Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3133382e3230342e39332e302f32342d3234203d3e203238313635.roa
File:                     3133382e3230342e39332e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          WiS8eTmffBHWYyYpnYdaZ1pNe/YchAMtPaeDsfNr4tk=
Subject key identifier:   EE:47:DA:1A:2E:35:80:20:51:5C:53:44:A1:E4:0D:19:9D:86:C4:C4
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       215C6F35C5B027C7EAFFBEC543896AE767D7DC13
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3133382e3230342e39332e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 28 Jul 2025 12:31:31 +0000
ROA not before:           Mon 28 Jul 2025 12:26:31 +0000
ROA not after:            Mon 27 Jul 2026 12:31:31 +0000
asID:                     28165
IP address blocks:        138.204.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 20:22:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:5c:6f:35:c5:b0:27:c7:ea:ff:be:c5:43:89:6a:e7:67:d7:dc:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Jul 28 12:26:31 2025 GMT
            Not After : Jul 27 12:31:31 2026 GMT
        Subject: CN=EE47DA1A2E358020515C5344A1E40D199D86C4C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e3:43:ca:6a:c2:fe:9c:c1:9a:57:f0:ad:77:
                    f0:e4:c7:0c:54:7e:d8:61:63:14:6d:4c:6f:59:65:
                    53:35:d5:00:30:0e:18:1b:0c:13:bd:ea:06:dd:dd:
                    1b:13:89:62:ff:bc:8e:e3:85:94:f7:c6:b6:7f:ab:
                    6f:dd:b8:9b:da:95:43:72:be:26:b0:55:f2:87:03:
                    3a:d6:b9:7a:6a:71:39:3e:53:ce:30:54:5b:c4:26:
                    08:b4:34:85:e2:99:4c:37:ca:21:f6:d5:a6:5d:c1:
                    cd:79:7f:74:95:55:28:b1:d3:57:b1:73:25:fe:b3:
                    b6:2c:55:c9:d0:3f:32:94:30:b8:c5:4e:88:c3:ec:
                    00:62:79:a5:de:9b:ff:fd:81:d8:9a:6a:84:29:43:
                    8a:c9:f6:9a:b2:42:07:fa:45:70:37:2b:b3:03:3e:
                    e8:6b:aa:75:ce:7a:7d:23:ac:1a:ec:c2:26:d1:90:
                    33:97:1e:b0:a1:9c:90:f3:79:bd:cd:d8:1b:79:77:
                    ee:b1:21:fb:a6:38:d2:9c:46:be:8a:3a:da:7c:5b:
                    f1:8d:52:a8:d5:0a:64:e3:81:6e:5e:d0:78:88:fc:
                    57:36:33:b6:ca:39:b5:37:fa:41:0c:8e:f2:74:0c:
                    26:6e:fb:7a:c5:88:19:16:32:11:ab:48:25:dd:1c:
                    85:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:47:DA:1A:2E:35:80:20:51:5C:53:44:A1:E4:0D:19:9D:86:C4:C4
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3133382e3230342e39332e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:83:00:2c:c7:52:e6:b4:4b:94:2f:db:48:43:dc:ca:50:32:
