Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3133312e3235352e3130302e302f32322d3232203d3e203238313635.roa
File:                     3133312e3235352e3130302e302f32322d3232203d3e203238313635.roa (raw, json)
Hash identifier:          CKoQe2SqEtvElj15ls+24NTlxXRe8mNOIlQR461g6bw=
Subject key identifier:   39:8D:2C:F2:9F:65:C0:14:6E:4B:F0:1F:BC:B8:EE:9C:99:E0:08:B9
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       7631336C6269CE4D070550A2537C6AC8A71327AB
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3133312e3235352e3130302e302f32322d3232203d3e203238313635.roa
Signing time:             Mon 28 Jul 2025 12:31:43 +0000
ROA not before:           Mon 28 Jul 2025 12:26:43 +0000
ROA not after:            Mon 27 Jul 2026 12:31:43 +0000
asID:                     28165
IP address blocks:        131.255.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:31:33:6c:62:69:ce:4d:07:05:50:a2:53:7c:6a:c8:a7:13:27:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Jul 28 12:26:43 2025 GMT
            Not After : Jul 27 12:31:43 2026 GMT
        Subject: CN=398D2CF29F65C0146E4BF01FBCB8EE9C99E008B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cd:8e:69:e5:39:ff:c5:e2:77:56:fa:d3:c2:
                    dd:31:cd:44:9c:77:28:d3:54:19:6b:36:3f:95:14:
                    17:cb:af:14:bd:f7:48:4b:6f:b7:d3:98:d2:0b:fa:
                    a8:82:58:4f:6f:3a:99:82:e0:70:9e:eb:9e:4a:59:
                    70:aa:4c:5c:cb:1a:9a:80:79:31:15:57:8a:48:05:
                    c7:bd:70:57:d3:aa:f3:e1:6d:c9:f9:9d:58:2a:4a:
                    84:03:1d:61:1a:54:19:61:c9:a2:06:c2:0f:d2:f6:
                    0a:13:53:5a:a9:bd:20:05:bf:20:a5:24:4f:8c:d3:
                    e5:f4:ed:bd:a1:cc:65:96:81:85:75:3d:c1:e4:97:
                    78:8d:93:d2:9f:7a:2a:9a:19:80:ee:3b:2f:9f:dc:
                    82:3c:54:76:80:c2:96:3b:da:ec:e1:45:79:b0:5c:
                    74:ac:80:79:d7:1a:4f:29:b9:a4:d2:e3:87:df:49:
                    9c:bc:db:62:9a:dc:4e:da:7f:ce:08:a8:9b:63:40:
                    d7:7d:f5:49:02:2a:28:41:97:40:97:83:d7:ab:cd:
                    02:2b:45:7a:7d:c2:01:53:b2:ba:6f:df:58:24:ed:
                    1e:88:e9:06:ea:11:7f:4b:da:3d:41:3b:6e:b0:42:
                    d5:cc:78:f1:c9:3a:28:da:d7:69:f2:96:ca:2a:30:
                    56:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:8D:2C:F2:9F:65:C0:14:6E:4B:F0:1F:BC:B8:EE:9C:99:E0:08:B9
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3133312e3235352e3130302e302f32322d3232203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:b1:d7:01:b6:be:2d:3e:04:e2:a0:e1:d2:36:af:49:da:ce:
         14:ab:64:85:ff:01:5d:aa:45:96:1a:e7:c2:74:03:8c:ed:13:
