Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3133382e3230342e39322e302f32342d3234203d3e203238313635.roa
File:                     3133382e3230342e39322e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          Jyw44tYU86O1TaxCGi+Avxp2YwEefkJQYneWHxIBu5Y=
Subject key identifier:   1E:77:14:5E:1F:07:36:71:1A:1C:1A:5B:A9:31:1D:87:89:62:D3:0A
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       150B48ED7EC85489F0A6FDD90C7B98E7603D492A
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3133382e3230342e39322e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 28 Jul 2025 12:31:20 +0000
ROA not before:           Mon 28 Jul 2025 12:26:20 +0000
ROA not after:            Mon 27 Jul 2026 12:31:20 +0000
asID:                     28165
IP address blocks:        138.204.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:0b:48:ed:7e:c8:54:89:f0:a6:fd:d9:0c:7b:98:e7:60:3d:49:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Jul 28 12:26:20 2025 GMT
            Not After : Jul 27 12:31:20 2026 GMT
        Subject: CN=1E77145E1F0736711A1C1A5BA9311D878962D30A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f3:c1:00:5d:89:b7:db:e6:66:0d:20:84:20:
                    d3:68:31:3f:ea:44:ff:44:11:48:2e:15:b7:07:fa:
                    5d:74:ed:28:93:1a:91:2c:98:60:60:52:eb:bc:86:
                    28:3f:1a:c8:f7:26:ed:0b:92:a2:30:4b:96:75:6b:
                    4d:8e:d7:80:e1:c1:f6:7f:5e:99:45:08:a0:8e:e7:
                    70:4f:7e:58:41:92:0f:19:2f:4f:9a:ca:d4:b6:ec:
                    a6:2e:a9:c2:8f:7d:71:22:d0:f0:25:cb:f6:62:df:
                    77:e2:e7:31:e7:a0:ca:70:84:3f:c1:93:e8:96:6c:
                    b3:64:38:a0:b4:c4:55:5d:56:0b:17:16:26:0c:bd:
                    5b:71:bf:de:0f:bb:65:ca:84:82:b6:8e:d3:5c:8e:
                    21:67:b8:25:2c:31:30:87:22:52:23:44:a7:70:f7:
                    08:04:32:43:86:54:9c:62:7e:da:85:89:50:9f:6a:
                    86:80:aa:d6:1a:c0:ca:0a:b0:34:82:8e:59:2f:24:
                    f9:d5:3c:64:bd:d2:64:0d:4a:e2:bc:94:fe:0d:be:
                    64:c9:fb:6f:a8:97:8f:08:63:7a:22:b1:eb:b9:8b:
                    53:85:c4:86:c8:93:38:ff:7b:73:4f:45:b6:03:13:
                    e6:49:47:2e:52:57:57:c5:23:50:35:57:4b:2d:4c:
                    99:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:77:14:5E:1F:07:36:71:1A:1C:1A:5B:A9:31:1D:87:89:62:D3:0A
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3133382e3230342e39322e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:ab:d1:3f:e1:38:99:b5:fb:35:e0:ff:29:4c:76:2b:88:d1:
         de:20:09:89:15:d3:ef:16:44:74:f7:42:07:d7:33:4e:bd:b3:
