Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3133382e35392e3134382e302f32342d3234203d3e203238313635.roa
File:                     3133382e35392e3134382e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          7geTT024d6Og6vKj3P8nQp2omdaSiyD2cxktxbO2NS8=
Subject key identifier:   C8:BA:8A:77:95:2B:93:79:5B:CE:0C:9B:E8:EF:B3:81:93:8B:A3:7C
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       7F1E89E9020946FA94F8D97366580E6FF589FEA2
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3133382e35392e3134382e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 28 Jul 2025 12:31:54 +0000
ROA not before:           Mon 28 Jul 2025 12:26:54 +0000
ROA not after:            Mon 27 Jul 2026 12:31:54 +0000
asID:                     28165
IP address blocks:        138.59.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:1e:89:e9:02:09:46:fa:94:f8:d9:73:66:58:0e:6f:f5:89:fe:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Jul 28 12:26:54 2025 GMT
            Not After : Jul 27 12:31:54 2026 GMT
        Subject: CN=C8BA8A77952B93795BCE0C9BE8EFB381938BA37C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:83:4b:de:2c:27:eb:97:4b:fc:d7:5d:26:b7:
                    c8:44:89:88:2d:dc:fc:74:ea:56:58:e2:ca:a0:5b:
                    89:82:d0:51:32:a6:5a:c1:3f:c9:c8:83:7d:94:1a:
                    5e:32:ce:ea:13:2c:66:27:7d:22:3e:fb:b5:9d:8c:
                    36:3c:57:cf:2f:ee:a7:ea:80:f8:29:8c:99:2e:b1:
                    e8:fd:bc:c0:21:b5:79:0f:cb:cf:03:ff:d3:41:0a:
                    d2:56:d1:23:44:b8:a5:81:9b:b7:12:fe:c2:95:83:
                    20:f7:3c:63:ca:d6:87:f7:5a:8d:40:c2:ec:13:88:
                    ed:d4:3a:c9:a1:20:4a:a4:bc:9e:3f:81:b5:63:f8:
                    b2:29:50:90:c3:ba:be:3d:f2:77:ca:38:e5:a8:7d:
                    85:2d:4e:68:1c:8a:f9:bd:70:9c:dc:91:83:e2:5f:
                    41:a0:99:99:de:a8:a6:70:36:ca:b5:b7:c1:ce:0b:
                    b9:f7:63:6c:e1:0f:9a:95:d5:67:19:90:f4:7d:fb:
                    77:5a:93:ec:b8:9c:cb:7c:f2:ad:a9:06:27:92:84:
                    02:60:d7:2e:35:40:0e:2c:b9:d9:c0:9e:df:ac:1d:
                    a1:ff:d2:43:31:5b:fc:85:8b:d6:18:16:8d:b8:c3:
                    9d:93:e3:59:5f:d0:b6:7f:56:d9:42:d1:ee:c3:78:
                    7c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:BA:8A:77:95:2B:93:79:5B:CE:0C:9B:E8:EF:B3:81:93:8B:A3:7C
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3133382e35392e3134382e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:3a:d6:a9:c3:e6:7d:7e:53:fa:5d:5f:37:b3:79:a3:60:cb:
         eb:86:03:4a:08:65:32:be:dc:bf:ef:eb:65:8d:66:e2:db:73:
