Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3137372e3232322e33302e302f32342d3234203d3e203238313635.roa
File:                     3137372e3232322e33302e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          /Ncg7wF6juXMXaHwQD94nXTN/HcQrbBjZesc8HGpOVI=
Subject key identifier:   FF:61:F0:3F:04:BF:08:21:69:15:11:C1:2F:E7:87:01:CB:91:4F:6B
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       06AF372ED62821BEC91BCB553FED31A5C953AC9E
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3137372e3232322e33302e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 28 Jul 2025 12:31:30 +0000
ROA not before:           Mon 28 Jul 2025 12:26:30 +0000
ROA not after:            Mon 27 Jul 2026 12:31:30 +0000
asID:                     28165
IP address blocks:        177.222.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:af:37:2e:d6:28:21:be:c9:1b:cb:55:3f:ed:31:a5:c9:53:ac:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Jul 28 12:26:30 2025 GMT
            Not After : Jul 27 12:31:30 2026 GMT
        Subject: CN=FF61F03F04BF0821691511C12FE78701CB914F6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d0:ab:45:b9:b5:8d:c1:c3:14:12:25:f5:6e:
                    88:35:42:d5:72:82:53:53:9e:6a:2d:44:fc:bc:97:
                    17:7e:52:e9:9d:40:76:d3:e4:0c:a5:03:77:f3:51:
                    75:50:8f:49:11:9a:c6:8b:7b:a8:ab:72:48:e8:33:
                    70:70:d3:6c:92:01:43:0f:3c:8d:df:62:6a:c7:14:
                    3e:90:8f:12:1c:a3:83:a0:19:bd:d3:48:88:2a:e3:
                    ea:b0:9a:36:03:ff:52:58:5b:45:05:4d:d1:d3:a6:
                    1e:15:69:f5:92:aa:dd:a7:63:4e:2f:0f:5b:a5:02:
                    dd:04:d0:f5:b7:e3:04:e2:ae:2f:cc:d1:b6:e2:76:
                    9e:2c:df:5c:2b:c6:e5:c0:95:46:81:b7:2f:e1:5b:
                    0c:21:c4:d9:0c:03:87:2f:dc:e1:a7:14:06:be:7e:
                    05:80:b0:e4:a6:10:00:e3:cf:eb:29:19:95:29:3f:
                    7e:1b:cd:c0:d4:e6:b2:85:a6:09:9f:8d:6a:b3:31:
                    63:a7:7d:ec:11:96:ea:d9:b3:08:47:ad:1f:6b:78:
                    a6:4d:8c:96:55:bb:8f:11:07:30:ef:cc:a7:63:9b:
                    4d:9a:cf:6d:a7:b1:1c:15:75:c9:b3:51:68:f5:4e:
                    f8:3b:aa:a5:13:af:78:92:63:b7:16:c2:7f:37:58:
                    aa:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:61:F0:3F:04:BF:08:21:69:15:11:C1:2F:E7:87:01:CB:91:4F:6B
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3137372e3232322e33302e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:72:b4:aa:14:43:f4:c4:26:de:7e:28:db:ab:01:e6:84:5d:
         6c:85:fd:23:6f:76:38:68:58:4c:0d:68:ff:9a:ae:8b:d5:2e:
         a7:ec:9d:27:b8:3e:78:6a:55:51:22:dc:12:7c:a1:00:fb:bc:
         a6:76:5d:5f:66:b9:30:3b:33:41:5c:3e:09:cd:c7:0b:ac:83:
         ca:12:0a:3a:e2:f1:4d:fd:47:7c:7d:3f:36:db:94:a5:3e:db:
         ac:68:a0:fc:d1:90:c2:e6:42:c2:c1:9b:6a:26:91:0d:49:70:
         ee:6f:ed:73:30:c7:56:5c:39:1f:93:71:53:df:9c:fa:8e:eb:
         45:f7:cc:a2:64:c7:45:8a:a5:6e:bb:14:48:2f:08:c4:4f:52:
         3a:ec:6f:7a:fb:94:be:8e:2e:3c:59:e8:6f:43:34:ba:f8:fb:
         0c:a4:3f:fc:fc:06:65:21:8a:f9:de:8d:fa:84:a1:64:9b:de:
         f4:63:0f:2a:c6:88:c6:30:cc:e8:41:ed:34:52:4d:31:3f:80:
         a5:e7:35:0e:be:14:b3:64:6b:26:db:37:4a:0e:9e:72:98:73:
         ec:35:79:da:9e:c2:58:2f:06:70:b6:aa:9c:8b:cc:2b:c6:c2:
         16:e6:9b:33:15:b5:78:48:84:ea:61:cd:8f:55:a5:62:73:5c:
         4c:03:6f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:49:41 2025 by rpki-client