Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3137372e3232322e32322e302f32342d3234203d3e203238313635.roa
File:                     3137372e3232322e32322e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          zW1hSN2RLbTjPtajdyQu4K3XM9cVdQulK/ekR49sS7c=
Subject key identifier:   88:2E:0D:19:69:7F:95:AA:05:97:B6:AC:F5:88:51:78:D8:4E:74:49
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       25E5FF1829911D518EC7FBA061F9D4705867B7D3
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3137372e3232322e32322e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 28 Jul 2025 12:31:27 +0000
ROA not before:           Mon 28 Jul 2025 12:26:27 +0000
ROA not after:            Mon 27 Jul 2026 12:31:27 +0000
asID:                     28165
IP address blocks:        177.222.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:e5:ff:18:29:91:1d:51:8e:c7:fb:a0:61:f9:d4:70:58:67:b7:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Jul 28 12:26:27 2025 GMT
            Not After : Jul 27 12:31:27 2026 GMT
        Subject: CN=882E0D19697F95AA0597B6ACF5885178D84E7449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f1:13:d1:5c:53:0c:6d:5f:f5:b1:74:30:ed:
                    bf:0a:4e:ab:86:96:e0:76:e0:ef:0d:02:5c:0f:3e:
                    ed:1d:e5:59:8e:16:34:9d:1a:5c:e2:8c:49:29:27:
                    47:7d:37:d7:b4:4e:0a:74:57:1e:61:fa:1d:b6:8b:
                    d6:a4:df:de:e0:bf:51:a0:2a:df:21:4a:ff:51:3a:
                    e3:42:69:c4:57:1e:56:49:53:fb:0f:7d:68:c8:b5:
                    e5:1e:7c:22:5a:60:a5:76:9c:15:39:74:38:c9:fd:
                    17:1b:09:ba:64:e8:a7:79:c6:09:4d:d3:65:b1:08:
                    b4:e3:7d:55:48:90:7f:e7:e6:33:29:69:65:97:be:
                    66:d4:ff:59:c5:78:d8:ed:4e:11:e9:77:a0:ff:a2:
                    c7:f6:25:09:e9:61:d4:33:89:0f:11:f9:86:e7:8e:
                    27:10:c4:e2:52:8c:05:e1:df:b1:a4:46:d1:14:ba:
                    02:0f:ae:46:37:55:37:14:cf:81:e0:ef:0b:c3:77:
                    20:c7:4d:13:f3:ae:08:d0:12:e6:ef:e0:64:4b:ae:
                    56:cf:e6:bc:b6:09:df:87:87:57:ff:15:ef:65:56:
                    81:b0:16:3f:77:bb:f4:fc:90:b3:38:80:c2:c6:74:
                    95:2e:be:b1:f1:0e:14:7e:52:5c:e3:4b:ec:84:d8:
                    7e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:2E:0D:19:69:7F:95:AA:05:97:B6:AC:F5:88:51:78:D8:4E:74:49
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3137372e3232322e32322e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:f4:25:9c:6c:85:15:c2:4b:15:76:fb:e9:42:ee:be:7a:43:
         2d:18:19:a0:97:53:a0:89:b0:83:b8:38:f9:17:cc:32:56:06:
         dd:94:12:8c:3d:97:c1:8d:88:dc:d7:af:0f:98:bf:5e:17:2f:
         a6:69:29:2a:72:08:c2:5d:c0:73:6c:34:d5:1e:86:5d:9a:a4:
         f6:e2:60:20:99:cf:c5:b0:1d:df:70:9b:28:90:3d:11:d9:02:
         c6:d0:d9:31:4c:50:a6:9b:81:f0:e2:b7:c7:c6:1c:3d:e4:3e:
         9f:a5:85:f1:9c:51:87:ca:a4:c9:cc:0d:47:96:14:d7:09:b8:
         15:de:96:72:3e:06:d0:90:99:40:52:98:bf:80:82:0d:67:ce:
         90:d0:d7:6d:82:6e:04:2c:5a:18:65:27:ef:44:c5:0c:69:1b:
         3f:46:d7:ad:b3:20:52:de:bc:6d:7d:ef:fd:0c:9d:a0:ec:fa:
         70:6c:29:97:36:30:d9:bc:eb:47:58:6b:df:af:40:8c:da:3e:
         25:06:90:04:5a:0c:13:3b:60:1c:96:dd:12:73:c0:cb:27:df:
         86:20:6c:48:8e:fd:dc:e7:99:78:e8:1c:9f:96:58:a4:d0:7c:
         5b:cb:31:78:8f:84:b0:b8:f9:54:ad:76:4c:08:bf:bc:9d:38:
         5d:46:f4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:48:23 2025 by rpki-client