Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3137372e3232322e32392e302f32342d3234203d3e203238313635.roa
File:                     3137372e3232322e32392e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          OjmRTAVMbPBdPjCfqHLHssXBKayk2ZHJrrxW75yNIo4=
Subject key identifier:   72:98:0A:75:CB:1E:F7:2D:0A:4D:82:8E:19:63:C6:79:5F:7B:D2:85
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       17FF1E383EC4E82EAA95264608AE66B4715AAD25
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3137372e3232322e32392e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 28 Jul 2025 12:31:19 +0000
ROA not before:           Mon 28 Jul 2025 12:26:19 +0000
ROA not after:            Mon 27 Jul 2026 12:31:19 +0000
asID:                     28165
IP address blocks:        177.222.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ff:1e:38:3e:c4:e8:2e:aa:95:26:46:08:ae:66:b4:71:5a:ad:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Jul 28 12:26:19 2025 GMT
            Not After : Jul 27 12:31:19 2026 GMT
        Subject: CN=72980A75CB1EF72D0A4D828E1963C6795F7BD285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d0:19:aa:81:ec:4c:42:9a:2b:5b:70:22:fc:
                    b1:ac:94:1a:39:47:0e:3a:f1:4e:bb:96:30:b7:a8:
                    20:7e:a1:bd:d8:74:fb:a9:d5:1b:96:45:5e:f8:74:
                    2a:2e:5b:e0:6e:f9:d0:75:fd:a0:3e:b1:4e:ab:2f:
                    dd:a5:62:10:6c:fa:83:17:eb:a5:fb:85:f0:94:bc:
                    bc:26:78:49:02:22:43:a4:3c:cd:47:43:68:04:d1:
                    f5:88:84:b9:d4:41:ac:b7:ea:4a:5d:6d:b3:e3:36:
                    c5:60:8b:0e:c9:93:59:77:db:c7:a9:df:ae:36:1b:
                    6a:1e:87:06:d3:f9:c2:18:7f:e4:59:cc:b6:a9:e0:
                    ff:0c:da:57:2a:18:44:07:8d:13:31:07:97:76:13:
                    a6:f3:3a:13:26:85:ed:23:1a:19:89:fe:b1:56:e6:
                    e7:0a:e2:f3:9d:3d:26:f9:28:b8:20:eb:62:af:c1:
                    af:9f:7c:e3:4e:71:78:7e:90:5e:02:96:a4:67:bf:
                    62:aa:c5:1b:f2:ce:4e:75:26:92:20:b2:ab:1a:5b:
                    ec:78:8b:5a:68:ed:4b:64:42:6e:a7:4f:8d:d0:06:
                    8f:ee:64:b6:81:64:ab:5e:db:d7:38:21:b5:79:8a:
                    f8:ac:98:50:8a:34:79:cc:ca:39:9a:b5:bb:6e:d9:
                    11:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:98:0A:75:CB:1E:F7:2D:0A:4D:82:8E:19:63:C6:79:5F:7B:D2:85
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3137372e3232322e32392e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:df:58:00:54:1a:66:12:35:5b:93:83:62:55:e9:07:01:34:
         25:a9:97:e7:b2:1a:4c:01:fb:98:fe:0e:eb:21:37:79:27:ef:
         93:20:f5:79:ad:8c:0f:ad:9a:59:86:57:f6:7a:d3:6f:15:0f:
         4a:1a:a0:29:62:3b:64:65:3a:12:e5:15:18:b9:7f:0c:02:5e:
         e9:91:2e:fb:0b:0a:23:05:10:ff:9d:c4:f1:17:df:7f:af:80:
         3b:91:df:02:85:d1:e7:d7:20:d3:85:bb:64:19:57:82:a7:22:
         be:ad:a8:90:ed:4a:df:7b:57:72:b4:e6:69:e2:e4:4c:0a:87:
         ef:44:9e:d8:29:9d:02:a9:39:e9:73:5f:bf:d7:5f:9d:a0:5f:
         5a:2a:3d:5d:2d:0d:21:90:73:c2:6e:d9:f8:c1:39:b8:84:d2:
         29:a6:d4:1a:28:b6:74:2d:60:7c:93:76:b5:24:f1:c7:50:6a:
         83:82:8c:0f:17:d4:94:cd:25:66:1b:f3:eb:94:58:e7:a8:8f:
         d6:2f:d6:41:71:8c:64:7a:30:de:77:8d:fc:71:17:72:23:a5:
         6f:1c:76:94:7d:a6:2c:bd:31:a3:d0:35:2b:c9:bc:26:28:3a:
         74:e6:4e:46:54:02:48:4a:db:dc:47:17:2c:e9:9b:10:76:e3:
         ec:a4:23:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:50:06 2025 by rpki-client