Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/3137372e3138342e3230362e302f32342d3234203d3e203238313635.roa
File:                     3137372e3138342e3230362e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          VhbDQnoLfWeDlqXfNxwzk+i1/XqcMF9Y83okWAufFKE=
Subject key identifier:   85:61:0F:87:18:CF:31:21:D9:0E:CF:D8:54:FD:AD:4C:31:31:71:2A
Certificate issuer:       /CN=80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77
Certificate serial:       4AE02DB92485F4E909ABA208E8064336114D310B
Authority key identifier: 80:D1:2B:8D:1F:C4:93:DC:78:D6:A6:D2:3E:94:B6:8D:9D:AC:6A:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/3137372e3138342e3230362e302f32342d3234203d3e203238313635.roa
Signing time:             Tue 29 Jul 2025 14:08:11 +0000
ROA not before:           Tue 29 Jul 2025 14:03:11 +0000
ROA not after:            Tue 28 Jul 2026 14:08:11 +0000
asID:                     28165
IP address blocks:        177.184.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.crl
                          rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 15:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e0:2d:b9:24:85:f4:e9:09:ab:a2:08:e8:06:43:36:11:4d:31:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77
        Validity
            Not Before: Jul 29 14:03:11 2025 GMT
            Not After : Jul 28 14:08:11 2026 GMT
        Subject: CN=85610F8718CF3121D90ECFD854FDAD4C3131712A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bd:42:02:44:20:d0:09:b6:b1:a5:26:03:98:
                    60:b2:cb:7c:06:80:66:a0:8b:b0:92:52:5f:66:c3:
                    e3:47:f0:48:55:14:61:d1:d9:d4:f2:9a:5a:70:26:
                    95:1f:82:6a:56:a1:9f:15:d0:96:97:d5:35:eb:39:
                    3d:53:c4:1b:0f:8d:a4:0a:f6:36:4b:3c:f8:0d:33:
                    1a:15:f2:58:aa:f5:b2:7e:3c:1a:d2:74:ee:b8:09:
                    e4:a2:03:d2:f5:b9:83:c6:05:16:a3:6a:53:15:28:
                    ce:67:a5:cd:35:a4:69:9a:d4:63:c2:09:ea:35:db:
                    54:ae:53:48:91:ab:ce:ad:82:73:db:60:83:b8:8e:
                    08:61:11:49:e1:81:a7:3c:77:c2:e0:b6:f4:40:c3:
                    03:64:39:61:9c:59:35:3f:b5:03:6c:3b:ee:ca:63:
                    73:f9:89:14:be:30:32:42:2b:10:18:08:02:57:0c:
                    3e:82:b0:e4:a4:9c:93:45:93:f4:9d:cf:80:65:46:
                    3a:85:6b:b4:ae:9b:03:d2:ad:e0:9f:cf:f8:5b:ef:
                    5b:2b:88:17:a1:38:54:86:10:84:3d:e0:3e:57:0f:
                    8d:8b:b5:d3:31:8b:80:e6:ed:dd:29:bb:0f:f2:c8:
                    7b:b8:8d:b6:20:e3:c0:c1:fb:79:6c:fe:21:02:0d:
                    f6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:61:0F:87:18:CF:31:21:D9:0E:CF:D8:54:FD:AD:4C:31:31:71:2A
            X509v3 Authority Key Identifier:
