Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/3137372e3232322e32362e302f32342d3234203d3e203238313635.roa
File:                     3137372e3232322e32362e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          vn5h8t0yX+tq46SGiOTZkkhUjeCID2gWBnS9BvQTtm8=
Subject key identifier:   AD:53:11:B0:E3:F7:B2:51:09:8A:D4:56:E2:DB:A4:95:5D:6B:38:C3
Certificate issuer:       /CN=80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77
Certificate serial:       2C8E49D6E88A8CB9DCA7F8D1FCCDC72E0DE4F12E
Authority key identifier: 80:D1:2B:8D:1F:C4:93:DC:78:D6:A6:D2:3E:94:B6:8D:9D:AC:6A:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/3137372e3232322e32362e302f32342d3234203d3e203238313635.roa
Signing time:             Tue 29 Jul 2025 14:08:14 +0000
ROA not before:           Tue 29 Jul 2025 14:03:14 +0000
ROA not after:            Tue 28 Jul 2026 14:08:14 +0000
asID:                     28165
IP address blocks:        177.222.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.crl
                          rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 15:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:8e:49:d6:e8:8a:8c:b9:dc:a7:f8:d1:fc:cd:c7:2e:0d:e4:f1:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77
        Validity
            Not Before: Jul 29 14:03:14 2025 GMT
            Not After : Jul 28 14:08:14 2026 GMT
        Subject: CN=AD5311B0E3F7B251098AD456E2DBA4955D6B38C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0e:73:f7:85:80:fb:ba:33:6a:d0:0e:1b:9e:
                    1c:0c:c9:20:be:05:fa:9a:72:8a:35:27:4f:d4:ef:
                    8a:5f:1c:54:a7:f7:a7:b5:5d:3a:86:e7:5e:b6:2c:
                    91:42:62:1b:12:1b:c7:f5:26:91:c4:f3:30:0b:ea:
                    02:cd:20:e3:3b:a4:0f:ca:16:c3:c6:15:d2:4d:14:
                    d6:5f:2c:64:f8:86:db:3c:fe:db:1b:0b:97:6c:3e:
                    8c:e4:ba:3f:a1:2d:dd:d3:44:f7:8d:61:2c:84:d9:
                    f3:05:50:5e:0f:2d:47:bf:a5:d1:0a:f6:ad:2c:dc:
                    a0:60:0b:ff:d5:06:ed:3a:a0:d3:28:d2:6c:c8:a1:
                    60:87:d9:11:68:17:df:53:c4:68:25:9f:68:05:03:
                    1e:9c:5f:1b:be:58:a1:b1:56:9d:47:17:ec:57:fe:
                    a7:84:43:de:32:8e:29:07:42:7b:3e:c8:65:3b:d7:
                    31:00:46:65:67:26:dc:5c:78:57:12:97:3e:57:16:
                    73:a7:f6:f6:76:0a:60:3b:75:90:77:b0:21:82:b5:
                    27:30:b9:91:4d:6b:be:ef:8f:7d:5d:bf:b7:08:35:
                    8d:f1:63:04:1e:40:be:0f:11:27:bf:28:db:a0:75:
                    07:bc:86:79:af:33:f7:50:b9:a5:5c:26:f2:17:c4:
                    c9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:53:11:B0:E3:F7:B2:51:09:8A:D4:56:E2:DB:A4:95:5D:6B:38:C3
            X509v3 Authority Key Identifier:
                keyid:80:D1:2B:8D:1F:C4:93:DC:78:D6:A6:D2:3E:94:B6:8D:9D:AC:6A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/3137372e3232322e32362e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:03:d4:0a:42:9d:e9:a8:e2:a9:d1:cd:c9:f5:8e:84:10:6a:
         cc:de:09:15:e3:48:04:f3:42:ef:2c:f4:bb:00:ce:d8:87:9a:
         2c:98:7d:ec:e7:c1:c5:e6:76:36:5e:3f:44:13:55:a6:aa:e1:
         d0:93:47:1e:21:8f:c5:b3:bb:22:cc:8f:c3:14:6f:4e:2a:2f:
         a2:0a:7f:96:b8:cb:5b:93:e0:6d:7b:10:f9:eb:5e:f8:c7:30:
         53:1d:a8:aa:3f:8d:a7:a5:cb:cc:f0:b6:72:aa:13:94:3f:b7:
         aa:a3:14:b5:58:38:90:d0:a2:f9:ec:7c:27:1e:0b:53:34:e0:
         bb:d7:b5:cb:49:8d:7f:78:e1:db:a7:c2:ea:05:fe:ee:29:7e:
         4a:20:fa:f9:46:68:87:0d:e0:f9:ed:a4:86:c8:31:55:fa:3a:
         91:85:87:58:03:5f:52:7a:27:81:e0:c1:4b:ca:be:7a:ff:7a:
         15:08:e8:f0:00:cc:5e:23:4f:e9:26:74:51:75:2d:57:6f:24:
         66:22:3c:7a:06:24:9a:f4:b0:ec:5a:d2:2a:d7:ec:07:db:97:
         16:3a:ff:a7:68:76:c6:a9:35:1a:68:3c:c5:49:73:42:da:97:
         bd:c3:94:74:8f:41:96:73:6a:a6:4b:95:8a:f7:b9:43:11:2d:
         de:4f:16:7f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIULI5J1uiKjLncp/jR/M3HLg3k8S4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBEMTJCOEQxRkM0OTNEQzc4RDZBNkQyM0U5NEI2OEQ5
REFDNkE3NzAeFw0yNTA3MjkxNDAzMTRaFw0yNjA3MjgxNDA4MTRaMDMxMTAvBgNV
BAMTKEFENTMxMUIwRTNGN0IyNTEwOThBRDQ1NkUyREJBNDk1NUQ2QjM4QzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHDnP3hYD7ujNq0A4bnhwMySC+
Bfqacoo1J0/U74pfHFSn96e1XTqG5162LJFCYhsSG8f1JpHE8zAL6gLNIOM7pA/K
FsPGFdJNFNZfLGT4hts8/tsbC5dsPozkuj+hLd3TRPeNYSyE2fMFUF4PLUe/pdEK
9q0s3KBgC//VBu06oNMo0mzIoWCH2RFoF99TxGgln2gFAx6cXxu+WKGxVp1HF+xX
/qeEQ94yjikHQns+yGU71zEARmVnJtxceFcSlz5XFnOn9vZ2CmA7dZB3sCGCtScw
uZFNa77vj31dv7cINY3xYwQeQL4PESe/KNugdQe8hnmvM/dQuaVcJvIXxMl1AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUrVMRsOP3slEJitRW4tuklV1rOMMwHwYDVR0j
BBgwFoAUgNErjR/Ek9x41qbSPpS2jZ2sancwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDJNUlZWOFd3SkVEYUROcFR6bTlqckg2N050dDNIQ0xHM1Yyd1dmRXpr
b0QvMy84MEQxMkI4RDFGQzQ5M0RDNzhENkE2RDIzRTk0QjY4RDlEQUM2QTc3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgwRDEyQjhEMUZDNDkzREM3
OEQ2QTZEMjNFOTRCNjhEOURBQzZBNzcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QyTVJWVjhXd0pFRGFETnBUem05anJINjdOdHQzSENMRzNWMndXZkV6a29ELzMv
MzEzNzM3MmUzMjMyMzIyZTMyMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzEzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsd4aMA0GCSqGSIb3DQEBCwUAA4IBAQB3A9QKQp3p
qOKp0c3J9Y6EEGrM3gkV40gE80LvLPS7AM7Yh5osmH3s58HF5nY2Xj9EE1WmquHQ
k0ceIY/Fs7sizI/DFG9OKi+iCn+WuMtbk+BtexD56174xzBTHaiqP42npcvM8LZy
qhOUP7eqoxS1WDiQ0KL57HwnHgtTNOC717XLSY1/eOHbp8LqBf7uKX5KIPr5RmiH
DeD57aSGyDFV+jqRhYdYA19SeieB4MFLyr56/3oVCOjwAMxeI0/pJnRRdS1XbyRm
Ijx6BiSa9LDsWtIq1+wH25cWOv+naHbGqTUaaDzFSXNC2pe9w5R0j0GWc2qmS5WK
97lDES3eTxZ/
-----END CERTIFICATE-----
Generated at Fri Aug 8 19:40:11 2025 by rpki-client