Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/3137372e3138342e3230342e302f32332d3233203d3e203238313635.roa
File:                     3137372e3138342e3230342e302f32332d3233203d3e203238313635.roa (raw, json)
Hash identifier:          itmSL4E8XWqo5osVt0iYWhwDmfq4IAtJZmYqDp8Qmnc=
Subject key identifier:   95:91:0A:74:E8:5C:7E:B7:A5:69:2B:8C:A3:4C:37:A9:54:BF:78:3A
Certificate issuer:       /CN=80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77
Certificate serial:       0495776000F890C0D9687B7CF0468181D813A46B
Authority key identifier: 80:D1:2B:8D:1F:C4:93:DC:78:D6:A6:D2:3E:94:B6:8D:9D:AC:6A:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/3137372e3138342e3230342e302f32332d3233203d3e203238313635.roa
Signing time:             Tue 29 Jul 2025 14:08:15 +0000
ROA not before:           Tue 29 Jul 2025 14:03:15 +0000
ROA not after:            Tue 28 Jul 2026 14:08:15 +0000
asID:                     28165
IP address blocks:        177.184.204.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.crl
                          rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 Aug 2025 10:51:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:95:77:60:00:f8:90:c0:d9:68:7b:7c:f0:46:81:81:d8:13:a4:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77
        Validity
            Not Before: Jul 29 14:03:15 2025 GMT
            Not After : Jul 28 14:08:15 2026 GMT
        Subject: CN=95910A74E85C7EB7A5692B8CA34C37A954BF783A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7a:46:fc:a2:e0:3b:41:08:98:8b:7b:23:fc:
                    12:36:7e:58:e4:43:ec:a3:87:38:79:66:63:21:1c:
                    1d:53:9f:0d:90:9e:75:ba:62:f9:08:0a:f7:6b:d3:
                    f8:87:ee:f9:5f:1e:a8:89:52:2b:69:02:1b:f8:f8:
                    8b:1a:45:ac:b3:49:9c:ae:31:44:8a:f5:3c:ce:10:
                    ca:69:d8:44:8c:f3:9d:9b:ab:c2:70:bb:75:ba:8a:
                    f5:18:28:0b:d5:ee:b0:06:df:e5:73:0d:ba:5f:58:
                    d8:8e:1d:16:48:1a:07:0c:fd:89:f6:69:aa:40:07:
                    7a:96:c6:4a:0a:77:dc:ed:52:67:fc:c9:8c:a4:b2:
                    9f:cd:a2:1d:96:6d:12:df:5f:e3:ba:7e:1a:37:31:
                    e2:b5:1a:82:bc:e8:b9:09:f5:c0:bf:09:1a:07:31:
                    b5:ee:05:dd:cc:37:89:3a:0d:fb:52:c2:3c:81:55:
                    fe:f4:3f:68:9b:1f:f6:69:42:94:49:6c:e1:df:ed:
                    d1:2e:c4:8d:ed:a0:1c:55:d8:d7:b3:0f:fc:40:0f:
                    04:c5:01:0c:e3:b3:5f:08:f6:27:0b:3b:0c:28:6e:
                    8a:9d:e6:0b:84:d4:5f:9c:f2:c4:8b:04:62:42:71:
                    70:27:42:bd:af:da:b0:49:2d:48:c7:e4:10:12:33:
                    18:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:91:0A:74:E8:5C:7E:B7:A5:69:2B:8C:A3:4C:37:A9:54:BF:78:3A
            X509v3 Authority Key Identifier:
