Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3133382e35392e3134392e302f32342d3234203d3e203238313635.roa
File:                     3133382e35392e3134392e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          LWD4unRukk2f8fTSQPlfRVy1g78bsMsOQL88DRi1o4U=
Subject key identifier:   73:CC:CC:FC:D1:77:85:D7:C2:B3:E6:3A:27:8E:54:DB:77:E1:8E:73
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       4FC40BE97CB0B1C5C4C2E1FE5AB5B5B955FB20B7
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3133382e35392e3134392e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 28 Jul 2025 12:31:29 +0000
ROA not before:           Mon 28 Jul 2025 12:26:29 +0000
ROA not after:            Mon 27 Jul 2026 12:31:29 +0000
asID:                     28165
IP address blocks:        138.59.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:c4:0b:e9:7c:b0:b1:c5:c4:c2:e1:fe:5a:b5:b5:b9:55:fb:20:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Jul 28 12:26:29 2025 GMT
            Not After : Jul 27 12:31:29 2026 GMT
        Subject: CN=73CCCCFCD17785D7C2B3E63A278E54DB77E18E73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:71:24:b3:1a:c3:f7:bf:33:d3:c7:af:a5:d9:
                    10:0e:5f:93:6e:14:9b:e8:f7:31:93:47:ae:71:ae:
                    ea:d5:ec:e9:fd:3d:ab:67:3f:e3:1f:aa:b6:a7:70:
                    7f:50:f2:71:88:f3:5f:3e:65:68:1e:27:5c:fe:69:
                    27:9e:8c:75:3b:85:29:52:ea:3c:46:d3:45:9d:f6:
                    91:ee:b8:2f:49:f8:5e:e1:eb:3b:66:1d:ac:41:6e:
                    3c:31:a3:53:a2:07:f7:cf:32:54:c6:0c:35:e6:d5:
                    26:c2:57:71:e8:c6:8e:e8:6b:a7:d3:59:b3:c5:2b:
                    e0:3d:33:df:bb:84:75:48:c7:bb:59:94:97:2a:ff:
                    9b:b2:ce:db:9c:1d:00:fa:68:74:f1:0b:cc:22:bf:
                    cb:5c:e9:a6:c6:b4:b9:f0:52:ee:17:e3:da:30:27:
                    74:d9:36:84:48:b4:9c:24:f7:8e:12:23:50:ec:11:
                    94:96:23:59:1b:e9:1b:92:a6:5f:55:db:ef:80:b5:
                    48:fc:b2:96:58:33:72:32:dc:d0:32:5c:9c:f7:78:
                    95:ce:c7:f8:f3:41:8d:49:ba:f7:3d:14:06:07:78:
                    c7:f0:ab:88:f8:98:6c:f5:6c:d5:0d:31:af:db:ed:
                    80:1a:71:67:cc:d9:9a:7e:fb:6a:0c:f5:61:b6:bb:
                    fe:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:CC:CC:FC:D1:77:85:D7:C2:B3:E6:3A:27:8E:54:DB:77:E1:8E:73
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3133382e35392e3134392e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:80:9a:f1:70:7c:7c:e1:2a:44:b4:f0:d7:d6:79:c8:84:5d:
         76:12:4f:27:91:4f:41:07:d7:9f:7b:40:65:f8:4d:e7:be:36:
         d6:dc:50:41:63:1a:63:3a:1a:e2:41:5d:6b:ee:15:22:f3:62:
         aa:bf:d1:c2:66:41:f1:f8:73:9b:89:dc:7e:62:08:f2:9f:a8:
         1e:68:91:18:e4:92:6b:df:dc:5e:8d:a2:b1:39:48:be:aa:3d:
         8e:62:c7:65:c2:20:c6:ad:db:e6:30:5c:f1:31:4c:90:b9:17:
         6e:5d:06:2d:26:d8:dd:39:96:00:57:94:7f:ef:40:e0:f2:9c:
         9b:e4:ce:7c:48:51:9c:d0:48:16:c1:b0:eb:fa:9b:0b:c9:0e:
         97:bb:fa:17:46:62:50:70:df:2d:a7:3b:e8:cc:ff:bc:9c:77:
         8e:f9:94:b1:af:2d:56:60:ac:56:6e:3e:19:ca:8d:eb:dd:67:
         46:fd:59:a9:0e:1a:d8:05:87:44:df:e3:da:ea:b4:02:38:99:
         2f:56:a4:e0:d2:5e:bf:bc:e5:9a:49:90:df:01:bc:a2:c3:b2:
         a7:43:98:b0:94:93:9d:6c:f6:b0:c6:4a:41:7a:1b:d8:6c:c3:
         0c:51:82:07:66:3b:02:5e:07:96:e8:fc:d8:0b:4f:ce:3e:ea:
         2b:4b:6f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:29:32 2025 by rpki-client