Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3137372e31322e3136372e302f32342d3234203d3e203237373135.roa
File:                     3137372e31322e3136372e302f32342d3234203d3e203237373135.roa (raw, json)
Hash identifier:          9lDTN9IFYezm5gvex3bd5v+KVCF7qW+6Mq+y/MQ7Uj0=
Subject key identifier:   5E:46:23:31:1C:BC:46:54:7F:29:D9:29:19:B6:4A:79:EF:A4:80:0D
Certificate issuer:       /CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
Certificate serial:       7186F3DE78B4E718388D82FAC6A0CC257534D825
Authority key identifier: 50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3137372e31322e3136372e302f32342d3234203d3e203237373135.roa
Signing time:             Mon 21 Sep 2026 12:30:58 +0000
ROA not before:           Mon 21 Sep 2026 12:25:58 +0000
ROA not after:            Mon 20 Sep 2027 12:30:58 +0000
asID:                     27715
IP address blocks:        177.12.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl
                          rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 19:40:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:86:f3:de:78:b4:e7:18:38:8d:82:fa:c6:a0:cc:25:75:34:d8:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
        Validity
            Not Before: Sep 21 12:25:58 2026 GMT
            Not After : Sep 20 12:30:58 2027 GMT
        Subject: CN=5E4623311CBC46547F29D92919B64A79EFA4800D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:92:08:ce:bf:0e:dc:42:4c:2f:f5:e8:66:a7:
                    80:08:51:f0:01:d2:16:bf:5b:86:f5:9f:77:2d:54:
                    dd:8a:34:57:83:2a:bc:2c:2c:4f:32:74:4b:6c:8e:
                    80:30:05:e9:14:d6:b0:80:96:36:93:85:d1:3e:32:
                    e0:a3:69:d4:e3:92:34:f0:3c:b1:a9:49:e7:90:fc:
                    88:0b:78:6d:b9:b0:7d:41:69:ad:0b:32:ed:f0:07:
                    4d:63:20:4f:f5:96:d7:7c:f1:7e:f0:a3:21:c3:9e:
                    c1:db:11:90:80:ac:a7:01:92:b3:c9:14:f2:1c:77:
                    12:03:6e:f9:04:e4:5c:23:7d:24:3b:a0:ed:7b:e5:
                    d6:8c:1c:ff:45:41:68:fd:21:6c:55:00:ea:d8:7a:
                    ce:0e:79:5f:b1:89:02:78:95:ea:00:87:df:93:1a:
                    69:c0:3a:fd:c7:08:4a:37:dc:74:2f:d8:b5:e8:76:
                    60:89:d4:06:81:60:fc:80:6e:09:94:0d:a5:1f:8e:
                    d6:d2:1b:05:09:d8:d5:63:cf:6e:26:89:2e:84:d9:
                    51:3e:8c:ad:6b:e4:75:fe:d0:b8:a7:42:47:18:2f:
                    19:30:3b:78:e8:ed:c3:ed:5a:f1:31:86:ed:02:9e:
                    d7:04:39:fa:b1:60:49:43:a2:bf:ba:17:61:2a:98:
                    1a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:46:23:31:1C:BC:46:54:7F:29:D9:29:19:B6:4A:79:EF:A4:80:0D
            X509v3 Authority Key Identifier:
                keyid:50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3137372e31322e3136372e302f32342d3234203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:40:92:41:dd:8a:40:90:e9:7a:4d:d9:25:88:a3:81:85:86:
         f8:fb:b4:a6:c0:ab:87:65:87:09:66:60:13:f5:82:17:dd:47:
         cc:aa:7b:a9:1c:04:3a:01:10:57:58:41:fc:c9:0a:62:b6:f8:
         40:8f:03:4b:9c:b3:6f:73:ac:74:44:01:b7:34:c3:e8:33:47:
         ba:70:ea:c6:85:67:49:55:44:83:47:1d:b8:4f:9f:3e:48:e5:
         5e:87:3f:35:f6:75:77:b3:13:19:e8:f5:73:65:9e:72:a8:3b:
         46:6d:ad:27:85:f1:a3:c7:b8:39:fd:d8:3b:30:91:e6:9d:87:
         47:a5:fe:66:97:64:ec:7c:0c:06:ae:f9:fc:dd:12:a6:47:23:
         b4:69:dc:f8:39:2d:c8:ee:77:d5:f9:51:f5:ce:4e:d7:ec:7d:
         1d:d4:fc:fd:e3:77:e3:99:05:15:c4:5c:ab:1d:2c:9c:ff:62:
         71:cc:a9:98:4c:3b:8d:8e:b8:71:bd:5e:fa:99:64:12:94:a0:
         07:d1:94:35:ce:ec:bf:0b:10:89:ea:75:dd:2e:b7:1e:e3:c2:
         9c:82:a6:04:17:2d:f3:9b:41:8b:2d:f6:02:fa:5a:ea:ed:c7:
         60:ba:b4:60:41:e1:f9:cd:00:d7:ab:dd:fd:b0:0e:d3:35:af:
         57:9b:be:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:59:29 2026 by rpki-client