       60EED914E952C23146C12B0F8EF8450F13E8E06D
Authority key identifier: 50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3137372e3138352e3230312e302f32342d3234203d3e203237373135.roa
Signing time:             Mon 20 Oct 2025 11:55:57 +0000
ROA not before:           Mon 20 Oct 2025 11:50:57 +0000
ROA not after:            Mon 19 Oct 2026 11:55:57 +0000
asID:                     27715
IP address blocks:        177.185.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl
                          rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:ee:d9:14:e9:52:c2:31:46:c1:2b:0f:8e:f8:45:0f:13:e8:e0:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
        Validity
            Not Before: Oct 20 11:50:57 2025 GMT
            Not After : Oct 19 11:55:57 2026 GMT
        Subject: CN=30E85C13BC669F92CDB058341696E68D209E09E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:35:64:50:75:00:97:4a:f7:73:10:f7:85:ba:
                    42:20:b4:11:62:b3:c9:3c:96:00:70:9b:24:cb:b2:
                    5d:bc:cb:15:62:cb:cd:42:d1:93:d6:7a:1e:95:38:
                    09:d9:6d:61:d9:ad:ef:15:91:af:bd:c6:cc:4f:64:
                    39:c7:63:21:b3:c6:b1:92:6a:b6:b4:b4:9c:f7:e7:
                    b6:4d:32:a4:63:fb:17:7b:31:70:bd:88:92:2d:66:
                    48:08:3a:a6:dc:8d:b8:0a:2b:92:e1:9d:33:bc:ab:
                    a5:e9:5f:00:b6:7a:a7:28:43:af:f9:5d:2c:c4:c5:
                    45:83:14:43:3b:7c:c6:2c:d6:38:1b:b4:1f:2d:af:
                    eb:9d:0d:b8:0c:ba:c2:fb:80:26:e8:c6:e4:84:6d:
                    e4:77:fe:30:40:ff:6d:67:c2:e9:80:19:8c:3b:0e:
                    3a:72:60:37:6a:40:b6:13:e9:32:f1:45:82:08:cb:
                    f3:55:07:0e:b0:ac:91:c3:bf:90:57:24:19:63:c7:
                    9e:07:4b:76:7c:51:41:e3:1c:ad:64:39:25:88:4d:
                    16:12:23:86:7a:01:54:b7:59:39:8f:18:3a:9b:cd:
                    36:57:0d:35:61:cd:74:07:0b:0a:34:d6:62:a4:ab:
                    ea:d4:5b:36:41:1c:66:7b:74:e7:3f:2b:f3:4e:bc:
                    00:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:E8:5C:13:BC:66:9F:92:CD:B0:58:34:16:96:E6:8D:20:9E:09:E5
            X509v3 Authority Key Identifier:
                keyid:50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3137372e3138352e3230312e302f32342d3234203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:68:84:86:e9:ac:65:8f:6c:12:34:82:3c:06:cc:59:79:50:
         1a:8d:b0:7b:1e:68:1b:d6:5c:a1:1d:51:fe:34:42:97:3f:e6:
         5e:30:31:fa:d0:c8:81:3c:88:f5:65:61:0b:af:79:98:06:2e:
         6f:47:ca:65:a6:99:96:3b:b8:6d:55:d8:c9:f7:6e:23:cf:0c:
         d5:19:e4:4a:16:d0:a4:9c:82:86:9b:42:47:44:ee:f0:d3:b1:
         b5:82:9a:c2:c5:1e:c4:6a:42:c6:7d:b8:22:f1:54:23:56:c8:
         2a:dd:26:bd:14:8a:3e:3f:91:81:2d:5b:e5:66:6a:ec:d4:20:
         92:e3:7a:b5:24:0e:40:ff:33:c9:ab:b8:e4:6b:fa:d1:62:5f:
         f2:c1:f8:19:15:7f:5f:b0:1c:12:48:9f:e7:7a:1b:a0:91:0f:
         55:c6:92:8e:29:90:11:23:3d:af:79:86:9f:91:93:d9:04:67:
         91:be:b3:8a:34:a9:66:44:a2:1d:70:17:3a:13:1f:a4:65:c2:
         e5:03:e1:77:37:c5:a4:e1:c2:dc:55:3f:62:de:9d:cd:f0:67:
         f8:e2:d6:53:b3:7d:d3:8d:8b:9f:84:53:52:fd:62:66:dd:94:
         dd:02:31:d7:78:55:b0:3a:f5:aa:b9:36:9e:1d:03:13:11:0d:
         15:11:6b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:09:21 2025 by rpki-client