Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/3137302e38312e3136392e302f32342d3234203d3e203238313635.roa
File:                     3137302e38312e3136392e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          CZU6we1OOlw3AiPFxFxtObvHEM7DCBJH80pRlsekBc8=
Subject key identifier:   C4:70:8E:D9:B7:9C:F0:04:93:64:F2:1E:0E:90:28:6B:4E:14:90:8A
Certificate issuer:       /CN=80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77
Certificate serial:       05F3340EB702730DA4B8027135C951F69FB1A287
Authority key identifier: 80:D1:2B:8D:1F:C4:93:DC:78:D6:A6:D2:3E:94:B6:8D:9D:AC:6A:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/3137302e38312e3136392e302f32342d3234203d3e203238313635.roa
Signing time:             Tue 29 Jul 2025 14:08:19 +0000
ROA not before:           Tue 29 Jul 2025 14:03:19 +0000
ROA not after:            Tue 28 Jul 2026 14:08:19 +0000
asID:                     28165
IP address blocks:        170.81.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.crl
                          rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 17:09:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:f3:34:0e:b7:02:73:0d:a4:b8:02:71:35:c9:51:f6:9f:b1:a2:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77
        Validity
            Not Before: Jul 29 14:03:19 2025 GMT
            Not After : Jul 28 14:08:19 2026 GMT
        Subject: CN=C4708ED9B79CF0049364F21E0E90286B4E14908A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1c:4d:75:bd:47:1b:49:63:9b:ac:40:2c:9b:
                    b7:69:e2:91:83:b6:ae:83:6f:e2:50:f3:c6:cb:50:
                    da:86:f5:39:88:bb:9f:6d:a8:44:90:9a:b1:5d:01:
                    a5:4e:a6:16:de:df:ad:a4:c0:58:21:21:3b:da:06:
                    eb:ed:a8:88:21:27:2d:12:a5:ee:ba:96:1c:ea:80:
                    2d:bf:2a:ff:57:a6:3f:2f:b9:0e:d3:d5:38:ea:c3:
                    33:f9:a0:0b:45:7b:2e:9e:0a:8d:40:0a:44:a2:81:
                    69:c6:47:28:1e:65:36:8a:b2:4f:35:aa:98:84:33:
                    d3:ee:14:72:a9:88:1f:79:8d:96:82:a1:3b:0f:e1:
                    49:dc:a6:a5:4d:7b:38:f9:05:c3:c4:5d:5b:84:c0:
                    f3:31:de:11:f9:53:85:f3:7c:88:8d:94:2b:33:ef:
                    56:89:6d:a5:22:fe:c1:21:c1:32:66:e5:f1:b3:a8:
                    c8:24:90:43:db:8b:1e:08:19:b5:d6:c4:f4:80:24:
                    03:80:cb:03:37:3a:20:0c:c0:7a:f1:9e:58:d7:33:
                    f9:bf:d2:40:cb:75:e6:70:b6:5d:04:3e:ef:6e:dc:
                    a9:52:e3:fb:cf:89:2a:b6:12:94:c7:9e:89:2e:94:
                    5b:f4:c2:f6:ef:03:63:a6:34:1a:61:ef:79:6f:ec:
                    3b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:70:8E:D9:B7:9C:F0:04:93:64:F2:1E:0E:90:28:6B:4E:14:90:8A
            X509v3 Authority Key Identifier:
                keyid:80:D1:2B:8D:1F:C4:93:DC:78:D6:A6:D2:3E:94:B6:8D:9D:AC:6A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/3137302e38312e3136392e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:06:f7:d0:23:9d:35:d8:1e:c4:fb:7d:91:93:de:c5:4f:09:
         8e:dc:9f:f8:8b:c7:97:c9:5c:6e:0d:a8:36:11:23:25:55:83:
         00:67:90:82:18:19:4e:35:58:5d:79:41:46:37:22:99:8e:cc:
         0d:f0:25:68:c5:26:f6:c3:d1:29:d3:24:62:f7:07:aa:4c:94:
         32:ba:28:bb:e8:30:fb:1b:1d:c3:56:61:3d:b4:6b:36:ab:0a:
         5e:41:2c:62:0c:bd:ca:e4:df:b0:dc:17:5a:5b:a6:12:61:e5:
         9e:42:d1:14:f6:64:90:3e:75:4a:33:31:9d:ae:26:58:85:43:
         20:f9:d8:06:2b:1c:1c:bc:47:4c:ca:6d:89:d6:21:7c:41:ea:
         5e:cb:13:b4:5f:c7:71:cf:cb:5e:98:20:93:ba:a7:3c:ce:5e:
         cc:71:82:13:e0:3f:ce:ba:3f:81:04:ab:3b:2c:cf:a1:86:be:
         aa:94:6e:fc:68:da:b1:3b:66:a6:6a:d7:6f:5f:a2:9b:0d:a6:
         23:53:8d:e1:3e:d4:16:11:d3:99:da:50:31:e8:23:06:2d:49:
         39:35:0b:cf:42:7b:10:87:68:19:74:ca:de:c8:d1:a4:91:67:
         1a:dc:86:fc:5e:f3:26:8a:39:b9:98:56:e6:98:21:1a:09:8a:
         5f:cb:b5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:56:15 2025 by rpki-client