Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3133312e3235352e3130302e302f32332d3233203d3e203238313635.roa
File:                     3133312e3235352e3130302e302f32332d3233203d3e203238313635.roa (raw, json)
Hash identifier:          Pw1E3FC3bacvCLnAdzFKR/TN/erVAlC5ogzXQktmmHg=
Subject key identifier:   AD:AD:8C:20:12:4D:D2:8C:02:1F:0F:C7:BE:C4:FC:D6:7D:64:5B:B7
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       4A5DFA0AC3EAD3E1F34D0BD8EFD8E6C3B4A36FFD
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3133312e3235352e3130302e302f32332d3233203d3e203238313635.roa
Signing time:             Mon 28 Jul 2025 12:31:23 +0000
ROA not before:           Mon 28 Jul 2025 12:26:23 +0000
ROA not after:            Mon 27 Jul 2026 12:31:23 +0000
asID:                     28165
IP address blocks:        131.255.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 20:22:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:5d:fa:0a:c3:ea:d3:e1:f3:4d:0b:d8:ef:d8:e6:c3:b4:a3:6f:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Jul 28 12:26:23 2025 GMT
            Not After : Jul 27 12:31:23 2026 GMT
        Subject: CN=ADAD8C20124DD28C021F0FC7BEC4FCD67D645BB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:61:94:8e:b1:a1:b8:6b:98:96:15:ed:43:fc:
                    68:03:00:ce:49:af:18:09:31:34:62:f0:c7:d4:07:
                    e2:92:e7:56:45:0c:5a:56:33:35:50:a5:d9:b9:d0:
                    69:d7:2d:a2:5d:ea:4a:0d:3f:4b:56:e4:2e:47:27:
                    26:92:f6:81:3a:01:70:35:2b:64:0c:0a:4c:0b:d1:
                    00:37:77:07:b3:66:20:71:e9:7d:57:6b:74:4f:77:
                    4d:8a:d9:3c:60:6c:30:d8:4a:9f:e2:10:a6:46:a6:
                    49:1d:d1:83:57:5a:de:ab:3a:dd:d1:50:27:e7:bf:
                    6f:cb:df:b3:72:6f:de:ea:34:05:cd:07:46:ac:6c:
                    75:f6:8d:1f:1c:ee:b8:7f:85:ee:9e:4d:53:c7:20:
                    d2:9e:5a:aa:ee:3b:52:50:d9:fc:c7:8a:9f:57:d0:
                    ae:f3:3d:b6:09:f4:27:b1:f4:de:56:f0:3c:20:e0:
                    eb:7c:4d:c8:68:f7:c9:24:fb:3f:4c:f0:89:1c:fa:
                    36:d0:8f:34:35:28:65:bd:d8:d9:35:8f:30:8e:8b:
                    81:fa:8d:7f:32:55:51:d2:fd:bb:d1:f5:44:63:75:
                    3a:31:82:2f:92:12:0b:af:5a:99:19:13:89:f1:2a:
                    11:68:0f:c0:3e:fa:b2:a5:29:67:0f:3b:13:c4:fd:
                    33:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:AD:8C:20:12:4D:D2:8C:02:1F:0F:C7:BE:C4:FC:D6:7D:64:5B:B7
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3133312e3235352e3130302e302f32332d3233203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:4a:0f:e7:d9:f8:d4:40:80:c2:9d:e5:35:92:2f:42:df:3b:
