Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3137372e3232322e32302e302f32342d3234203d3e203238313635.roa
File:                     3137372e3232322e32302e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          fToDm4sxi092p4Bv9LAyHbl0H6FPVMQABx7SvqYFxC0=
Subject key identifier:   7D:30:7F:FD:1D:8D:9F:D5:1C:42:93:91:1C:C1:6B:1A:C4:B7:9A:66
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       358E0C72CA5CD4223021F3117482ED4FEDFF2AED
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3137372e3232322e32302e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 28 Jul 2025 12:31:45 +0000
ROA not before:           Mon 28 Jul 2025 12:26:45 +0000
ROA not after:            Mon 27 Jul 2026 12:31:45 +0000
asID:                     28165
IP address blocks:        177.222.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:8e:0c:72:ca:5c:d4:22:30:21:f3:11:74:82:ed:4f:ed:ff:2a:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Jul 28 12:26:45 2025 GMT
            Not After : Jul 27 12:31:45 2026 GMT
        Subject: CN=7D307FFD1D8D9FD51C4293911CC16B1AC4B79A66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fe:19:7f:3d:fe:bb:7e:66:05:e0:13:7f:c2:
                    1a:3c:69:05:42:8c:87:ef:ff:35:fe:5f:a1:2e:96:
                    5c:8e:5c:fb:70:36:e6:e4:86:19:be:a1:a5:c8:25:
                    62:62:6b:2c:a3:ca:7a:54:89:9d:7d:90:31:86:6f:
                    05:1f:b1:f4:72:94:30:eb:b9:fa:83:67:5a:37:02:
                    01:66:31:d2:4b:30:7c:8e:35:f6:10:58:de:c6:3c:
                    3a:7e:20:34:46:c8:6f:e4:8a:dd:a7:e2:6d:41:ed:
                    16:8b:2a:65:f6:b1:e6:f6:05:58:11:55:f2:8f:87:
                    52:e6:30:20:9a:c9:b7:45:d7:80:f4:a1:6a:0f:72:
                    f7:cf:82:a5:72:62:3e:57:69:35:f1:52:63:a3:c6:
                    87:32:a5:3f:92:df:f4:70:5a:c2:94:16:0c:22:f4:
                    09:a0:bc:1b:3e:21:09:98:75:99:1b:61:1e:73:73:
                    68:99:00:18:b1:14:ae:99:cf:21:5f:db:a6:07:14:
                    f1:09:6a:ce:80:92:cb:7e:ac:21:69:39:0e:f0:4f:
                    c5:b1:cc:c1:a9:85:65:3f:ae:ca:18:9e:85:67:b5:
                    a0:4b:5b:a4:f8:74:8b:16:18:46:09:b8:39:d7:19:
                    a8:58:d8:cf:dd:6b:df:60:66:85:1e:8f:9f:37:70:
                    74:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:30:7F:FD:1D:8D:9F:D5:1C:42:93:91:1C:C1:6B:1A:C4:B7:9A:66
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3137372e3232322e32302e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:2a:45:8a:3d:4e:0b:28:2c:74:83:08:a8:b2:ed:ae:3c:2e:
         86:99:83:b5:3c:01:3c:98:2a:40:d1:a5:ff:c4:63:34:e0:c9:
         7a:42:fe:27:56:aa:3c:f8:4e:9e:57:0a:3c:2e:bc:52:8f:87:
         d0:df:3c:a6:66:86:bd:2a:f4:05:ba:6a:31:e5:40:84:6a:c5:
         8c:e4:3b:e4:6e:89:67:77:ea:7c:56:49:ef:15:1a:15:8a:03:
         aa:98:10:bc:d2:25:fc:43:1a:07:8d:ea:3f:27:85:5d:15:97:
         6b:c2:c1:da:71:f0:d8:ae:02:e3:36:28:17:59:fd:a3:8e:ca:
         b5:9f:94:ed:be:da:c9:61:e2:3d:f3:f4:59:5f:30:3a:57:4e:
         66:e7:72:82:41:46:79:2e:2f:ed:b9:9b:a1:da:b3:f6:b1:1c:
         36:78:5c:c5:64:0a:f9:39:e5:78:53:b2:a0:f0:df:90:6e:82:
         04:35:2a:c9:c9:40:1d:04:b0:72:a6:4b:a7:49:37:cb:cf:e5:
         87:bc:90:1e:2a:3e:82:eb:d2:87:9d:9b:c6:08:4d:57:df:b5:
         e5:d3:fd:49:bc:8b:f6:73:1a:b0:ae:25:f9:d0:9e:31:ff:6c:
         85:6a:4d:ac:b8:64:3d:e6:79:5a:36:3b:b4:de:6a:4b:b5:34:
         34:a9:30:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:45:25 2025 by rpki-client