         c3:20:1c:6d:7e:4c:35:69:2c:7e:41:42:9e:b4:2f:20:1f:a1:
         83:19:a4:81:ab:71:36:d2:cc:df:b1:22:d7:e6:47:7e:43:5d:
         5d:d4:43:eb:21:6b:04:65:02:fd:76:38:ba:cc:90:ac:c3:58:
         6c:51:49:0a:d9:45:3c:4e:11:4b:a0:29:27:c3:4d:04:93:36:
         47:ac:24:19:f7:d3:b7:ed:40:c6:b0:ad:95:70:c8:50:f3:49:
         e1:4c:8d:d4:27:40:6f:59:6d:9d:cd:44:aa:c5:a8:ec:d4:be:
         23:5f:a3:7a:ee:62:6a:e7:47:2d:79:c5:c1:86:50:36:12:1c:
         a8:5d:6b:ae:fe:7d:85:8b:3c:7a:70:ea:a5:c1:61:4a:ce:89:
         ab:2a:ac:b2:e5:2e:b6:25:48:ad:cc:43:8c:09:eb:3d:a3:ef:
         bb:e7:77:26:e0:e5:84:29:2f:2f:5a:10:3c:ad:44:b6:a1:c1:
         dd:0b:f4:1c:b1:de:db:39:0a:de:2e:6f:90:72:de:f1:86:52:
         5d:33:40:75:7a:83:83:e1:e4:c4:9d:2c:24:5a:db:d8:95:53:
         fb:38:12:a1
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUfx6J6QIJRvqU+NlzZlgOb/WJ/qIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTE2MDFBOUVGNUUwREE1RDBDMTUyRUNCN0ZFMjNDODc1
NUNCQzIwNzAeFw0yNTA3MjgxMjI2NTRaFw0yNjA3MjcxMjMxNTRaMDMxMTAvBgNV
BAMTKEM4QkE4QTc3OTUyQjkzNzk1QkNFMEM5QkU4RUZCMzgxOTM4QkEzN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCig0veLCfrl0v8110mt8hEiYgt
3Px06lZY4sqgW4mC0FEyplrBP8nIg32UGl4yzuoTLGYnfSI++7WdjDY8V88v7qfq
gPgpjJkusej9vMAhtXkPy88D/9NBCtJW0SNEuKWBm7cS/sKVgyD3PGPK1of3Wo1A
wuwTiO3UOsmhIEqkvJ4/gbVj+LIpUJDDur498nfKOOWofYUtTmgcivm9cJzckYPi
X0GgmZneqKZwNsq1t8HOC7n3Y2zhD5qV1WcZkPR9+3dak+y4nMt88q2pBieShAJg
1y41QA4sudnAnt+sHaH/0kMxW/yFi9YYFo24w52T41lf0LZ/VtlC0e7DeHwXAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUyLqKd5Urk3lbzgyb6O+zgZOLo3wwHwYDVR0j
BBgwFoAUkWAanvXg2l0MFS7Lf+I8h1XLwgcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXBQcFhSUmN1RzlRMW1YcXh6UXhIS28zdXA4V1V0M3Q0VjRFbXl4dERu
SmovMC85MTYwMUE5RUY1RTBEQTVEMEMxNTJFQ0I3RkUyM0M4NzU1Q0JDMjA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxNjAxQTlFRjVFMERBNUQw
QzE1MkVDQjdGRTIzQzg3NTVDQkMyMDcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FwUHBYUlJjdUc5UTFtWHF4elF4SEtvM3VwOFdVdDN0NFY0RW15eHREbkpqLzAv
MzEzMzM4MmUzNTM5MmUzMTM0MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzEzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAijuUMA0GCSqGSIb3DQEBCwUAA4IBAQBFOtapw+Z9
flP6XV83s3mjYMvrhgNKCGUyvty/7+tljWbi23PDIBxtfkw1aSx+QUKetC8gH6GD
GaSBq3E20szfsSLX5kd+Q11d1EPrIWsEZQL9dji6zJCsw1hsUUkK2UU8ThFLoCkn
w00EkzZHrCQZ99O37UDGsK2VcMhQ80nhTI3UJ0BvWW2dzUSqxajs1L4jX6N67mJq
50ctecXBhlA2EhyoXWuu/n2Fizx6cOqlwWFKzomrKqyy5S62JUitzEOMCes9o++7
53cm4OWEKS8vWhA8rUS2ocHdC/Qcsd7bOQreLm+Qct7xhlJdM0B1eoOD4eTEnSwk
WtvYlVP7OBKh
-----END CERTIFICATE-----
Generated at Sun Aug 10 04:46:45 2025 by rpki-client