                keyid:80:D1:2B:8D:1F:C4:93:DC:78:D6:A6:D2:3E:94:B6:8D:9D:AC:6A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/3137372e3138342e3230362e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:cc:38:73:62:1a:4d:5f:ac:7f:01:55:1c:24:0a:83:c3:ac:
         de:48:f4:83:dd:e0:62:e3:67:d9:53:b7:0f:45:5b:43:24:cd:
         0e:79:68:48:8a:c8:2a:99:c9:51:60:df:db:9c:0f:6e:d5:c5:
         75:17:38:51:0b:64:c3:73:ca:34:6f:44:e0:1e:08:e7:11:a6:
         83:81:62:e8:b0:2f:c6:66:07:7b:25:12:17:7d:3f:29:25:6a:
         52:c5:62:d2:6b:95:41:5f:7d:de:0f:3a:e2:e8:9b:53:ce:7d:
         d5:b4:a0:f1:b7:fb:9e:ae:63:37:b0:e5:2e:a7:df:fb:6a:86:
         38:3c:f0:ec:b9:ba:58:cc:a9:51:86:a9:9e:62:19:64:13:d8:
         81:bb:7f:ef:03:ef:11:16:1a:33:03:3e:b8:08:30:ae:1b:68:
         79:7a:6e:1f:11:42:0b:8e:24:ee:1f:f7:b8:21:38:91:84:f9:
         d2:7c:fb:de:b6:df:aa:ca:cc:68:37:7b:83:94:a5:82:d0:3f:
         b6:88:7d:5a:c0:0c:a3:0f:2f:2a:8e:52:47:76:22:3d:e1:0c:
         61:47:34:1e:aa:e1:f0:08:08:93:b9:01:fd:58:d0:3f:1f:2f:
         dc:3a:6c:78:68:db:30:cf:cc:3e:8b:60:3c:53:f1:48:22:f7:
         77:a2:80:4f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUSuAtuSSF9OkJq6II6AZDNhFNMQswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBEMTJCOEQxRkM0OTNEQzc4RDZBNkQyM0U5NEI2OEQ5
REFDNkE3NzAeFw0yNTA3MjkxNDAzMTFaFw0yNjA3MjgxNDA4MTFaMDMxMTAvBgNV
BAMTKDg1NjEwRjg3MThDRjMxMjFEOTBFQ0ZEODU0RkRBRDRDMzEzMTcxMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpvUICRCDQCbaxpSYDmGCyy3wG
gGagi7CSUl9mw+NH8EhVFGHR2dTymlpwJpUfgmpWoZ8V0JaX1TXrOT1TxBsPjaQK
9jZLPPgNMxoV8liq9bJ+PBrSdO64CeSiA9L1uYPGBRajalMVKM5npc01pGma1GPC
Ceo121SuU0iRq86tgnPbYIO4jghhEUnhgac8d8LgtvRAwwNkOWGcWTU/tQNsO+7K
Y3P5iRS+MDJCKxAYCAJXDD6CsOSknJNFk/Sdz4BlRjqFa7SumwPSreCfz/hb71sr
iBehOFSGEIQ94D5XD42LtdMxi4Dm7d0puw/yyHu4jbYg48DB+3ls/iECDfaTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUhWEPhxjPMSHZDs/YVP2tTDExcSowHwYDVR0j
BBgwFoAUgNErjR/Ek9x41qbSPpS2jZ2sancwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDJNUlZWOFd3SkVEYUROcFR6bTlqckg2N050dDNIQ0xHM1Yyd1dmRXpr
b0QvMy84MEQxMkI4RDFGQzQ5M0RDNzhENkE2RDIzRTk0QjY4RDlEQUM2QTc3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgwRDEyQjhEMUZDNDkzREM3
OEQ2QTZEMjNFOTRCNjhEOURBQzZBNzcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QyTVJWVjhXd0pFRGFETnBUem05anJINjdOdHQzSENMRzNWMndXZkV6a29ELzMv
MzEzNzM3MmUzMTM4MzQyZTMyMzAzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzMTM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxuM4wDQYJKoZIhvcNAQELBQADggEBAIPMOHNi
Gk1frH8BVRwkCoPDrN5I9IPd4GLjZ9lTtw9FW0MkzQ55aEiKyCqZyVFg39ucD27V
xXUXOFELZMNzyjRvROAeCOcRpoOBYuiwL8ZmB3slEhd9PyklalLFYtJrlUFffd4P
OuLom1POfdW0oPG3+56uYzew5S6n3/tqhjg88Oy5uljMqVGGqZ5iGWQT2IG7f+8D
7xEWGjMDPrgIMK4baHl6bh8RQguOJO4f97ghOJGE+dJ8+96236rKzGg3e4OUpYLQ
P7aIfVrADKMPLyqOUkd2Ij3hDGFHNB6q4fAICJO5Af1Y0D8fL9w6bHho2zDPzD6L
YDxT8Ugi93eigE8=
-----END CERTIFICATE-----
Generated at Fri Aug 8 20:49:09 2025 by rpki-client