Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3137372e3138342e3230322e302f32342d3234203d3e203238313635.roa
File:                     3137372e3138342e3230322e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          NCxGHjI2F2egd4QGtp3QBwYaIF0I8s680ckoIUp7vC4=
Subject key identifier:   74:A9:22:B0:15:29:F4:BE:76:96:54:E8:1D:53:0F:43:E8:13:1A:FD
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       58D22E2DBE631E018BB0C3926970F891FF4AB6FC
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3137372e3138342e3230322e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 28 Jul 2025 12:31:29 +0000
ROA not before:           Mon 28 Jul 2025 12:26:29 +0000
ROA not after:            Mon 27 Jul 2026 12:31:29 +0000
asID:                     28165
IP address blocks:        177.184.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:d2:2e:2d:be:63:1e:01:8b:b0:c3:92:69:70:f8:91:ff:4a:b6:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Jul 28 12:26:29 2025 GMT
            Not After : Jul 27 12:31:29 2026 GMT
        Subject: CN=74A922B01529F4BE769654E81D530F43E8131AFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c4:2e:96:df:f3:e6:46:78:5a:15:a7:ff:c5:
                    84:8d:69:2e:58:27:c1:95:11:df:5b:7e:2f:3c:71:
                    8f:e5:32:ab:2d:d3:e1:21:60:98:5b:d3:9e:98:d3:
                    37:9b:28:b8:30:0e:84:58:4a:74:d2:16:67:42:a1:
                    f9:ee:a9:c2:d7:16:fe:81:63:01:67:ce:b2:77:f1:
                    89:6a:44:2d:80:fb:64:1b:02:f9:12:2d:2c:70:7e:
                    d5:a7:10:68:45:83:3f:12:31:60:ba:58:9b:ed:9b:
                    c7:3b:ef:3a:dd:17:bb:8f:11:b1:f9:5b:36:10:fa:
                    6e:6c:97:9c:d7:84:6d:ff:5a:54:a3:f1:6d:3a:15:
                    44:eb:96:7f:53:58:04:e6:66:d4:8e:92:2f:cf:80:
                    54:b0:87:f2:f1:11:5a:3b:e9:26:a7:a9:94:07:f5:
                    94:d0:f0:8d:ad:01:a7:8f:d6:c8:49:50:c3:71:dd:
                    7c:11:9d:f7:7e:46:19:b6:00:0a:e8:b9:bc:8a:fc:
                    da:44:38:c8:9a:99:77:9d:32:5d:9a:a5:c1:74:97:
                    f3:e7:1e:bb:2e:cf:57:4b:ab:2f:e7:f9:9f:09:26:
                    9f:71:c1:81:de:be:80:25:e9:26:55:85:f3:fa:47:
                    86:a6:0a:62:b4:c4:57:59:72:2a:e7:cd:02:97:44:
                    eb:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A9:22:B0:15:29:F4:BE:76:96:54:E8:1D:53:0F:43:E8:13:1A:FD
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3137372e3138342e3230322e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:aa:be:5b:0e:1e:9a:bc:47:d6:0e:24:8f:0d:ff:89:33:33:
         6c:c5:28:fb:3f:27:df:e9:e7:1e:03:70:5a:4a:7a:05:01:37:
         bb:34:f7:87:4b:3e:ee:63:3e:b0:dd:40:d7:38:ed:18:35:8e:
         70:21:97:b7:d4:6a:93:10:c9:1f:68:12:21:99:64:26:9c:39:
         55:40:b0:a9:a9:7d:26:dc:76:42:ab:43:24:f4:c0:1d:98:f1:
         3d:9d:e7:47:61:cd:a9:42:f3:cf:76:e1:cd:aa:4c:b0:97:45:
         bc:2a:85:be:d5:99:90:21:cc:e9:5a:80:0c:08:84:4b:dd:8d:
         fe:aa:a4:52:8b:23:f0:3f:fd:78:8a:b3:ae:48:eb:1e:10:1a:
         33:d8:09:e9:54:29:21:1d:64:31:2c:cb:ec:e8:98:0f:fd:0c:
         1c:4f:b0:c8:12:f1:34:41:79:6a:07:b0:71:c2:75:a9:0d:ff:
         80:29:21:f3:ee:a1:06:ad:f0:fd:00:3e:36:61:85:57:31:0f:
         e1:25:19:fd:07:0a:b4:33:3b:45:9f:6b:42:41:9b:0a:70:41:
         6d:47:e7:bd:c3:a4:3a:1e:30:66:a9:b9:40:95:63:08:f3:84:
         e9:a8:13:ad:71:a7:b4:b9:03:02:89:00:f2:35:38:a3:df:58:
         af:71:e2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:37:18 2025 by rpki-client