         02:d2:67:b9:ce:6d:43:79:11:6b:a4:33:5e:5c:f6:ea:ac:d2:
         69:b1:54:14:cc:41:bc:a6:88:51:26:01:f2:a3:9c:bf:4a:f5:
         80:e5:2c:4e:c5:d4:c5:6e:b4:31:5f:89:3a:f5:60:48:f6:9d:
         37:58:ac:00:18:10:74:73:5c:b7:5b:03:1e:df:6c:56:4e:6c:
         54:6d:03:7b:c6:e0:15:49:2d:16:ea:12:75:1e:9a:a8:98:64:
         da:f7:ed:fa:28:60:0a:64:f5:86:98:b3:d8:dd:5a:26:9b:e3:
         48:0a:b5:b3:1b:61:7c:10:0b:0e:f7:34:e4:36:46:6c:21:39:
         c6:a4:4c:94:bb:6d:f2:8c:9f:da:d2:2c:03:f9:16:a4:9a:7e:
         0d:79:7e:ab:88:a9:ea:c6:90:cf:53:df:21:04:a0:ac:42:6b:
         01:2d:6b:37:1c:85:cc:cd:cc:a1:17:2b:ed:5b:d5:24:cd:77:
         bd:c7:00:31:80:3d:31:05:67:c7:9e:03:59:0b:13:9c:e7:95:
         85:cf:00:ff:e6:ae:ed:53:c4:4e:b2:89:3e:91:42:4b:05:ce:
         84:1f:8b:24:61:8b:3c:05:62:c0:dd:fe:b2:f3:dd:25:30:bc:
         7f:f6:04:35
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUSl36CsPq0+HzTQvY79jmw7Sjb/0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTE2MDFBOUVGNUUwREE1RDBDMTUyRUNCN0ZFMjNDODc1
NUNCQzIwNzAeFw0yNTA3MjgxMjI2MjNaFw0yNjA3MjcxMjMxMjNaMDMxMTAvBgNV
BAMTKEFEQUQ4QzIwMTI0REQyOEMwMjFGMEZDN0JFQzRGQ0Q2N0Q2NDVCQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEYZSOsaG4a5iWFe1D/GgDAM5J
rxgJMTRi8MfUB+KS51ZFDFpWMzVQpdm50GnXLaJd6koNP0tW5C5HJyaS9oE6AXA1
K2QMCkwL0QA3dwezZiBx6X1Xa3RPd02K2TxgbDDYSp/iEKZGpkkd0YNXWt6rOt3R
UCfnv2/L37Nyb97qNAXNB0asbHX2jR8c7rh/he6eTVPHINKeWqruO1JQ2fzHip9X
0K7zPbYJ9Cex9N5W8Dwg4Ot8Tcho98kk+z9M8Ikc+jbQjzQ1KGW92Nk1jzCOi4H6
jX8yVVHS/bvR9URjdToxgi+SEguvWpkZE4nxKhFoD8A++rKlKWcPOxPE/TPXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUra2MIBJN0owCHw/HvsT81n1kW7cwHwYDVR0j
BBgwFoAUkWAanvXg2l0MFS7Lf+I8h1XLwgcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXBQcFhSUmN1RzlRMW1YcXh6UXhIS28zdXA4V1V0M3Q0VjRFbXl4dERu
SmovMC85MTYwMUE5RUY1RTBEQTVEMEMxNTJFQ0I3RkUyM0M4NzU1Q0JDMjA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxNjAxQTlFRjVFMERBNUQw
QzE1MkVDQjdGRTIzQzg3NTVDQkMyMDcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FwUHBYUlJjdUc5UTFtWHF4elF4SEtvM3VwOFdVdDN0NFY0RW15eHREbkpqLzAv
MzEzMzMxMmUzMjM1MzUyZTMxMzAzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzgzMTM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGD/2QwDQYJKoZIhvcNAQELBQADggEBAI9KD+fZ
+NRAgMKd5TWSL0LfOwLSZ7nObUN5EWukM15c9uqs0mmxVBTMQbymiFEmAfKjnL9K
9YDlLE7F1MVutDFfiTr1YEj2nTdYrAAYEHRzXLdbAx7fbFZObFRtA3vG4BVJLRbq
EnUemqiYZNr37fooYApk9YaYs9jdWiab40gKtbMbYXwQCw73NOQ2RmwhOcakTJS7
bfKMn9rSLAP5FqSafg15fquIqerGkM9T3yEEoKxCawEtazcchczNzKEXK+1b1STN
d73HADGAPTEFZ8eeA1kLE5znlYXPAP/mru1TxE6yiT6RQksFzoQfiyRhizwFYsDd
/rLz3SUwvH/2BDU=
-----END CERTIFICATE-----
Generated at Sun Aug 10 10:34:03 2025 by rpki-client