Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/3137302e38312e3136382e302f32342d3234203d3e203238313635.roa
File:                     3137302e38312e3136382e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          UOChFty8AXMg3xj5118XDHWdW+AgwCXOQQwA20Uyu/I=
Subject key identifier:   AB:27:44:F1:2E:67:37:A0:C0:A0:75:9E:08:A1:BD:55:B2:71:22:03
Certificate issuer:       /CN=80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77
Certificate serial:       50669ACBB92D3860FFAFEBAD653EDE0A9FC74A41
Authority key identifier: 80:D1:2B:8D:1F:C4:93:DC:78:D6:A6:D2:3E:94:B6:8D:9D:AC:6A:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/3137302e38312e3136382e302f32342d3234203d3e203238313635.roa
Signing time:             Tue 29 Jul 2025 14:08:12 +0000
ROA not before:           Tue 29 Jul 2025 14:03:12 +0000
ROA not after:            Tue 28 Jul 2026 14:08:12 +0000
asID:                     28165
IP address blocks:        170.81.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.crl
                          rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 08 Aug 2025 22:28:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:66:9a:cb:b9:2d:38:60:ff:af:eb:ad:65:3e:de:0a:9f:c7:4a:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77
        Validity
            Not Before: Jul 29 14:03:12 2025 GMT
            Not After : Jul 28 14:08:12 2026 GMT
        Subject: CN=AB2744F12E6737A0C0A0759E08A1BD55B2712203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:19:9a:3f:cb:ff:67:a2:c0:7e:2e:ad:38:0d:
                    18:fc:af:bc:b8:8a:72:68:f6:e2:48:3c:c3:a5:6f:
                    7c:41:bd:75:7f:f3:3f:e2:5e:6e:bb:20:26:0d:e1:
                    37:fc:45:d6:42:93:34:22:56:fe:38:f2:70:b2:c2:
                    ec:0f:bb:96:58:13:02:e6:86:5a:70:36:a2:34:a7:
                    61:74:da:65:ee:95:7a:02:fc:36:95:26:7f:82:ec:
                    97:73:19:7b:1a:d7:48:21:63:72:e2:ef:92:fa:c3:
                    71:62:16:81:88:c3:14:c7:9e:63:f1:52:08:b3:a1:
                    6b:9e:4f:c7:12:7f:97:7b:92:04:ce:da:c0:c3:36:
                    70:3d:be:23:0a:6b:6a:53:dd:77:64:18:b6:1a:05:
                    87:74:29:9a:eb:4c:17:f5:d2:f7:0c:50:e4:d7:cc:
                    81:4c:43:56:6f:d9:a7:d1:b6:d5:08:e8:aa:43:de:
                    a2:fd:8b:13:2a:58:9d:0e:81:44:2e:1e:bc:ef:4a:
                    c8:03:3a:33:cc:f8:5d:fb:b6:c5:f5:7d:75:84:25:
                    67:0c:de:5c:2e:b4:97:87:32:11:5c:a0:e0:3e:c1:
                    be:e9:f5:05:15:60:4a:f9:03:bc:cb:4f:28:7f:d9:
                    96:88:65:c6:9b:3f:c9:94:c0:ee:90:15:08:2e:d4:
                    70:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:27:44:F1:2E:67:37:A0:C0:A0:75:9E:08:A1:BD:55:B2:71:22:03
            X509v3 Authority Key Identifier:
                keyid:80:D1:2B:8D:1F:C4:93:DC:78:D6:A6:D2:3E:94:B6:8D:9D:AC:6A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/3137302e38312e3136382e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:e6:71:78:7a:b5:39:49:1e:e7:d6:2e:2b:25:b4:25:83:cc:
         04:f5:a2:d4:8a:95:85:3f:77:33:e5:22:64:80:3c:04:58:f3:
         4b:b8:44:a5:84:24:d8:90:d6:eb:3a:17:83:34:48:d4:18:50:
         e5:5b:1b:46:42:9f:85:d8:4f:87:e2:37:f4:fe:77:c8:9d:7b:
         f5:fd:3e:3a:ef:a9:99:fe:13:45:5d:51:94:f8:99:cc:9e:04:
         5b:e1:f8:a3:78:5f:14:4c:ad:84:df:ba:4f:fd:89:26:fa:54:
         59:ae:3d:26:a2:f1:fd:a3:46:0e:36:19:36:7a:a5:fb:4a:4a:
         aa:b2:1e:58:e0:37:b0:6f:35:0f:a9:c0:79:4e:96:08:58:73:
         48:cf:f9:ac:99:99:6e:50:7f:97:33:92:4e:44:f3:59:b8:37:
         0c:6a:54:47:9b:fe:38:b1:f5:67:38:38:60:71:98:4b:93:3d:
         6f:27:ca:d4:f4:bb:25:75:93:24:a2:e9:dc:57:94:aa:10:7a:
         9d:17:27:70:79:1b:cb:a6:70:e9:8c:be:a2:bf:0d:ad:60:bd:
         27:09:b4:91:d4:a3:3c:74:02:42:d5:cf:25:f0:44:04:8c:e7:
         98:03:31:e5:12:cb:60:7a:b1:1a:bd:bf:ab:de:16:c7:38:7e:
         8d:30:09:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:06:57 2025 by rpki-client