Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3137372e3138352e3230372e302f32342d3234203d3e203237373135.roa
File:                     3137372e3138352e3230372e302f32342d3234203d3e203237373135.roa (raw, json)
Hash identifier:          YdWtePsp6CCi7o5SDohFaq5qi69OjUxfh7sSSYRwetc=
Subject key identifier:   8E:6A:E9:C0:EF:BB:70:DB:0F:8F:AD:5F:38:D1:B4:69:32:62:0B:64
Certificate issuer:       /CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
Certificate serial:       270A23D150161E96266C016A87BA5478B9FD95DD
Authority key identifier: 50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3137372e3138352e3230372e302f32342d3234203d3e203237373135.roa
Signing time:             Mon 20 Oct 2025 11:57:44 +0000
ROA not before:           Mon 20 Oct 2025 11:52:44 +0000
ROA not after:            Mon 19 Oct 2026 11:57:44 +0000
asID:                     27715
IP address blocks:        177.185.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl
                          rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:0a:23:d1:50:16:1e:96:26:6c:01:6a:87:ba:54:78:b9:fd:95:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
        Validity
            Not Before: Oct 20 11:52:44 2025 GMT
            Not After : Oct 19 11:57:44 2026 GMT
        Subject: CN=8E6AE9C0EFBB70DB0F8FAD5F38D1B46932620B64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:05:05:80:2f:1a:bb:94:04:4f:b8:f2:1c:d5:
                    19:f3:d8:bb:a1:41:05:65:47:7d:cd:15:db:f0:d0:
                    75:aa:58:be:2d:f5:e7:c8:e1:bb:34:4e:69:45:64:
                    2a:eb:f4:dd:d7:b9:a8:c0:0a:19:89:1f:c9:79:e8:
                    f9:cf:04:4f:61:c7:7e:bf:0f:ea:86:f6:13:7b:e1:
                    5f:31:1e:ef:5c:87:44:a5:32:df:ab:80:47:9a:1a:
                    00:d8:ae:66:ae:58:6b:55:b7:8e:b4:c8:59:76:8a:
                    cd:cf:ce:20:92:7c:de:01:b6:25:2a:16:2d:27:b0:
                    c7:f6:18:63:21:47:d7:b2:ca:47:11:92:f3:02:79:
                    dd:b2:37:4c:2d:4b:77:ea:d2:67:70:ce:c1:cc:96:
                    fe:2d:d1:53:82:26:96:32:7d:86:a0:50:e1:2f:51:
                    49:08:4f:6a:77:9d:d1:f2:94:31:9a:2e:ae:fd:1b:
                    ef:e9:9f:5c:4f:0e:37:40:b8:0d:7d:e2:63:47:d0:
                    2f:8f:b3:4f:86:f7:7e:2c:24:98:ac:ec:c5:62:aa:
                    2c:bf:a5:9c:48:53:b5:80:e3:27:d0:db:20:f9:b1:
                    04:c3:46:e9:0c:a7:3c:75:5c:fa:55:ae:12:b7:08:
                    5b:f7:ff:62:37:4e:36:8c:a9:8a:5f:9c:85:3f:59:
                    c5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:6A:E9:C0:EF:BB:70:DB:0F:8F:AD:5F:38:D1:B4:69:32:62:0B:64
            X509v3 Authority Key Identifier:
                keyid:50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3137372e3138352e3230372e302f32342d3234203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:d8:47:29:aa:77:12:e6:ec:a6:bc:c1:9b:1c:85:59:ed:02:
         cb:82:52:8a:ba:0e:b1:8b:7f:de:da:6a:c1:4a:29:e4:0c:69:
         02:5d:e7:d5:29:4a:13:de:d0:fc:c1:b0:2a:15:a0:47:73:75:
         ac:24:dd:0a:a9:42:fb:7e:94:83:61:ae:53:df:e2:e8:eb:82:
         ed:c9:9b:81:2d:15:39:e6:40:62:32:c0:c4:97:57:51:20:d6:
         83:4d:54:66:e0:42:d8:39:74:0d:9a:67:7b:44:9a:af:75:8b:
         5b:71:25:56:02:d4:cd:7f:f3:1d:25:74:f2:c8:8b:2f:82:bd:
         8a:3d:97:80:25:d7:a9:ab:86:5a:8d:1f:e8:a7:91:f3:50:52:
         52:43:99:46:32:a4:b0:f6:7f:4e:b8:71:1f:dd:5f:e5:d2:b1:
         81:43:27:06:2a:22:8d:00:c9:28:28:b5:72:cd:a6:37:d6:90:
         98:b1:b7:75:af:36:9c:84:0e:dc:37:30:ed:19:a0:d6:25:9c:
         f9:23:43:f4:10:e4:b3:e2:48:9a:41:d7:9b:d8:fd:51:8a:b2:
         43:bb:a6:eb:10:c7:dd:de:ea:c2:e7:8e:98:e5:cd:91:08:cd:
         8f:fa:9e:67:ae:c8:47:74:1f:85:5f:71:1f:76:b0:28:ad:05:
         73:24:17:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:12:48 2025 by rpki-client