Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3133382e35392e3134382e302f32332d3233203d3e203238313635.roa
File:                     3133382e35392e3134382e302f32332d3233203d3e203238313635.roa (raw, json)
Hash identifier:          CzMC6lGAWa2Ld3jg9BDAv+v9Y7JkZ+Rni0UfgVtUN9Y=
Subject key identifier:   6D:16:A2:62:54:75:AE:C1:F9:DD:DF:99:A0:E3:97:1F:3D:85:0B:54
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       0B0BAB69FDFB2C225133B825AA665119428C0A20
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3133382e35392e3134382e302f32332d3233203d3e203238313635.roa
Signing time:             Mon 28 Jul 2025 12:31:21 +0000
ROA not before:           Mon 28 Jul 2025 12:26:21 +0000
ROA not after:            Mon 27 Jul 2026 12:31:21 +0000
asID:                     28165
IP address blocks:        138.59.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 13:42:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:0b:ab:69:fd:fb:2c:22:51:33:b8:25:aa:66:51:19:42:8c:0a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Jul 28 12:26:21 2025 GMT
            Not After : Jul 27 12:31:21 2026 GMT
        Subject: CN=6D16A2625475AEC1F9DDDF99A0E3971F3D850B54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:83:a8:3d:e0:52:62:a2:dd:69:04:f1:7d:1c:
                    85:fc:07:57:d8:a8:e3:71:de:db:49:bb:20:34:8f:
                    e1:7a:60:47:c8:7a:cd:ff:6f:0c:b3:e9:8a:39:d2:
                    9b:b2:ba:d5:da:67:b9:63:49:5e:cb:eb:22:c5:59:
                    17:c0:ef:89:e4:b3:4a:f4:79:de:de:89:54:02:13:
                    45:7c:c4:73:84:77:33:52:93:25:bc:e1:b4:71:40:
                    6d:3a:1f:1e:d6:fd:29:8e:fc:7f:c1:c7:e9:09:d8:
                    f4:5d:d1:a7:34:d3:69:5c:7a:aa:11:2c:a5:27:45:
                    48:cf:8e:70:6a:67:8c:b2:d3:11:36:c5:4a:d1:bc:
                    99:1b:ba:bc:83:95:67:26:8c:0f:10:9f:32:b6:33:
                    cd:a2:98:79:c6:64:49:67:65:fa:67:87:f9:d2:66:
                    4c:77:6e:fa:08:25:b0:48:af:9e:61:25:0e:92:bc:
                    08:51:9a:c4:dd:b7:e1:a8:c6:f0:45:1b:6c:ba:4c:
                    7d:7f:af:6f:32:62:e3:73:74:68:a9:b2:ac:35:bf:
                    58:91:18:68:23:a8:9b:50:25:66:4e:28:48:7e:0c:
                    0d:7f:c8:83:1b:cb:ac:8f:c3:48:7a:38:38:6c:b5:
                    a8:9d:0c:e8:12:7e:a3:3e:c2:20:4b:e8:e2:9b:f5:
                    87:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:16:A2:62:54:75:AE:C1:F9:DD:DF:99:A0:E3:97:1F:3D:85:0B:54
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3133382e35392e3134382e302f32332d3233203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:76:bf:eb:a3:03:54:2f:dc:42:cc:f4:c1:29:b9:77:56:1c:
         cf:e6:68:85:3d:4b:90:71:76:c8:30:8b:36:19:b8:61:4a:36:
         fa:f7:13:8f:a8:4c:29:b3:58:2a:32:c9:07:ae:5f:13:70:22:
         69:1e:ad:9c:d5:14:fc:64:47:c6:06:b3:0b:75:7a:0e:0c:f4:
         f1:9d:db:9b:68:aa:4e:a7:e5:30:ca:7c:14:8e:99:09:44:a5:
         8f:ad:a3:fc:57:79:3f:17:60:4e:ae:18:81:27:5b:90:a4:c4:
         27:aa:ec:7d:54:c1:98:1b:28:9a:b5:4d:87:f2:c0:b0:e7:18:
         c8:b4:7f:d0:56:4f:30:89:fe:ef:ce:13:b9:9b:67:44:e1:f0:
         8b:c0:fe:ef:54:fc:d4:59:2b:9f:98:b1:92:3c:0a:82:78:c3:
         06:f5:04:bb:68:8d:61:72:9b:38:ed:4f:80:56:05:66:4d:1b:
         97:2b:3d:64:b1:fe:69:e2:c7:1d:12:56:bc:19:85:df:f7:e5:
         05:21:61:be:d5:19:eb:19:9e:9d:21:e0:e8:cd:00:ae:da:1d:
         b7:9f:7a:ce:58:cc:04:e7:61:cc:e1:d6:99:b4:2b:94:3f:e0:
         18:bd:c3:1c:d9:7a:58:30:8a:b0:b2:28:4b:5e:1c:58:4b:c5:
         32:da:f8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 14:01:06 2025 by rpki-client