         f3:d3:c4:9f:90:5c:9c:f0:51:be:25:fc:bc:c7:f2:52:36:fc:
         0f:4b:af:71:87:62:e6:8c:7d:06:fc:9a:d9:93:40:af:7d:84:
         78:6b:24:75:11:19:1f:4a:c7:01:ef:f6:a8:06:a2:b1:ad:c7:
         c4:06:8a:f6:cb:8c:89:26:8f:28:ae:55:0c:ba:01:ee:fe:f1:
         80:1c:05:e2:ea:38:cb:a6:62:ea:f7:b1:5c:ff:4b:7d:c8:ef:
         b5:fa:6d:51:14:bb:82:2e:43:39:d6:56:03:d2:ab:83:fc:5c:
         b1:36:e6:35:bf:ad:b2:19:e6:70:3c:5e:c3:25:ca:6b:bf:bc:
         34:7f:d6:aa:43:6d:da:5e:02:3b:5f:11:ca:37:ee:c5:de:b8:
         2d:ad:ba:1a:65:b3:e7:b2:2b:fb:d1:70:f2:a7:ee:0d:eb:7e:
         d1:72:4d:01:ab:e1:2e:5f:c6:da:e0:73:56:f3:81:8f:18:7b:
         75:4b:0b:7f:06:1b:65:38:31:2f:a4:87:be:d5:1d:34:b4:a6:
         36:35:eb:3d:00:b6:c4:f1:76:50:7e:b4:ff:c8:ad:f9:0d:d7:
         39:d5:a6:df
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUFQtI7X7IVInwpv3ZDHuY52A9SSowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTE2MDFBOUVGNUUwREE1RDBDMTUyRUNCN0ZFMjNDODc1
NUNCQzIwNzAeFw0yNTA3MjgxMjI2MjBaFw0yNjA3MjcxMjMxMjBaMDMxMTAvBgNV
BAMTKDFFNzcxNDVFMUYwNzM2NzExQTFDMUE1QkE5MzExRDg3ODk2MkQzMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk88EAXYm32+ZmDSCEINNoMT/q
RP9EEUguFbcH+l107SiTGpEsmGBgUuu8hig/Gsj3Ju0LkqIwS5Z1a02O14DhwfZ/
XplFCKCO53BPflhBkg8ZL0+aytS27KYuqcKPfXEi0PAly/Zi33fi5zHnoMpwhD/B
k+iWbLNkOKC0xFVdVgsXFiYMvVtxv94Pu2XKhIK2jtNcjiFnuCUsMTCHIlIjRKdw
9wgEMkOGVJxiftqFiVCfaoaAqtYawMoKsDSCjlkvJPnVPGS90mQNSuK8lP4NvmTJ
+2+ol48IY3oiseu5i1OFxIbIkzj/e3NPRbYDE+ZJRy5SV1fFI1A1V0stTJnzAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUHncUXh8HNnEaHBpbqTEdh4li0wowHwYDVR0j
BBgwFoAUkWAanvXg2l0MFS7Lf+I8h1XLwgcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXBQcFhSUmN1RzlRMW1YcXh6UXhIS28zdXA4V1V0M3Q0VjRFbXl4dERu
SmovMC85MTYwMUE5RUY1RTBEQTVEMEMxNTJFQ0I3RkUyM0M4NzU1Q0JDMjA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxNjAxQTlFRjVFMERBNUQw
QzE1MkVDQjdGRTIzQzg3NTVDQkMyMDcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FwUHBYUlJjdUc5UTFtWHF4elF4SEtvM3VwOFdVdDN0NFY0RW15eHREbkpqLzAv
MzEzMzM4MmUzMjMwMzQyZTM5MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzEzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAisxcMA0GCSqGSIb3DQEBCwUAA4IBAQAJq9E/4TiZ
tfs14P8pTHYriNHeIAmJFdPvFkR090IH1zNOvbPz08SfkFyc8FG+Jfy8x/JSNvwP
S69xh2LmjH0G/JrZk0CvfYR4ayR1ERkfSscB7/aoBqKxrcfEBor2y4yJJo8orlUM
ugHu/vGAHAXi6jjLpmLq97Fc/0t9yO+1+m1RFLuCLkM51lYD0quD/FyxNuY1v62y
GeZwPF7DJcprv7w0f9aqQ23aXgI7XxHKN+7F3rgtrboaZbPnsiv70XDyp+4N637R
ck0Bq+EuX8ba4HNW84GPGHt1Swt/BhtlODEvpIe+1R00tKY2Nes9ALbE8XZQfrT/
yK35Ddc51abf
-----END CERTIFICATE-----
Generated at Sun Aug 10 04:26:14 2025 by rpki-client