Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3133382e3230342e39322e302f32332d3233203d3e203238313635.roa
File:                     3133382e3230342e39322e302f32332d3233203d3e203238313635.roa (raw, json)
Hash identifier:          EnHAxz7TcoVAJP4UquS2PV/U8dhnQpSejpEYeyQ9C80=
Subject key identifier:   16:87:97:13:A5:CB:D4:9E:F5:A0:8E:C8:36:30:AC:85:9C:33:B8:23
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       527B0FCC3B5FB8FDAB450BDCF9B913D6C378A46C
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3133382e3230342e39322e302f32332d3233203d3e203238313635.roa
Signing time:             Mon 28 Jul 2025 12:31:35 +0000
ROA not before:           Mon 28 Jul 2025 12:26:35 +0000
ROA not after:            Mon 27 Jul 2026 12:31:35 +0000
asID:                     28165
IP address blocks:        138.204.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:7b:0f:cc:3b:5f:b8:fd:ab:45:0b:dc:f9:b9:13:d6:c3:78:a4:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Jul 28 12:26:35 2025 GMT
            Not After : Jul 27 12:31:35 2026 GMT
        Subject: CN=16879713A5CBD49EF5A08EC83630AC859C33B823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:52:2d:53:6c:64:94:a8:d7:90:0f:1e:c0:89:
                    6c:7b:fa:a3:5f:0e:ad:5e:64:ce:5f:53:45:e1:11:
                    7e:c4:fc:12:65:c9:23:22:0a:f0:0c:4a:55:89:05:
                    10:1f:b6:c2:05:82:98:4c:e7:2d:da:99:8c:68:72:
                    8e:b8:8f:82:53:40:96:60:92:51:fc:3b:df:40:fc:
                    84:a2:c3:5c:a2:bf:7c:41:61:be:a7:ea:dc:70:fd:
                    09:fc:ec:90:d8:62:33:6a:56:8d:c5:44:bd:48:3f:
                    3f:7b:c5:e6:f6:5b:84:01:45:ae:89:98:e7:e3:10:
                    c8:47:5c:0b:9f:a9:9a:a8:2e:39:4b:aa:35:91:f9:
                    ac:b7:db:5d:a5:22:c6:e5:a3:68:2a:41:05:2e:a8:
                    42:c9:56:d7:0d:fd:12:e4:cf:1f:a4:2b:2f:76:80:
                    0d:f9:e8:7e:39:66:26:6f:c7:00:25:89:f1:0b:ee:
                    9b:5f:dc:44:3e:47:63:58:c6:a6:f7:1f:6d:d1:c3:
                    4f:8f:e5:b3:ba:51:84:be:15:8c:2c:bf:ce:53:08:
                    e2:95:ac:da:6c:dd:08:38:ac:7b:9e:51:48:b6:b1:
                    54:cf:25:6b:fc:ab:11:3b:e5:bd:75:8b:ff:84:8b:
                    70:30:73:a2:41:56:54:64:75:d1:75:fc:c1:48:d4:
                    39:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:87:97:13:A5:CB:D4:9E:F5:A0:8E:C8:36:30:AC:85:9C:33:B8:23
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3133382e3230342e39322e302f32332d3233203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:8d:46:ee:3e:b0:ed:da:17:ae:64:38:00:e9:e6:1d:7e:0d:
         f0:b9:4c:2b:8a:63:a2:4b:b2:b9:d4:75:c8:97:60:04:b2:30:
