Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/3137372e3232322e32342e302f32342d3234203d3e203238313635.roa
File:                     3137372e3232322e32342e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          GEIkabiwg7uh/NI8aJn4xxf992J9Fm3N6f03X9jcVI0=
Subject key identifier:   6B:3F:F5:B4:8C:D9:CB:AC:6C:49:F3:26:C1:40:C0:23:C4:44:DD:7A
Certificate issuer:       /CN=80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77
Certificate serial:       4FD1C82263DEFFE795307AF6775EA5A5BF6BCED8
Authority key identifier: 80:D1:2B:8D:1F:C4:93:DC:78:D6:A6:D2:3E:94:B6:8D:9D:AC:6A:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/3137372e3232322e32342e302f32342d3234203d3e203238313635.roa
Signing time:             Tue 29 Jul 2025 14:08:16 +0000
ROA not before:           Tue 29 Jul 2025 14:03:16 +0000
ROA not after:            Tue 28 Jul 2026 14:08:16 +0000
asID:                     28165
IP address blocks:        177.222.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.crl
                          rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 15:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:d1:c8:22:63:de:ff:e7:95:30:7a:f6:77:5e:a5:a5:bf:6b:ce:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77
        Validity
            Not Before: Jul 29 14:03:16 2025 GMT
            Not After : Jul 28 14:08:16 2026 GMT
        Subject: CN=6B3FF5B48CD9CBAC6C49F326C140C023C444DD7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:68:c6:f7:d3:2d:9b:d2:b1:0d:8b:47:f1:e7:
                    f1:6e:00:e5:78:5d:c4:45:d4:43:6c:3a:99:0c:f4:
                    31:48:50:38:20:09:a3:93:5e:c8:cc:e7:2a:2a:87:
                    7b:13:85:3f:52:94:f7:0b:7e:29:f0:b9:82:7e:35:
                    e6:6d:49:79:ad:02:e9:65:2f:b4:0d:a5:cf:83:33:
                    69:c2:e4:8b:83:f0:dc:f4:b1:8d:5e:98:5f:a5:51:
                    02:0c:72:86:f7:6c:4c:70:ce:54:87:f3:15:68:3f:
                    e6:34:14:d0:22:ea:03:4a:0f:78:53:25:2c:12:96:
                    96:46:4e:be:da:3c:59:c2:1a:68:60:01:1d:f5:56:
                    c6:4e:a5:29:48:89:99:8a:0e:ee:ed:d7:69:7b:83:
                    58:1a:8c:a8:5c:c6:18:d9:3a:2b:0b:3e:9a:2e:ec:
                    55:66:af:a0:eb:fb:53:30:6d:b1:58:62:44:98:b4:
                    cd:34:b8:d4:8f:c5:61:73:66:88:08:7a:89:6d:98:
                    08:d1:67:b9:5e:e1:d8:ff:50:fa:88:61:20:5b:0b:
                    8a:56:77:a4:f8:5b:4e:35:70:d8:65:ff:04:e5:13:
                    7e:65:f0:65:55:50:f5:b7:04:0f:c1:f2:71:df:f7:
                    7d:d8:f9:6c:ee:1e:4a:f9:5f:c6:a5:a0:1a:2a:73:
                    28:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:3F:F5:B4:8C:D9:CB:AC:6C:49:F3:26:C1:40:C0:23:C4:44:DD:7A
            X509v3 Authority Key Identifier:
                keyid:80:D1:2B:8D:1F:C4:93:DC:78:D6:A6:D2:3E:94:B6:8D:9D:AC:6A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/3137372e3232322e32342e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:fa:71:6f:30:3b:d3:9c:5e:92:ef:03:d4:c0:b4:28:ec:34:
         a9:fb:6e:34:29:a4:05:ed:60:45:69:30:3e:29:26:7d:d1:c8:
         92:69:66:a7:84:09:09:34:d5:03:a0:33:39:6e:9d:95:fe:42:
         e1:c4:a9:f9:6a:63:50:ea:03:c1:62:3d:2e:cc:9c:46:0f:21:
         c4:55:c1:e9:84:36:e2:9b:04:26:d6:0f:98:21:b5:ce:16:f4:
         db:34:92:5f:57:db:a1:ce:60:0c:4d:68:80:d4:d0:d0:8a:ad:
         ae:51:69:bd:73:66:ec:cb:bd:26:59:c1:f9:f3:18:3b:54:02:
         32:b8:60:5c:ee:29:fc:ff:0e:68:7c:0c:58:cc:91:ef:c7:7e:
         4d:d6:60:94:10:fa:43:ef:3b:7c:5f:3f:7b:e6:42:d3:01:22:
         73:14:6f:b2:c5:d1:8a:81:8c:5f:bb:61:91:b4:68:cb:08:49:
         4e:d9:ff:1c:56:50:12:88:db:b8:1e:c5:6e:7d:cb:5c:c4:c4:
         2a:f0:6e:70:d6:f8:de:d4:e7:80:54:55:5c:e3:20:3d:ec:74:
         44:4d:6e:12:c2:4f:d7:3e:d8:b3:f7:48:b4:59:82:71:7b:07:
         e1:3c:bd:a5:69:7f:50:90:6b:8a:91:8a:3b:e4:cc:30:c4:29:
         d0:d9:88:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:15:52 2025 by rpki-client