         c6:b2:d6:f0:37:2f:af:3b:66:6c:a0:7d:66:88:24:3b:7b:9a:
         19:01:5c:e6:f8:87:f7:c5:fd:af:25:a1:fc:7d:24:f7:de:dc:
         b5:7a:5b:85:8a:5c:11:33:0b:4b:ef:bb:7a:1a:bf:91:e7:5e:
         e4:12:ea:50:f0:4b:95:80:ff:a3:23:aa:63:55:ab:1d:ea:30:
         7c:5a:35:22:fc:56:e2:4d:a4:bd:4c:fd:2f:09:a8:19:fa:6c:
         27:fe:0e:93:59:90:97:0d:cd:a1:7f:90:17:2c:8e:ab:b1:9d:
         59:9b:bf:e5:9e:21:dd:38:15:2c:d4:a2:be:f2:a2:1b:02:08:
         d6:40:43:6c:b7:59:ab:27:fd:33:2d:eb:c1:8b:31:1a:b1:77:
         98:34:2e:e2:40:1d:35:c5:ff:ec:9b:ab:3b:e7:fc:ed:07:d6:
         f0:bb:06:06:85:18:59:2a:de:c6:5d:84:47:bb:18:ca:c1:f7:
         25:21:28:30:ed:f7:06:5e:f7:17:b9:ad:d9:c7:0a:28:51:f3:
         20:6e:cc:b8:7d:4f:b8:5a:c2:3b:45:a4:8a:fe:6b:bf:48:21:
         2a:be:6d:2d:94:d8:9c:fa:06:d7:6c:1f:d3:03:dd:31:a9:40:
         75:31:a7:f5
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUIVxvNcWwJ8fq/77FQ4lq52fX3BMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTE2MDFBOUVGNUUwREE1RDBDMTUyRUNCN0ZFMjNDODc1
NUNCQzIwNzAeFw0yNTA3MjgxMjI2MzFaFw0yNjA3MjcxMjMxMzFaMDMxMTAvBgNV
BAMTKEVFNDdEQTFBMkUzNTgwMjA1MTVDNTM0NEExRTQwRDE5OUQ4NkM0QzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC240PKasL+nMGaV/Ctd/DkxwxU
fthhYxRtTG9ZZVM11QAwDhgbDBO96gbd3RsTiWL/vI7jhZT3xrZ/q2/duJvalUNy
viawVfKHAzrWuXpqcTk+U84wVFvEJgi0NIXimUw3yiH21aZdwc15f3SVVSix01ex
cyX+s7YsVcnQPzKUMLjFTojD7ABieaXem//9gdiaaoQpQ4rJ9pqyQgf6RXA3K7MD
PuhrqnXOen0jrBrswibRkDOXHrChnJDzeb3N2Bt5d+6xIfumONKcRr6KOtp8W/GN
UqjVCmTjgW5e0HiI/Fc2M7bKObU3+kEMjvJ0DCZu+3rFiBkWMhGrSCXdHIUJAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU7kfaGi41gCBRXFNEoeQNGZ2GxMQwHwYDVR0j
BBgwFoAUkWAanvXg2l0MFS7Lf+I8h1XLwgcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXBQcFhSUmN1RzlRMW1YcXh6UXhIS28zdXA4V1V0M3Q0VjRFbXl4dERu
SmovMC85MTYwMUE5RUY1RTBEQTVEMEMxNTJFQ0I3RkUyM0M4NzU1Q0JDMjA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxNjAxQTlFRjVFMERBNUQw
QzE1MkVDQjdGRTIzQzg3NTVDQkMyMDcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FwUHBYUlJjdUc5UTFtWHF4elF4SEtvM3VwOFdVdDN0NFY0RW15eHREbkpqLzAv
MzEzMzM4MmUzMjMwMzQyZTM5MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzEzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAisxdMA0GCSqGSIb3DQEBCwUAA4IBAQAsgwAsx1Lm
tEuUL9tIQ9zKUDLGstbwNy+vO2ZsoH1miCQ7e5oZAVzm+If3xf2vJaH8fST33ty1
eluFilwRMwtL77t6Gr+R517kEupQ8EuVgP+jI6pjVasd6jB8WjUi/FbiTaS9TP0v
CagZ+mwn/g6TWZCXDc2hf5AXLI6rsZ1Zm7/lniHdOBUs1KK+8qIbAgjWQENst1mr
J/0zLevBizEasXeYNC7iQB01xf/sm6s75/ztB9bwuwYGhRhZKt7GXYRHuxjKwfcl
ISgw7fcGXvcXua3ZxwooUfMgbsy4fU+4WsI7RaSK/mu/SCEqvm0tlNic+gbXbB/T
A90xqUB1Maf1
-----END CERTIFICATE-----
Generated at Sun Aug 10 10:45:34 2025 by rpki-client