                keyid:80:D1:2B:8D:1F:C4:93:DC:78:D6:A6:D2:3E:94:B6:8D:9D:AC:6A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/3137372e3138342e3230342e302f32332d3233203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:c8:58:d0:70:1f:10:4e:2b:5b:83:63:da:41:4e:7f:14:37:
         25:fa:50:c5:56:83:21:9b:ea:39:b8:dc:b6:06:d7:20:ac:b9:
         33:49:75:52:4e:65:bd:70:02:b8:c1:e5:b1:14:7f:87:35:63:
         58:61:3a:e9:99:6b:e4:0a:a1:72:1a:95:b7:10:58:a5:5d:59:
         91:7d:89:73:53:56:a6:98:30:28:e4:42:ce:64:dd:8b:f9:e7:
         a8:87:a0:67:02:45:4a:05:cc:42:dd:78:7d:2d:ac:68:76:83:
         12:a0:42:25:7b:bb:96:bc:f8:d7:9f:06:57:90:2c:9b:f2:66:
         da:97:dc:91:7d:78:42:ae:54:41:72:dd:a9:ae:24:9a:9e:2f:
         6e:96:0f:ee:3d:2b:ab:5f:78:20:a8:a1:22:ae:b0:5a:c8:96:
         10:5a:2b:32:e2:b7:44:66:fe:4e:ca:fe:1b:98:35:77:9d:42:
         7b:16:45:84:a1:3e:8a:07:50:d1:6f:a3:dc:27:63:65:8e:9e:
         a1:7e:a6:a3:1c:63:c2:54:6b:2f:38:34:70:89:ea:7a:6c:60:
         7f:1f:1a:6f:93:09:a1:a2:f3:19:85:5d:d4:b0:bc:5a:77:a8:
         8a:5b:2a:09:f5:39:0a:d8:e0:b8:af:3e:f6:d5:84:7e:77:46:
         7c:60:8b:c4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBJV3YAD4kMDZaHt88EaBgdgTpGswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBEMTJCOEQxRkM0OTNEQzc4RDZBNkQyM0U5NEI2OEQ5
REFDNkE3NzAeFw0yNTA3MjkxNDAzMTVaFw0yNjA3MjgxNDA4MTVaMDMxMTAvBgNV
BAMTKDk1OTEwQTc0RTg1QzdFQjdBNTY5MkI4Q0EzNEMzN0E5NTRCRjc4M0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsekb8ouA7QQiYi3sj/BI2fljk
Q+yjhzh5ZmMhHB1Tnw2QnnW6YvkICvdr0/iH7vlfHqiJUitpAhv4+IsaRayzSZyu
MUSK9TzOEMpp2ESM852bq8Jwu3W6ivUYKAvV7rAG3+VzDbpfWNiOHRZIGgcM/Yn2
aapAB3qWxkoKd9ztUmf8yYyksp/Noh2WbRLfX+O6fho3MeK1GoK86LkJ9cC/CRoH
MbXuBd3MN4k6DftSwjyBVf70P2ibH/ZpQpRJbOHf7dEuxI3toBxV2NezD/xADwTF
AQzjs18I9icLOwwoboqd5guE1F+c8sSLBGJCcXAnQr2v2rBJLUjH5BASMxj1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUlZEKdOhcfrelaSuMo0w3qVS/eDowHwYDVR0j
BBgwFoAUgNErjR/Ek9x41qbSPpS2jZ2sancwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDJNUlZWOFd3SkVEYUROcFR6bTlqckg2N050dDNIQ0xHM1Yyd1dmRXpr
b0QvMy84MEQxMkI4RDFGQzQ5M0RDNzhENkE2RDIzRTk0QjY4RDlEQUM2QTc3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgwRDEyQjhEMUZDNDkzREM3
OEQ2QTZEMjNFOTRCNjhEOURBQzZBNzcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QyTVJWVjhXd0pFRGFETnBUem05anJINjdOdHQzSENMRzNWMndXZkV6a29ELzMv
MzEzNzM3MmUzMTM4MzQyZTMyMzAzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzgzMTM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGxuMwwDQYJKoZIhvcNAQELBQADggEBAILIWNBw
HxBOK1uDY9pBTn8UNyX6UMVWgyGb6jm43LYG1yCsuTNJdVJOZb1wArjB5bEUf4c1
Y1hhOumZa+QKoXIalbcQWKVdWZF9iXNTVqaYMCjkQs5k3Yv556iHoGcCRUoFzELd
eH0trGh2gxKgQiV7u5a8+NefBleQLJvyZtqX3JF9eEKuVEFy3amuJJqeL26WD+49
K6tfeCCooSKusFrIlhBaKzLit0Rm/k7K/huYNXedQnsWRYShPooHUNFvo9wnY2WO
nqF+pqMcY8JUay84NHCJ6npsYH8fGm+TCaGi8xmFXdSwvFp3qIpbKgn1OQrY4Liv
PvbVhH53Rnxgi8Q=
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:59:42 2025 by rpki-client