Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3137372e31322e3136322e302f32342d3234203d3e203237373135.roa
File:                     3137372e31322e3136322e302f32342d3234203d3e203237373135.roa (raw, json)
Hash identifier:          OzO6NtEPyQgRua07JEtWglcDNmoLJmZ0g56HLgOIKl0=
Subject key identifier:   C7:4E:0D:96:35:50:26:C3:F5:4B:D1:8B:DE:4D:DE:C1:DE:24:99:E3
Certificate issuer:       /CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
Certificate serial:       054BB6AEECBCECEB533F4EC87B770767050E7852
Authority key identifier: 50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3137372e31322e3136322e302f32342d3234203d3e203237373135.roa
Signing time:             Mon 21 Sep 2026 11:30:54 +0000
ROA not before:           Mon 21 Sep 2026 11:25:54 +0000
ROA not after:            Mon 20 Sep 2027 11:30:54 +0000
asID:                     27715
IP address blocks:        177.12.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl
                          rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 19:40:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:4b:b6:ae:ec:bc:ec:eb:53:3f:4e:c8:7b:77:07:67:05:0e:78:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
        Validity
            Not Before: Sep 21 11:25:54 2026 GMT
            Not After : Sep 20 11:30:54 2027 GMT
        Subject: CN=C74E0D96355026C3F54BD18BDE4DDEC1DE2499E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a9:64:e0:ff:9f:c2:42:cf:96:69:25:10:88:
                    c2:1f:0e:fb:1a:4e:00:3d:de:3b:78:ff:f3:98:73:
                    72:99:5c:6a:68:06:62:07:9f:bc:a9:ce:60:0f:58:
                    35:cb:9a:f6:bd:01:76:f1:e4:51:37:90:ff:54:98:
                    0c:01:7e:8b:63:d9:1e:b8:aa:4f:65:04:9e:16:0b:
                    12:16:87:b6:a9:c9:25:5e:4e:96:0e:88:a0:9f:eb:
                    d0:20:72:b6:04:be:65:b5:42:20:fa:b2:e8:ce:e3:
                    79:57:ac:4d:26:f0:02:b9:87:b8:65:4b:0d:eb:08:
                    24:93:5b:4d:f9:1a:77:6c:a9:e6:ee:0b:dc:f6:16:
                    f2:80:70:e8:49:fe:4e:a1:84:d8:60:32:bf:4b:e0:
                    85:15:17:08:ef:68:2e:1f:a6:36:2c:62:c9:bc:78:
                    b1:27:98:30:ef:22:5e:0b:aa:58:89:0c:18:bd:85:
                    d2:95:0f:ca:87:87:c2:38:73:36:a0:6a:a5:9c:08:
                    26:b6:d4:2b:2c:ce:34:50:9d:8b:6f:98:70:23:e2:
                    ad:58:f8:03:b3:13:ef:e0:3e:85:60:68:25:b7:7b:
                    e7:75:c2:4d:ff:da:8f:b5:12:0f:25:a1:de:95:82:
                    1d:03:89:0c:7b:7c:30:88:1d:38:fc:dc:98:48:a3:
                    cf:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:4E:0D:96:35:50:26:C3:F5:4B:D1:8B:DE:4D:DE:C1:DE:24:99:E3
            X509v3 Authority Key Identifier:
                keyid:50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3137372e31322e3136322e302f32342d3234203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:ae:4f:59:08:a8:29:41:27:33:c5:b7:d1:4e:f2:68:96:ac:
         b6:62:c6:f7:7d:6f:76:b9:95:69:ee:e3:cd:58:4d:8b:cf:8e:
         b3:50:2a:4f:32:fb:a1:ed:d8:2c:a6:6d:d2:d0:be:9f:1b:e4:
         b6:e2:54:85:b4:f3:af:f0:b3:92:8b:65:34:33:7b:34:a8:83:
         48:1c:7f:79:14:ee:be:ae:f4:95:96:b9:05:c8:d7:69:10:5e:
         ae:cc:42:eb:48:84:4e:4d:93:88:de:db:1b:66:ae:25:13:f5:
         36:2d:c2:7e:21:06:88:72:54:12:e5:4a:4a:ef:87:d6:49:70:
         c7:0a:85:29:8c:ff:39:f3:e1:2c:59:eb:0e:70:1a:ad:a7:d4:
         4e:a6:7f:0b:99:92:ee:e0:95:27:52:30:0c:b3:bb:35:0b:8c:
         5b:70:ff:4a:3d:17:96:92:9d:11:07:2e:15:57:2f:16:66:a3:
         e6:c0:04:80:9e:64:fa:10:68:27:8a:ac:73:d9:18:33:44:51:
         44:36:d6:6b:17:a9:58:b5:f5:3a:8b:c7:f0:4d:4f:c2:bf:16:
         d2:9b:e7:f6:4f:cc:b7:b3:fd:84:2d:49:33:83:0e:02:a2:0b:
         80:55:bc:6e:3b:aa:53:a7:c2:bb:c4:8f:2f:30:a7:1a:83:5a:
         ae:e4:91:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:59:25 2026 by rpki-client