         e3:76:f4:a2:bf:01:b3:b9:b8:5b:3a:87:5b:65:9a:33:fb:40:
         73:eb:9d:13:dd:0d:88:e1:31:95:9f:2a:bc:26:d3:e5:85:f0:
         55:19:57:d7:7c:92:19:04:08:3d:6e:cf:e3:01:02:42:68:11:
         6c:ed:4e:13:93:81:fa:6e:a0:07:e7:c5:3e:9e:d8:70:02:0e:
         3b:0d:44:9f:eb:28:7e:5f:97:d7:de:be:56:05:96:70:c5:0b:
         4e:49:67:6b:d8:3c:8a:aa:5f:95:03:4b:b5:07:d6:de:0a:f8:
         90:7f:03:e1:9a:24:c0:a5:9c:72:ea:00:1a:ff:b9:c9:42:08:
         4d:d7:1a:7f:9d:c0:a1:8b:76:80:d1:6e:22:05:11:34:0a:4d:
         62:06:fb:d9:c4:37:8e:07:c1:e5:65:89:a6:a8:bc:a6:05:13:
         75:4d:87:6e:3e:d3:a4:62:cd:06:fc:c7:97:c9:e7:41:ea:ec:
         b8:fe:ba:fb:fc:89:75:89:ac:d2:c6:20:25:0f:1b:ab:a2:4b:
         e0:18:1c:3b:bb:2e:f3:0a:91:6c:4c:e3:1c:7b:32:28:d5:09:
         f0:5b:27:5e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUUnsPzDtfuP2rRQvc+bkT1sN4pGwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTE2MDFBOUVGNUUwREE1RDBDMTUyRUNCN0ZFMjNDODc1
NUNCQzIwNzAeFw0yNTA3MjgxMjI2MzVaFw0yNjA3MjcxMjMxMzVaMDMxMTAvBgNV
BAMTKDE2ODc5NzEzQTVDQkQ0OUVGNUEwOEVDODM2MzBBQzg1OUMzM0I4MjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQUi1TbGSUqNeQDx7AiWx7+qNf
Dq1eZM5fU0XhEX7E/BJlySMiCvAMSlWJBRAftsIFgphM5y3amYxoco64j4JTQJZg
klH8O99A/ISiw1yiv3xBYb6n6txw/Qn87JDYYjNqVo3FRL1IPz97xeb2W4QBRa6J
mOfjEMhHXAufqZqoLjlLqjWR+ay3212lIsblo2gqQQUuqELJVtcN/RLkzx+kKy92
gA356H45ZiZvxwAlifEL7ptf3EQ+R2NYxqb3H23Rw0+P5bO6UYS+FYwsv85TCOKV
rNps3Qg4rHueUUi2sVTPJWv8qxE75b11i/+Ei3Awc6JBVlRkddF1/MFI1DkLAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUFoeXE6XL1J71oI7INjCshZwzuCMwHwYDVR0j
BBgwFoAUkWAanvXg2l0MFS7Lf+I8h1XLwgcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXBQcFhSUmN1RzlRMW1YcXh6UXhIS28zdXA4V1V0M3Q0VjRFbXl4dERu
SmovMC85MTYwMUE5RUY1RTBEQTVEMEMxNTJFQ0I3RkUyM0M4NzU1Q0JDMjA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxNjAxQTlFRjVFMERBNUQw
QzE1MkVDQjdGRTIzQzg3NTVDQkMyMDcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FwUHBYUlJjdUc5UTFtWHF4elF4SEtvM3VwOFdVdDN0NFY0RW15eHREbkpqLzAv
MzEzMzM4MmUzMjMwMzQyZTM5MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM4
MzEzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBisxcMA0GCSqGSIb3DQEBCwUAA4IBAQBMjUbuPrDt
2heuZDgA6eYdfg3wuUwrimOiS7K51HXIl2AEsjDjdvSivwGzubhbOodbZZoz+0Bz
650T3Q2I4TGVnyq8JtPlhfBVGVfXfJIZBAg9bs/jAQJCaBFs7U4Tk4H6bqAH58U+
nthwAg47DUSf6yh+X5fX3r5WBZZwxQtOSWdr2DyKql+VA0u1B9beCviQfwPhmiTA
pZxy6gAa/7nJQghN1xp/ncChi3aA0W4iBRE0Ck1iBvvZxDeOB8HlZYmmqLymBRN1
TYduPtOkYs0G/MeXyedB6uy4/rr7/Il1iazSxiAlDxurokvgGBw7uy7zCpFsTOMc
ezIo1QnwWyde
-----END CERTIFICATE-----
Generated at Sun Aug 10 03:54:07 2025 by rpki-client