Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3137372e3138342e3139362e302f32342d3234203d3e203238313635.roa
File:                     3137372e3138342e3139362e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          GJFUM98d5fXXZMIn8XlAwdt3SLlr+f0IIZ8bT9kBV94=
Subject key identifier:   12:5F:F0:C4:8C:7E:D8:A5:8C:FC:D9:63:B7:B6:B7:73:E6:BC:DF:3C
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       275983E429D66F18EF2D0324B3231B87562206AA
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3137372e3138342e3139362e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 28 Jul 2025 12:31:24 +0000
ROA not before:           Mon 28 Jul 2025 12:26:24 +0000
ROA not after:            Mon 27 Jul 2026 12:31:24 +0000
asID:                     28165
IP address blocks:        177.184.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:59:83:e4:29:d6:6f:18:ef:2d:03:24:b3:23:1b:87:56:22:06:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Jul 28 12:26:24 2025 GMT
            Not After : Jul 27 12:31:24 2026 GMT
        Subject: CN=125FF0C48C7ED8A58CFCD963B7B6B773E6BCDF3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c2:4b:31:d2:3d:e0:40:33:c6:70:91:81:e0:
                    c0:b9:87:49:c5:15:37:60:de:89:c6:d7:1c:01:b6:
                    ee:73:4b:b6:b5:7f:01:27:e8:23:cb:fe:4e:d9:ee:
                    89:51:e6:d8:65:ae:40:33:45:40:b3:6b:b6:10:56:
                    7b:f5:d4:b9:7c:fd:67:fe:89:ca:eb:91:a8:16:94:
                    35:bf:ca:88:d4:c9:45:5f:20:24:ea:ec:1d:25:ef:
                    2f:dd:6d:13:8d:ad:b0:85:8e:7d:59:04:f3:9f:ef:
                    59:58:ff:c1:b3:c9:ff:2a:e8:d5:96:24:62:dc:7c:
                    8a:99:17:4c:92:2f:55:40:8f:ea:a7:73:cf:88:67:
                    1e:0a:82:bb:dc:f8:f2:fd:75:10:1d:d0:55:28:86:
                    93:d5:8d:42:7c:9f:31:3a:b7:80:d7:84:9e:50:4a:
                    92:22:ef:8a:65:f1:11:e9:ac:f0:29:9a:a9:f6:20:
                    a3:41:7c:9b:ef:a3:3f:d4:96:9d:10:d8:5c:51:e9:
                    25:24:80:d5:89:fe:7b:51:72:a3:af:99:48:17:bb:
                    69:20:a3:95:a1:4d:6f:0f:64:bf:38:97:9f:78:f5:
                    39:39:62:b8:6c:32:68:9c:ff:80:56:81:c4:df:8d:
                    eb:bc:53:f9:50:92:34:3c:71:46:25:0f:02:e3:98:
                    9e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:5F:F0:C4:8C:7E:D8:A5:8C:FC:D9:63:B7:B6:B7:73:E6:BC:DF:3C
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3137372e3138342e3139362e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:a4:78:d7:5c:0f:b2:0d:e3:6a:17:66:4d:a3:5e:e8:16:29:
         ed:d1:06:15:20:cf:f8:7f:96:58:95:55:89:4e:6a:6c:c9:42:
         4b:f5:77:49:26:60:3c:4d:c1:9f:df:16:e5:42:27:d9:fd:de:
         b7:e0:c9:11:82:c8:ed:b0:4b:b6:85:d0:25:ec:18:ec:84:09:
         c5:22:44:20:b9:17:0c:81:dc:5c:08:6f:6b:89:8a:88:86:d4:
         70:c2:95:7a:98:41:04:0c:5c:19:ee:91:6a:ee:1c:27:85:8e:
         1c:27:56:10:ed:1f:51:62:24:12:42:4f:9d:98:12:a9:66:63:
         f8:a3:7b:50:0d:51:0d:be:a5:23:d4:9e:fd:91:1f:9c:70:fa:
         2e:3d:6f:92:19:07:15:55:98:94:c2:e8:36:29:d9:ef:7e:60:
         f5:d3:ef:f0:39:be:95:98:41:06:f9:d8:7e:db:ae:27:e8:98:
         91:32:97:43:15:a5:f2:67:94:c4:90:1f:e0:9d:6c:45:e6:c8:
         76:9c:4f:7d:4b:af:f9:d1:50:0c:f2:9b:0b:5a:2e:13:bf:8c:
         59:5d:74:e7:2b:72:ac:63:2c:b7:01:2c:46:19:1e:2b:09:9e:
         c1:9e:f1:0e:6a:ab:95:c0:22:41:f4:95:d6:f4:32:3f:0b:c4:
         53:2c:90:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:50:19 2025 by rpki-client