         7d:43:d9:f4:d3:1b:d5:a1:99:fe:dd:9d:60:da:89:ec:fa:4e:
         42:b3:e7:b6:ea:b4:05:a1:e0:df:3c:ab:60:20:5c:72:b8:8c:
         5e:d6:99:76:20:c2:4b:1d:47:b0:87:33:c4:b6:2a:50:f6:7a:
         1e:bf:40:ad:02:ea:e6:51:c9:11:e3:1e:89:10:39:13:2e:90:
         cc:28:09:86:16:d7:29:38:9f:93:57:89:e7:7f:cd:99:92:90:
         30:0f:ed:ea:bb:22:7e:56:5f:37:a0:ef:6a:a4:1f:f3:fc:70:
         6a:b9:02:5d:b9:a0:7c:a3:29:da:99:94:3d:42:ca:81:93:98:
         22:b6:79:a0:97:83:ef:1e:15:dc:b9:d9:a3:8b:a5:c6:02:a1:
         06:3d:c0:b1:03:13:e9:47:32:2d:61:26:36:79:92:69:27:46:
         80:ba:02:37:95:58:71:e6:6f:a0:25:3b:80:a0:c2:07:36:c5:
         d1:d0:9c:85:3e:4d:b1:46:26:01:f7:c4:48:c3:92:02:8b:b9:
         0f:00:7e:32:49:b5:ec:5c:b1:83:de:e3:e9:15:9d:2a:37:b5:
         18:46:2f:ee
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdjEzbGJpzk0HBVCiU3xqyKcTJ6swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTE2MDFBOUVGNUUwREE1RDBDMTUyRUNCN0ZFMjNDODc1
NUNCQzIwNzAeFw0yNTA3MjgxMjI2NDNaFw0yNjA3MjcxMjMxNDNaMDMxMTAvBgNV
BAMTKDM5OEQyQ0YyOUY2NUMwMTQ2RTRCRjAxRkJDQjhFRTlDOTlFMDA4QjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHzY5p5Tn/xeJ3VvrTwt0xzUSc
dyjTVBlrNj+VFBfLrxS990hLb7fTmNIL+qiCWE9vOpmC4HCe655KWXCqTFzLGpqA
eTEVV4pIBce9cFfTqvPhbcn5nVgqSoQDHWEaVBlhyaIGwg/S9goTU1qpvSAFvyCl
JE+M0+X07b2hzGWWgYV1PcHkl3iNk9KfeiqaGYDuOy+f3II8VHaAwpY72uzhRXmw
XHSsgHnXGk8puaTS44ffSZy822Ka3E7af84IqJtjQNd99UkCKihBl0CXg9erzQIr
RXp9wgFTsrpv31gk7R6I6QbqEX9L2j1BO26wQtXMePHJOija12nylsoqMFafAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUOY0s8p9lwBRuS/AfvLjunJngCLkwHwYDVR0j
BBgwFoAUkWAanvXg2l0MFS7Lf+I8h1XLwgcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXBQcFhSUmN1RzlRMW1YcXh6UXhIS28zdXA4V1V0M3Q0VjRFbXl4dERu
SmovMC85MTYwMUE5RUY1RTBEQTVEMEMxNTJFQ0I3RkUyM0M4NzU1Q0JDMjA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxNjAxQTlFRjVFMERBNUQw
QzE1MkVDQjdGRTIzQzg3NTVDQkMyMDcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FwUHBYUlJjdUc5UTFtWHF4elF4SEtvM3VwOFdVdDN0NFY0RW15eHREbkpqLzAv
MzEzMzMxMmUzMjM1MzUyZTMxMzAzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzgzMTM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKD/2QwDQYJKoZIhvcNAQELBQADggEBABmx1wG2
vi0+BOKg4dI2r0nazhSrZIX/AV2qRZYa58J0A4ztE31D2fTTG9Whmf7dnWDaiez6
TkKz57bqtAWh4N88q2AgXHK4jF7WmXYgwksdR7CHM8S2KlD2eh6/QK0C6uZRyRHj
HokQORMukMwoCYYW1yk4n5NXied/zZmSkDAP7eq7In5WXzeg72qkH/P8cGq5Al25
oHyjKdqZlD1CyoGTmCK2eaCXg+8eFdy52aOLpcYCoQY9wLEDE+lHMi1hJjZ5kmkn
RoC6AjeVWHHmb6AlO4Cgwgc2xdHQnIU+TbFGJgH3xEjDkgKLuQ8AfjJJtexcsYPe
4+kVnSo3tRhGL+4=
-----END CERTIFICATE-----
Generated at Sat Aug 9 23:11:12 2025 by rpki-client