Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/3137372e3138342e3139322e302f32332d3233203d3e203238313635.roa
File:                     3137372e3138342e3139322e302f32332d3233203d3e203238313635.roa (raw, json)
Hash identifier:          So/TpCdvCrlHCni+/MDldDMCwc18xoknuPVoN56qkNc=
Subject key identifier:   F1:9C:CE:62:54:AF:B1:9A:3F:2E:A5:57:1B:DE:4E:BF:1D:33:3E:41
Certificate issuer:       /CN=80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77
Certificate serial:       728880B0F6B2FFAC7D68D2821E2FB7180CC04B21
Authority key identifier: 80:D1:2B:8D:1F:C4:93:DC:78:D6:A6:D2:3E:94:B6:8D:9D:AC:6A:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/3137372e3138342e3139322e302f32332d3233203d3e203238313635.roa
Signing time:             Tue 29 Jul 2025 14:08:11 +0000
ROA not before:           Tue 29 Jul 2025 14:03:11 +0000
ROA not after:            Tue 28 Jul 2026 14:08:11 +0000
asID:                     28165
IP address blocks:        177.184.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.crl
                          rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 Aug 2025 10:51:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:88:80:b0:f6:b2:ff:ac:7d:68:d2:82:1e:2f:b7:18:0c:c0:4b:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77
        Validity
            Not Before: Jul 29 14:03:11 2025 GMT
            Not After : Jul 28 14:08:11 2026 GMT
        Subject: CN=F19CCE6254AFB19A3F2EA5571BDE4EBF1D333E41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:37:b4:af:e6:18:5e:88:85:ae:96:43:29:32:
                    71:e5:68:06:f0:4f:6b:85:08:48:6b:26:81:37:8d:
                    bc:97:59:94:16:05:98:33:cd:6c:92:e1:18:8d:f4:
                    cc:4e:4f:4b:c1:45:9b:11:2e:a0:83:75:4e:b8:3e:
                    e4:84:77:d4:be:e5:17:d1:84:6c:1b:4e:9e:a1:ea:
                    45:60:a7:4e:c5:b4:45:ac:ee:74:27:01:52:ad:eb:
                    b8:c8:bc:bb:a0:e2:a8:23:0e:1b:de:28:de:d3:ad:
                    5c:e9:13:1e:0a:09:24:b6:80:8c:71:d7:36:40:24:
                    d5:a8:bf:23:ad:fa:f5:f2:1f:84:30:a2:fc:ab:a0:
                    85:84:a5:bd:c4:76:97:06:72:7f:e8:c8:85:07:74:
                    12:44:ae:d8:05:e0:94:c3:c1:0d:72:d6:68:94:72:
                    6d:95:8c:e4:cc:27:4d:b3:2f:18:55:2c:4d:9c:ec:
                    6c:e1:fe:76:19:90:c8:7f:3a:08:aa:95:ff:8d:8a:
                    86:fc:0f:a9:d9:19:31:ff:d3:f6:81:f8:4c:c6:0a:
                    b4:8a:d0:be:4a:68:1b:78:bd:b1:f4:cf:44:18:fa:
                    cb:50:59:cb:e3:5d:42:92:f0:ab:c9:07:fb:ca:34:
                    7e:c7:a1:ac:15:2e:69:f6:4b:3a:6d:9b:20:de:be:
                    76:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:9C:CE:62:54:AF:B1:9A:3F:2E:A5:57:1B:DE:4E:BF:1D:33:3E:41
            X509v3 Authority Key Identifier:
                keyid:80:D1:2B:8D:1F:C4:93:DC:78:D6:A6:D2:3E:94:B6:8D:9D:AC:6A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/3137372e3138342e3139322e302f32332d3233203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:df:f9:01:0b:83:a2:5f:aa:be:cf:c7:f5:4b:8a:bc:21:77:
         5b:39:17:32:6c:97:20:8f:7b:7d:77:3c:82:24:2b:7a:97:4c:
         d1:61:e3:7a:a9:ef:19:fb:21:d7:bd:26:c8:21:4e:ec:6b:9f:
         7c:8e:a6:e4:6d:a4:99:63:aa:f2:89:71:7b:40:86:1d:3a:74:
         a6:90:fc:dc:eb:9b:9b:ae:d6:0f:a2:28:4e:97:c3:81:47:e7:
         72:cd:6b:85:19:83:d7:90:09:27:8d:7b:8d:74:e2:92:bf:5e:
         b8:b4:bb:73:8a:6f:4f:a5:f3:c0:d3:d0:89:b8:fd:b2:2b:28:
         69:0f:26:29:fd:92:5f:03:4e:8b:67:8c:e9:0d:42:09:80:6e:
         88:3f:0d:32:06:8e:df:4b:f9:23:e7:0d:e1:bb:85:e7:b8:17:
         74:1d:0d:11:1c:04:b9:19:af:25:ad:aa:d5:b0:d0:18:b4:81:
         d3:36:1d:9e:f2:27:40:f4:ab:9f:cd:db:b5:6d:c1:64:8e:6d:
         40:bc:c2:97:3a:a6:44:30:96:6e:23:7e:3c:6c:f7:ef:d3:03:
         57:c0:44:54:7d:61:3c:b4:73:61:62:32:eb:d7:82:8b:8b:58:
         63:41:b5:7b:a6:04:8a:b7:23:ad:86:fe:a7:c0:e6:0b:d9:48:
         f6:03:7d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:09:16 2025 by rpki-client