Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3137372e31322e3137302e302f32342d3234203d3e203237373135.roa
File:                     3137372e31322e3137302e302f32342d3234203d3e203237373135.roa (raw, json)
Hash identifier:          0oG89TxIqYqaappU3UfJ2LWRV25ZBJa/OIHzJR3DRmY=
Subject key identifier:   2B:EF:6E:4A:C4:F7:67:16:F7:8F:8B:4D:C9:BE:BB:97:57:40:6B:A5
Certificate issuer:       /CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
Certificate serial:       510AAA84DB13DF5151907A9202B231A00B7B0D33
Authority key identifier: 50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3137372e31322e3137302e302f32342d3234203d3e203237373135.roa
Signing time:             Mon 21 Sep 2026 12:31:02 +0000
ROA not before:           Mon 21 Sep 2026 12:26:02 +0000
ROA not after:            Mon 20 Sep 2027 12:31:02 +0000
asID:                     27715
IP address blocks:        177.12.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl
                          rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 21:23:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:0a:aa:84:db:13:df:51:51:90:7a:92:02:b2:31:a0:0b:7b:0d:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
        Validity
            Not Before: Sep 21 12:26:02 2026 GMT
            Not After : Sep 20 12:31:02 2027 GMT
        Subject: CN=2BEF6E4AC4F76716F78F8B4DC9BEBB9757406BA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:82:de:55:63:08:81:67:79:9a:b3:ef:33:cc:
                    c4:e8:54:7c:8f:16:e0:cf:d0:53:d9:52:4d:c8:5f:
                    60:88:1c:ed:70:a6:0a:07:76:34:9f:8b:ae:3d:89:
                    62:66:b6:06:93:69:76:91:16:7a:e3:33:aa:5f:6a:
                    6e:49:f4:20:58:a8:0b:15:fe:72:24:7d:18:e6:98:
                    7c:7c:e1:7b:8e:24:3c:a2:c8:ec:95:90:3c:5e:10:
                    d7:df:a7:b3:66:b4:4c:57:c1:2a:3a:40:91:4a:40:
                    29:c7:9f:0e:16:2b:f5:71:6f:20:b1:cb:ef:bf:fd:
                    3a:51:8c:68:46:ae:65:74:17:59:2c:4a:d4:15:9f:
                    a1:d7:1b:ae:18:6a:00:ac:f9:9e:24:3e:91:78:b1:
                    27:e3:e5:60:6c:7d:e5:2d:a7:54:d7:bc:4d:a5:8b:
                    07:60:83:40:53:1b:59:37:cf:71:a2:54:77:77:db:
                    7c:a2:02:b4:43:0e:b9:cd:17:a2:cd:2f:e9:0a:0d:
                    32:93:79:ec:3e:16:e6:80:38:6d:5d:c6:87:12:8a:
                    b4:6f:c7:5c:93:7c:00:1b:9d:fd:7e:7c:ca:81:a2:
                    e4:87:42:9d:5a:6a:1b:ce:25:28:02:41:04:5b:70:
                    7b:79:7b:be:c3:e4:b4:76:fa:d7:e3:c6:e4:29:fc:
                    9c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:EF:6E:4A:C4:F7:67:16:F7:8F:8B:4D:C9:BE:BB:97:57:40:6B:A5
            X509v3 Authority Key Identifier:
                keyid:50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3137372e31322e3137302e302f32342d3234203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:b9:cc:0d:5e:d6:bf:22:6e:8f:d9:9e:67:94:5a:16:fe:b2:
         c1:3c:04:2d:a3:18:70:7b:0c:b9:b0:0d:8e:b9:c0:27:7f:dc:
         54:d2:38:a3:ed:ec:ac:e5:42:07:b2:5d:10:30:9e:ec:30:2f:
         85:b4:2d:b5:af:03:f4:1d:a2:d6:ee:06:46:5b:24:0b:01:c9:
         ec:67:4b:4a:86:9d:0c:73:7b:64:97:4e:d7:7f:b2:9b:95:e7:
         f5:ae:02:1a:e1:64:04:1a:da:53:ee:ec:b7:fe:41:5b:09:98:
         e8:f9:5a:87:3a:19:e5:10:8d:92:65:74:d4:e7:f5:da:34:ab:
         8d:90:b9:db:08:bd:40:f2:53:99:86:f3:3e:01:70:2e:72:b7:
         dd:da:fb:59:21:59:63:6d:8a:c1:8c:dd:32:3b:a3:ad:a0:c2:
         70:21:0c:28:60:8d:eb:07:be:40:40:b8:75:de:52:65:3c:f3:
         82:7e:b7:8d:98:7e:d5:92:6d:27:5e:7a:c7:87:4e:e2:2c:c3:
         40:34:94:f7:9d:16:ae:77:99:47:54:13:41:9c:39:bf:c1:d6:
         6d:66:41:7b:a3:3e:5b:3b:7e:68:26:19:c1:e3:76:21:4b:95:
         a9:dc:cf:da:e8:1a:db:83:4f:65:db:7c:7a:2c:11:70:7c:c4:
         a2:28:e9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 08:40:06 2026 by rpki-client