Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/3137372e3138342e3139322e302f32342d3234203d3e203238313635.roa
File:                     3137372e3138342e3139322e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          1El7iOytRR5/FvXCCIZmFQU6aCgrvOrsPTwDTidDhvI=
Subject key identifier:   3B:29:18:AA:F4:18:2A:56:49:9F:CD:97:B6:4B:38:A9:81:02:F9:CA
Certificate issuer:       /CN=80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77
Certificate serial:       18FE3337690008FE4A83A26C124A9A74279A7ADB
Authority key identifier: 80:D1:2B:8D:1F:C4:93:DC:78:D6:A6:D2:3E:94:B6:8D:9D:AC:6A:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/3137372e3138342e3139322e302f32342d3234203d3e203238313635.roa
Signing time:             Tue 29 Jul 2025 14:08:15 +0000
ROA not before:           Tue 29 Jul 2025 14:03:15 +0000
ROA not after:            Tue 28 Jul 2026 14:08:15 +0000
asID:                     28165
IP address blocks:        177.184.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.crl
                          rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 08 Aug 2025 22:28:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:fe:33:37:69:00:08:fe:4a:83:a2:6c:12:4a:9a:74:27:9a:7a:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77
        Validity
            Not Before: Jul 29 14:03:15 2025 GMT
            Not After : Jul 28 14:08:15 2026 GMT
        Subject: CN=3B2918AAF4182A56499FCD97B64B38A98102F9CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a7:d7:77:9e:92:15:32:63:81:0f:04:6d:b6:
                    37:5a:2b:30:c6:ec:bd:98:b6:94:67:1c:3c:2d:5a:
                    12:6e:07:71:cd:ac:0e:ff:8e:95:58:70:0c:71:19:
                    0f:f4:6b:20:2d:9b:4e:f4:2f:d7:4b:7c:c7:c2:a9:
                    f1:2f:21:12:ff:0c:b4:51:50:fc:14:20:18:35:94:
                    a8:b6:80:a3:39:28:11:ba:69:2d:b7:ec:37:97:a5:
                    c2:52:85:cc:a2:d1:25:b2:9b:60:5d:b7:f6:94:c7:
                    ac:05:23:b4:90:88:9a:2b:f9:ad:0a:94:58:4d:65:
                    a5:8f:f1:e1:77:5d:5f:2c:56:51:52:b1:5e:77:37:
                    ef:24:4d:6f:f1:6e:39:9c:d3:e2:de:91:f1:e6:af:
                    2e:56:04:14:a5:d8:2b:03:df:46:32:58:ac:c6:20:
                    15:c8:95:8d:44:6c:40:c0:e1:46:a1:a9:1d:7c:10:
                    8b:d0:03:fc:95:0e:24:fe:02:59:42:41:07:e7:60:
                    3f:d9:d1:01:3b:b5:bf:7c:d1:c4:a1:c3:01:17:7f:
                    f2:0d:93:9e:e9:30:5f:31:2f:b3:c7:d2:b4:3e:a2:
                    2a:57:51:21:1c:89:67:36:c1:47:f9:79:3f:ac:28:
                    35:67:52:08:16:28:58:1d:26:58:90:a4:06:bd:ce:
                    3a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:29:18:AA:F4:18:2A:56:49:9F:CD:97:B6:4B:38:A9:81:02:F9:CA
            X509v3 Authority Key Identifier:
                keyid:80:D1:2B:8D:1F:C4:93:DC:78:D6:A6:D2:3E:94:B6:8D:9D:AC:6A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/3137372e3138342e3139322e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:fe:bd:ed:7d:bd:5a:df:6f:a4:a2:b9:f1:04:91:06:5d:d5:
         62:56:2f:08:71:a8:d7:5f:0a:a3:51:a8:77:50:dd:2c:76:4a:
         e1:d9:f8:0b:07:db:0c:b6:c7:2b:77:f6:37:c0:55:6a:a5:bd:
         f4:a4:ed:f8:69:b9:98:4c:c1:8b:45:01:cf:78:a6:32:9c:99:
         55:5b:38:1b:7b:c8:f2:83:ff:0f:53:63:b5:3d:4e:af:9d:6d:
         c9:f7:4c:ea:e2:91:86:fd:40:8b:1a:cb:f6:e2:6f:09:a1:38:
         5a:96:d8:ce:27:b6:d2:70:7e:2a:87:93:fa:dd:85:68:db:66:
         1b:c6:cb:5f:16:c9:5a:9d:fe:23:02:7a:22:b2:c3:10:42:83:
         cd:70:5e:85:57:56:24:2f:19:56:5e:32:89:f9:5f:d6:b3:2e:
         c6:59:d5:22:19:1b:96:93:3b:48:81:ed:3f:f7:49:84:41:f2:
         17:c5:09:d3:de:0b:0f:cf:bd:f0:9c:88:dc:07:01:db:35:c7:
         6b:6c:24:13:95:37:d6:94:a1:c2:c4:0e:09:db:14:b3:ea:0b:
         0e:2c:d3:1e:14:88:89:bc:55:74:2a:8b:88:7f:00:c6:a2:4d:
         db:16:fe:5b:77:ba:dc:50:82:3a:35:8c:15:4a:0d:e7:f0:f8:
         ef:3a:11:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:49:47 2025 by rpki-client