Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3137372e3138342e3139362e302f32322d3232203d3e203238313635.roa
File:                     3137372e3138342e3139362e302f32322d3232203d3e203238313635.roa (raw, json)
Hash identifier:          3HgM6Y9iWq2Kl880o+Tp4WyXo+bD30nJac+ug1rdXq8=
Subject key identifier:   18:61:3E:7A:E7:B4:4C:FD:66:40:24:C3:FA:5D:08:D6:55:3D:32:12
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       31D8E2900D1E8864EF60C1382D3ED9C8FA4E8250
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3137372e3138342e3139362e302f32322d3232203d3e203238313635.roa
Signing time:             Mon 28 Jul 2025 12:31:32 +0000
ROA not before:           Mon 28 Jul 2025 12:26:32 +0000
ROA not after:            Mon 27 Jul 2026 12:31:32 +0000
asID:                     28165
IP address blocks:        177.184.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:d8:e2:90:0d:1e:88:64:ef:60:c1:38:2d:3e:d9:c8:fa:4e:82:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Jul 28 12:26:32 2025 GMT
            Not After : Jul 27 12:31:32 2026 GMT
        Subject: CN=18613E7AE7B44CFD664024C3FA5D08D6553D3212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b7:23:86:ad:87:51:06:1f:e6:73:8a:f5:67:
                    b2:70:e0:8c:cf:18:03:f2:bc:71:c5:33:35:6b:55:
                    8a:b3:5d:f5:42:6e:3c:4f:63:4e:ff:40:98:8b:6c:
                    11:e8:93:46:3a:a4:34:fa:c2:4a:d4:3f:96:bb:67:
                    8d:14:e9:91:96:86:2e:2d:7d:c2:37:38:72:35:9a:
                    57:17:80:a0:fb:54:9e:5a:e8:16:18:c8:5f:e0:2e:
                    21:f3:72:44:d8:a2:68:33:17:a0:87:6b:40:37:4b:
                    58:74:61:db:b8:c7:2b:f7:db:3b:24:5b:e5:eb:ca:
                    62:62:b9:cb:17:17:54:2c:d6:64:96:d3:95:df:20:
                    44:5d:98:c8:a6:30:6b:61:fd:90:1b:d6:3e:1a:43:
                    27:4f:23:96:0f:ff:30:7b:78:81:43:7e:10:8a:94:
                    91:59:b3:31:b7:88:be:4b:d7:ba:b6:c9:50:bb:5c:
                    6b:fc:83:ab:36:03:99:2e:25:34:03:93:65:de:59:
                    17:42:b1:67:c2:10:71:5a:c3:4d:1d:97:ce:d4:c7:
                    31:53:01:89:cc:70:12:64:44:a3:a4:98:06:fb:fe:
                    cb:aa:d1:c0:90:a4:77:d7:3f:e3:30:16:ea:b7:f2:
                    1e:c1:87:ba:06:26:12:d3:07:01:28:d7:be:ae:57:
                    be:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:61:3E:7A:E7:B4:4C:FD:66:40:24:C3:FA:5D:08:D6:55:3D:32:12
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3137372e3138342e3139362e302f32322d3232203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cd:fb:37:c2:82:dc:e8:bd:14:f0:07:2f:90:25:0e:04:46:88:
