Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3137372e3232322e31372e302f32342d3234203d3e203238313635.roa
File:                     3137372e3232322e31372e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          uqE1VaVlQ6QTvwzwf5n7lujkNsXyB4Ehh3u56Mb2Dhc=
Subject key identifier:   62:80:A1:BA:37:3F:7D:7E:7C:DD:95:9B:BB:CD:A8:71:02:81:55:0C
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       359E8C7F6CC5E208922F9635BB0F5607223AF165
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3137372e3232322e31372e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 28 Jul 2025 12:31:22 +0000
ROA not before:           Mon 28 Jul 2025 12:26:22 +0000
ROA not after:            Mon 27 Jul 2026 12:31:22 +0000
asID:                     28165
IP address blocks:        177.222.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:9e:8c:7f:6c:c5:e2:08:92:2f:96:35:bb:0f:56:07:22:3a:f1:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Jul 28 12:26:22 2025 GMT
            Not After : Jul 27 12:31:22 2026 GMT
        Subject: CN=6280A1BA373F7D7E7CDD959BBBCDA8710281550C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:17:1f:d9:f4:61:92:a0:9a:95:e2:9c:3a:ae:
                    10:0b:6e:cc:e9:7d:8d:4c:bf:02:fa:aa:fb:74:40:
                    9a:19:6b:04:94:20:79:0f:d9:5e:14:f6:ab:8a:87:
                    e5:11:30:d9:b6:d0:61:cf:a6:3f:a3:97:65:38:db:
                    c2:4c:fb:7d:09:b1:97:e1:2f:60:cd:37:76:74:db:
                    06:29:44:aa:4c:a6:5f:f1:d9:46:fc:76:21:c6:5c:
                    21:26:20:0a:8b:05:a0:f5:c5:3f:ab:31:d5:d6:a7:
                    50:a8:a1:8d:60:fc:ff:d1:c4:64:1e:1c:3b:a7:9a:
                    c9:7a:76:a2:e3:a3:9b:46:1b:d2:07:35:b2:db:c0:
                    0f:b7:3e:56:1e:13:3c:fb:14:12:20:bd:d7:f5:08:
                    b7:8f:fe:71:f9:e9:4d:a0:f9:ab:f0:ad:44:dc:1d:
                    8c:f9:e3:d7:8b:b9:d8:7b:7a:0e:19:d3:d6:9f:d3:
                    fc:4a:e5:60:e5:9d:01:cc:ee:ba:a7:c4:ff:ea:f1:
                    29:c9:bc:81:e1:90:14:8f:4d:19:da:04:43:c6:91:
                    8d:1f:d9:e6:3b:72:c5:f8:bf:fe:1d:67:1f:46:04:
                    d4:55:c4:33:59:9d:53:78:4c:c9:99:a3:28:d7:24:
                    6c:77:f0:93:35:34:e4:e8:25:2f:10:d1:12:36:0b:
                    0b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:80:A1:BA:37:3F:7D:7E:7C:DD:95:9B:BB:CD:A8:71:02:81:55:0C
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3137372e3232322e31372e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:b6:a7:00:c7:b7:bf:36:00:70:3e:ee:ac:da:cc:ce:ae:3e:
         27:a3:df:12:f5:b7:22:34:fa:c4:88:44:68:fe:f2:77:da:5e:
         e8:15:86:67:2f:7c:f1:b0:40:db:98:cb:87:a5:a3:70:42:df:
         73:60:0a:50:91:1e:84:98:1b:ab:cd:11:d1:22:4c:d0:5b:ac:
         cd:7e:c9:41:47:af:9d:ec:98:a8:d2:71:44:7d:5f:d0:43:40:
         cc:94:64:89:c6:d6:8d:95:e9:46:a7:1b:d9:19:88:d2:11:10:
         f1:d5:c1:2b:6a:d1:68:3f:1d:c3:be:6d:f3:5d:f5:97:9b:25:
         78:fc:1f:b7:a0:a2:c2:32:44:6b:7b:5a:ec:53:51:37:a7:dc:
         95:bb:9d:d1:25:44:18:54:0a:78:97:bc:a9:ef:b6:9f:7e:b1:
         af:f1:6b:4b:ef:41:9e:3e:12:16:a8:54:eb:2e:da:7b:f1:f4:
         cf:91:ee:8d:0c:d6:65:49:93:6e:a9:42:ed:ad:87:70:94:1a:
         5a:95:ef:b6:d7:7c:ed:4c:14:a5:27:46:aa:a8:84:51:26:67:
         6e:03:10:ae:1f:77:55:ed:96:11:d0:66:e7:05:0a:31:cb:8f:
         35:b4:15:2b:82:fa:0a:50:df:d9:47:f0:c4:4d:82:d3:71:4e:
         81:90:22:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:38:11 2025 by rpki-client