Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3137372e3232322e31382e302f32342d3234203d3e203238313635.roa
File:                     3137372e3232322e31382e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          cgx6/O1BDMY62EfUTVFVeL+zb8I2qg3My0YLT8VVvEI=
Subject key identifier:   CD:0A:FA:11:65:21:A9:CC:B2:41:CD:2F:6B:47:BE:C0:04:EF:AB:D2
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       408994E292F96B8E4AA2797DDE4070D34BAC2784
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3137372e3232322e31382e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 28 Jul 2025 12:31:37 +0000
ROA not before:           Mon 28 Jul 2025 12:26:37 +0000
ROA not after:            Mon 27 Jul 2026 12:31:37 +0000
asID:                     28165
IP address blocks:        177.222.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:89:94:e2:92:f9:6b:8e:4a:a2:79:7d:de:40:70:d3:4b:ac:27:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Jul 28 12:26:37 2025 GMT
            Not After : Jul 27 12:31:37 2026 GMT
        Subject: CN=CD0AFA116521A9CCB241CD2F6B47BEC004EFABD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f4:3f:74:85:35:bb:2b:69:f1:a2:ab:7e:86:
                    36:fe:ec:eb:06:77:08:f8:d9:13:ea:33:50:c0:33:
                    4f:01:05:07:87:22:3c:af:17:07:f6:54:3f:3d:99:
                    c0:9e:e3:b3:1e:7a:3e:cd:97:0d:ed:4e:7e:94:52:
                    5b:6d:ba:53:33:fa:d9:89:dd:61:04:e8:8a:84:9d:
                    65:d0:29:3c:74:7e:f4:d1:0d:5f:3b:8f:93:61:d2:
                    7a:14:ae:7d:1d:d3:ef:4e:dd:dc:88:c6:05:18:40:
                    0a:9c:f6:98:75:1a:7f:49:45:8c:c9:e8:46:95:3d:
                    da:c3:ad:2f:75:d9:5e:e3:c0:92:23:ef:7e:0b:4f:
                    61:49:ac:96:4a:bc:e2:f5:be:bf:3b:43:c1:91:c3:
                    bd:e3:d0:cc:88:2d:a5:20:6b:55:ae:11:78:12:d7:
                    52:5e:c2:af:ca:58:92:66:53:61:89:72:61:97:94:
                    da:bd:ca:d6:f0:29:36:b5:10:15:7e:20:8b:57:7d:
                    c6:03:1e:74:e0:de:38:67:cf:8b:6e:15:90:a9:bc:
                    8f:45:1d:d5:dd:3f:78:e7:8b:ef:3d:8a:bf:23:dd:
                    07:21:23:71:ee:d4:62:97:88:db:0c:7a:b0:e0:9c:
                    ef:be:e0:da:65:ed:c4:b4:35:b3:55:51:ee:05:8d:
                    6d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:0A:FA:11:65:21:A9:CC:B2:41:CD:2F:6B:47:BE:C0:04:EF:AB:D2
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3137372e3232322e31382e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:ce:2b:90:59:75:d0:c1:7e:07:11:99:46:bc:69:57:3f:e3:
         ba:ff:9a:19:a5:25:17:76:a3:35:94:2d:e0:3f:07:de:62:a2:
         be:4a:9e:8f:4c:80:23:91:c8:e9:49:52:cd:68:61:b7:4c:e2:
         72:93:b0:35:10:b0:84:04:19:bf:06:3c:4d:34:93:c5:58:3e:
         76:3b:5b:fd:1a:65:41:9d:c5:88:25:47:a6:fd:22:ea:4e:6c:
         9b:d4:3d:98:a6:9e:1f:64:ce:94:3c:75:9f:38:8f:3f:c8:2f:
         34:06:e9:39:80:d6:21:16:99:c2:94:fa:d9:47:a0:d0:da:25:
         48:6c:c5:f3:46:bb:91:48:43:d9:f0:32:90:e7:6a:1e:bb:1a:
         b0:a0:d3:aa:20:05:ce:8e:94:33:b9:f3:d3:c2:05:b7:8e:57:
         f3:4b:2b:c7:21:bd:15:74:e7:1a:96:92:5e:bb:bd:39:99:cb:
         e6:25:35:31:b1:e6:94:4c:13:85:18:26:9b:9d:a8:42:e2:ba:
         25:e8:90:3d:51:73:f8:6e:9f:a0:f8:24:0c:39:c3:7d:3d:0c:
         1a:93:a6:dd:02:03:64:48:1f:92:09:ed:b0:74:95:ad:ab:3b:
         3f:02:ce:17:67:4f:21:d5:d7:9e:2d:98:b5:d5:db:54:a5:56:
         4b:b6:66:63
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQImU4pL5a45Konl93kBw00usJ4QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTE2MDFBOUVGNUUwREE1RDBDMTUyRUNCN0ZFMjNDODc1
NUNCQzIwNzAeFw0yNTA3MjgxMjI2MzdaFw0yNjA3MjcxMjMxMzdaMDMxMTAvBgNV
BAMTKENEMEFGQTExNjUyMUE5Q0NCMjQxQ0QyRjZCNDdCRUMwMDRFRkFCRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL9D90hTW7K2nxoqt+hjb+7OsG
dwj42RPqM1DAM08BBQeHIjyvFwf2VD89mcCe47Meej7Nlw3tTn6UUlttulMz+tmJ
3WEE6IqEnWXQKTx0fvTRDV87j5Nh0noUrn0d0+9O3dyIxgUYQAqc9ph1Gn9JRYzJ
6EaVPdrDrS912V7jwJIj734LT2FJrJZKvOL1vr87Q8GRw73j0MyILaUga1WuEXgS
11Jewq/KWJJmU2GJcmGXlNq9ytbwKTa1EBV+IItXfcYDHnTg3jhnz4tuFZCpvI9F
HdXdP3jni+89ir8j3QchI3Hu1GKXiNsMerDgnO++4Npl7cS0NbNVUe4FjW2PAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUzQr6EWUhqcyyQc0va0e+wATvq9IwHwYDVR0j
BBgwFoAUkWAanvXg2l0MFS7Lf+I8h1XLwgcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXBQcFhSUmN1RzlRMW1YcXh6UXhIS28zdXA4V1V0M3Q0VjRFbXl4dERu
SmovMC85MTYwMUE5RUY1RTBEQTVEMEMxNTJFQ0I3RkUyM0M4NzU1Q0JDMjA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxNjAxQTlFRjVFMERBNUQw
QzE1MkVDQjdGRTIzQzg3NTVDQkMyMDcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FwUHBYUlJjdUc5UTFtWHF4elF4SEtvM3VwOFdVdDN0NFY0RW15eHREbkpqLzAv
MzEzNzM3MmUzMjMyMzIyZTMxMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzEzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsd4SMA0GCSqGSIb3DQEBCwUAA4IBAQDBziuQWXXQ
wX4HEZlGvGlXP+O6/5oZpSUXdqM1lC3gPwfeYqK+Sp6PTIAjkcjpSVLNaGG3TOJy
k7A1ELCEBBm/BjxNNJPFWD52O1v9GmVBncWIJUem/SLqTmyb1D2Ypp4fZM6UPHWf
OI8/yC80Buk5gNYhFpnClPrZR6DQ2iVIbMXzRruRSEPZ8DKQ52oeuxqwoNOqIAXO
jpQzufPTwgW3jlfzSyvHIb0VdOcalpJeu705mcvmJTUxseaUTBOFGCabnahC4rol
6JA9UXP4bp+g+CQMOcN9PQwak6bdAgNkSB+SCe2wdJWtqzs/As4XZ08h1deeLZi1
1dtUpVZLtmZj
-----END CERTIFICATE-----
Generated at Sun Aug 10 05:37:03 2025 by rpki-client