         07:03:46:9a:84:a8:c7:c9:da:31:12:32:59:1d:20:6f:33:bd:
         7a:68:bd:b4:0b:76:d8:80:64:d8:50:16:6e:a8:32:2e:3b:7c:
         56:fa:06:75:e0:2d:00:23:02:e8:5c:c6:12:ad:07:d0:b0:48:
         af:9f:ac:53:74:04:0f:6d:1e:c8:8b:15:aa:7b:c9:9f:9f:52:
         27:63:f5:b9:d5:98:6a:75:b8:ee:2a:c4:1b:cf:f9:83:79:35:
         40:dc:ba:77:f6:8f:a8:24:3b:6a:cf:b0:15:0d:5d:86:c0:cf:
         d3:20:de:23:f5:0b:18:11:41:79:ca:12:99:87:e7:77:df:02:
         68:51:3c:56:e3:3b:4f:82:25:57:54:99:11:e0:81:87:3b:48:
         9d:82:69:34:2d:b1:9b:06:2a:89:8d:b0:84:32:d8:43:06:4e:
         13:fe:98:f2:e1:ac:09:22:ae:b9:f1:47:80:03:16:6c:ac:90:
         7c:13:91:ef:c7:be:36:88:a1:1e:92:76:d4:e4:bb:7c:55:d5:
         44:9b:30:d1:3e:d5:bf:5a:08:e2:01:28:eb:75:bc:6e:d8:2d:
         fb:ee:e5:e2:48:7e:c6:0b:0f:34:19:44:ce:e7:53:31:2a:98:
         37:8a:f0:fc
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMdjikA0eiGTvYME4LT7ZyPpOglAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTE2MDFBOUVGNUUwREE1RDBDMTUyRUNCN0ZFMjNDODc1
NUNCQzIwNzAeFw0yNTA3MjgxMjI2MzJaFw0yNjA3MjcxMjMxMzJaMDMxMTAvBgNV
BAMTKDE4NjEzRTdBRTdCNDRDRkQ2NjQwMjRDM0ZBNUQwOEQ2NTUzRDMyMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYtyOGrYdRBh/mc4r1Z7Jw4IzP
GAPyvHHFMzVrVYqzXfVCbjxPY07/QJiLbBHok0Y6pDT6wkrUP5a7Z40U6ZGWhi4t
fcI3OHI1mlcXgKD7VJ5a6BYYyF/gLiHzckTYomgzF6CHa0A3S1h0Ydu4xyv32zsk
W+XrymJiucsXF1Qs1mSW05XfIERdmMimMGth/ZAb1j4aQydPI5YP/zB7eIFDfhCK
lJFZszG3iL5L17q2yVC7XGv8g6s2A5kuJTQDk2XeWRdCsWfCEHFaw00dl87UxzFT
AYnMcBJkRKOkmAb7/suq0cCQpHfXP+MwFuq38h7Bh7oGJhLTBwEo176uV77HAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUGGE+eue0TP1mQCTD+l0I1lU9MhIwHwYDVR0j
BBgwFoAUkWAanvXg2l0MFS7Lf+I8h1XLwgcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXBQcFhSUmN1RzlRMW1YcXh6UXhIS28zdXA4V1V0M3Q0VjRFbXl4dERu
SmovMC85MTYwMUE5RUY1RTBEQTVEMEMxNTJFQ0I3RkUyM0M4NzU1Q0JDMjA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxNjAxQTlFRjVFMERBNUQw
QzE1MkVDQjdGRTIzQzg3NTVDQkMyMDcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FwUHBYUlJjdUc5UTFtWHF4elF4SEtvM3VwOFdVdDN0NFY0RW15eHREbkpqLzAv
MzEzNzM3MmUzMTM4MzQyZTMxMzkzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzgzMTM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxuMQwDQYJKoZIhvcNAQELBQADggEBAM37N8KC
3Oi9FPAHL5AlDgRGiAcDRpqEqMfJ2jESMlkdIG8zvXpovbQLdtiAZNhQFm6oMi47
fFb6BnXgLQAjAuhcxhKtB9CwSK+frFN0BA9tHsiLFap7yZ+fUidj9bnVmGp1uO4q
xBvP+YN5NUDcunf2j6gkO2rPsBUNXYbAz9Mg3iP1CxgRQXnKEpmH53ffAmhRPFbj
O0+CJVdUmRHggYc7SJ2CaTQtsZsGKomNsIQy2EMGThP+mPLhrAkirrnxR4ADFmys
kHwTke/HvjaIoR6SdtTku3xV1USbMNE+1b9aCOIBKOt1vG7YLfvu5eJIfsYLDzQZ
RM7nUzEqmDeK8Pw=
-----END CERTIFICATE-----
Generated at Sat Aug 9 22:47:47 2025 by rpki-client