Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3137372e3232322e32312e302f32342d3234203d3e203238313635.roa
File:                     3137372e3232322e32312e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          ycaNOS++G0NxCiEh6eQ0E4QNPdgX9FJUsTYDpZb5myI=
Subject key identifier:   B5:A6:18:F8:8E:08:F5:86:DF:33:32:02:D2:F0:58:2D:82:3D:B0:2C
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       2D10208A1849150B652C88E9FD0D2FCB1352BC5F
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3137372e3232322e32312e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 28 Jul 2025 12:31:34 +0000
ROA not before:           Mon 28 Jul 2025 12:26:34 +0000
ROA not after:            Mon 27 Jul 2026 12:31:34 +0000
asID:                     28165
IP address blocks:        177.222.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:10:20:8a:18:49:15:0b:65:2c:88:e9:fd:0d:2f:cb:13:52:bc:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Jul 28 12:26:34 2025 GMT
            Not After : Jul 27 12:31:34 2026 GMT
        Subject: CN=B5A618F88E08F586DF333202D2F0582D823DB02C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:87:59:17:3a:67:da:a4:81:35:51:73:2f:a7:
                    75:47:cb:0a:59:1a:d7:42:b9:b1:28:eb:9d:ef:c6:
                    8a:7f:2f:46:5a:49:c7:65:a8:6f:12:07:eb:29:11:
                    a2:f1:06:a8:cc:aa:2c:7f:d7:b1:9d:b3:9e:1b:7f:
                    fe:79:75:c9:73:8f:de:b4:9b:4a:e9:57:84:03:1e:
                    05:db:ff:ec:c1:43:9e:a0:e0:07:74:f7:b2:11:c1:
                    1f:af:ba:e7:b6:23:9c:f1:fe:5c:68:72:c7:6c:0c:
                    c9:20:de:48:48:d2:1e:00:fe:be:dd:ee:ff:6d:b1:
                    85:6f:bb:bb:fc:a8:ca:70:22:17:f2:83:4d:c1:25:
                    b5:b6:2a:bb:29:56:b5:28:ea:c7:e7:60:fc:1a:95:
                    78:ba:3a:58:b3:5f:4d:77:56:1f:73:ee:70:f5:68:
                    8a:b9:42:48:cc:6d:fe:d3:06:96:27:dc:dc:90:54:
                    55:0b:e8:80:bf:f6:ff:59:63:22:7b:9b:56:b9:4c:
                    7f:c4:84:aa:c8:73:a9:93:64:fd:77:ef:52:5b:42:
                    cd:52:9d:b6:9b:43:7a:18:1d:a2:82:ba:e1:5f:fb:
                    2d:6d:a3:09:d9:f7:e1:35:5a:50:37:58:17:46:64:
                    66:c2:41:82:30:9f:4b:3a:9c:4b:55:f1:f2:19:43:
                    8e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A6:18:F8:8E:08:F5:86:DF:33:32:02:D2:F0:58:2D:82:3D:B0:2C
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3137372e3232322e32312e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:4b:48:20:bc:5f:74:65:83:cc:59:d6:cb:cf:cd:ec:64:a3:
         c7:ea:d4:ef:4a:52:41:12:b0:2d:0e:ea:c5:ef:86:d2:40:49:
         14:34:7a:95:ef:96:70:72:84:51:fc:d9:fd:a0:8b:ab:64:8c:
         05:84:32:62:00:9d:66:48:f2:06:bf:4a:89:c4:e8:d5:13:85:
         60:3c:96:6c:54:3c:bc:ff:76:04:8b:95:f4:bf:a0:5a:df:59:
         1c:eb:08:f5:3e:19:ad:84:67:43:50:12:47:9a:68:e9:f8:38:
         b4:70:f1:fa:3b:63:4e:d3:30:3b:20:da:b0:47:51:73:4a:bf:
         8e:fc:c8:a0:25:fd:d4:b3:4f:c6:f9:5a:56:22:22:5f:86:74:
         00:ca:44:9e:b3:64:77:de:ca:71:1a:14:c0:74:58:d3:a9:a4:
         0b:12:15:67:b7:f7:dc:6a:ec:b0:8c:b2:db:74:5f:d6:be:a7:
         c6:5c:fc:48:fb:66:98:32:10:95:a1:ca:db:d9:7e:77:89:33:
         16:e9:b7:63:f2:43:8f:9f:ea:d0:dd:5d:2e:7f:0d:aa:87:cc:
         1a:5e:39:78:ba:47:6a:4b:c7:20:cd:96:9f:63:0e:d6:29:cc:
         db:f8:0f:e2:57:51:0b:48:df:6e:43:83:db:f3:54:83:67:55:
         fb:2b:51:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:38:26 2025 by rpki-client