Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3137372e3138352e3230322e302f32342d3234203d3e203237373135.roa
File:                     3137372e3138352e3230322e302f32342d3234203d3e203237373135.roa (raw, json)
Hash identifier:          aA0QUuzzWb9vaNhSauASVrC9TG2uWn+oOg+e7rQYuBo=
Subject key identifier:   B8:4A:A7:0F:6F:F6:EB:E1:E0:0A:F4:A2:7B:0D:D4:B0:90:35:E1:B3
Certificate issuer:       /CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
Certificate serial:       41E2CEEA45C31C2674AA774DDD4A364B565E2D31
Authority key identifier: 50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3137372e3138352e3230322e302f32342d3234203d3e203237373135.roa
Signing time:             Mon 20 Oct 2025 11:56:16 +0000
ROA not before:           Mon 20 Oct 2025 11:51:16 +0000
ROA not after:            Mon 19 Oct 2026 11:56:16 +0000
asID:                     27715
IP address blocks:        177.185.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl
                          rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:e2:ce:ea:45:c3:1c:26:74:aa:77:4d:dd:4a:36:4b:56:5e:2d:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
        Validity
            Not Before: Oct 20 11:51:16 2025 GMT
            Not After : Oct 19 11:56:16 2026 GMT
        Subject: CN=B84AA70F6FF6EBE1E00AF4A27B0DD4B09035E1B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e4:47:25:c7:7f:25:17:d6:6a:fe:53:90:f3:
                    3c:66:a9:74:be:7e:9c:a8:f8:21:40:28:70:cf:93:
                    c4:0f:08:5f:c5:50:fd:3e:7e:b4:7f:07:d8:85:f4:
                    46:46:2e:74:49:75:e4:cd:ab:27:75:09:59:b6:c1:
                    e4:e0:d4:ac:7b:28:f2:23:d6:eb:47:d9:04:10:fb:
                    f8:bc:df:af:cc:38:0d:45:0a:af:3d:3d:11:a8:47:
                    27:19:b8:0a:67:d2:9e:21:cc:db:21:69:31:15:38:
                    db:5d:01:ac:63:99:9a:05:7d:59:a2:d4:3d:38:a7:
                    8e:67:b6:72:40:fc:23:08:e0:57:93:77:f2:3c:84:
                    5c:ae:97:e2:8b:92:bc:69:79:a7:a7:5f:5c:5d:b1:
                    46:f0:dd:a4:c2:3e:5a:52:ed:d1:00:ea:a2:96:1c:
                    12:f3:6a:1f:3b:6a:c2:c0:9c:08:23:c1:21:85:c4:
                    1d:1b:91:23:f8:f0:5f:5b:f7:20:7b:81:c0:17:26:
                    78:6e:b5:4d:cb:d4:40:e2:e4:29:0d:0c:29:e9:2f:
                    20:bd:fc:92:88:f5:64:e8:23:7e:17:60:9d:02:9c:
                    e7:4c:c8:01:05:0b:fb:f7:5a:89:80:e3:59:11:2b:
                    36:54:cf:2a:1e:08:66:0c:ba:f7:a4:90:cf:2a:da:
                    2a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:4A:A7:0F:6F:F6:EB:E1:E0:0A:F4:A2:7B:0D:D4:B0:90:35:E1:B3
            X509v3 Authority Key Identifier:
                keyid:50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3137372e3138352e3230322e302f32342d3234203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:6c:e9:57:54:03:3e:7a:07:56:67:81:9a:8d:46:4e:8d:8f:
         23:57:b6:fb:5f:f1:c1:6e:05:8e:15:01:7c:6a:33:a2:ad:3a:
         be:5e:54:de:e7:94:43:e4:69:df:fa:95:97:84:f1:d9:1e:6f:
         cb:6a:2e:01:9f:07:17:50:8b:60:c5:01:63:e4:bf:75:56:58:
         fa:63:e8:60:11:35:05:27:25:33:54:5b:f7:b9:0b:1a:89:82:
         c8:f7:12:d5:01:16:8c:d9:7b:44:a4:4c:02:1c:64:ee:22:01:
         7a:d3:ca:36:df:c9:a1:69:c2:0a:2e:b3:cb:d9:f2:70:74:13:
         e5:80:36:49:72:6e:7a:3e:f9:91:83:3e:40:b4:ec:02:7c:6d:
         3c:28:38:84:0b:82:de:5a:77:12:65:4a:f9:18:5d:4d:bf:1f:
         84:67:67:72:0d:27:ed:45:8b:de:c0:25:1f:73:7c:91:2a:5b:
         be:11:4b:10:c1:3a:74:2e:a5:3d:df:6c:32:c2:90:82:d3:36:
         58:1b:68:85:37:6e:d5:6d:9e:79:bc:6f:98:8d:a2:2d:83:16:
         f4:a6:22:71:7d:4c:a5:0a:45:1e:83:12:d5:50:9f:e5:01:41:
         20:10:c5:b8:ea:08:f6:53:13:cd:92:86:dd:96:57:20:41:13:
         e5:a1:d3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:09:20 2025 by rpki-client