Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3137302e38312e3137312e302f32342d3234203d3e203238313635.roa
File:                     3137302e38312e3137312e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          Te1Tg1i3u06KHszxkqXKdeSXjNsnDELPcugHI9F4w0M=
Subject key identifier:   8F:B7:52:AB:C2:AC:0B:DB:6A:A7:A4:4C:CB:69:DD:A9:C8:40:ED:CE
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       329A6D2635168ED4E5C3125E1F6D25CB88C52C2B
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3137302e38312e3137312e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 28 Jul 2025 12:31:30 +0000
ROA not before:           Mon 28 Jul 2025 12:26:30 +0000
ROA not after:            Mon 27 Jul 2026 12:31:30 +0000
asID:                     28165
IP address blocks:        170.81.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:9a:6d:26:35:16:8e:d4:e5:c3:12:5e:1f:6d:25:cb:88:c5:2c:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Jul 28 12:26:30 2025 GMT
            Not After : Jul 27 12:31:30 2026 GMT
        Subject: CN=8FB752ABC2AC0BDB6AA7A44CCB69DDA9C840EDCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2f:dd:b7:1a:42:8c:9a:7e:be:14:5c:ed:b8:
                    a1:ff:65:82:db:ae:38:44:24:d8:a6:dd:67:77:37:
                    fa:70:43:91:14:94:b3:29:c3:0a:b1:f1:fd:ae:c0:
                    0b:0c:b1:f6:fc:12:f3:f0:b6:5a:90:25:b4:81:c8:
                    17:aa:d4:4a:d9:ea:5c:ab:a0:ae:ad:f6:24:a7:3c:
                    06:9b:cf:9f:ab:46:dc:09:f8:6d:93:2f:28:96:78:
                    de:2c:5c:5d:21:6e:73:39:37:42:d6:d3:e1:bc:2b:
                    99:36:6f:ca:14:9e:7a:7b:62:5a:0c:16:1a:86:1a:
                    48:23:38:d6:1b:a8:5a:b7:ca:e1:c0:0c:1c:e4:af:
                    bf:dd:e3:5e:83:67:cf:4d:06:f7:ac:07:23:52:8c:
                    a2:ae:f4:fa:bc:bb:06:63:ee:bb:32:31:91:b1:62:
                    4d:24:29:bd:d7:a4:26:3f:4c:5e:95:c6:29:7b:bc:
                    a6:b2:e8:c7:62:40:6f:e7:42:63:b4:38:36:52:8d:
                    7f:1e:34:85:22:a4:27:57:1c:1b:78:ad:ec:22:44:
                    23:91:0b:9f:72:77:aa:ac:64:3e:af:a9:d6:91:76:
                    3f:1a:7d:36:de:f4:ef:48:4e:56:fe:dd:fe:aa:ea:
                    02:ee:f3:b7:ee:dd:09:d7:47:36:22:43:49:1b:ee:
                    f6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B7:52:AB:C2:AC:0B:DB:6A:A7:A4:4C:CB:69:DD:A9:C8:40:ED:CE
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3137302e38312e3137312e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:87:b5:f7:88:ad:f6:2b:dc:98:a6:1d:ab:8d:c2:d9:84:62:
         26:82:20:bc:c7:6a:c1:a0:23:06:74:2d:f8:22:3a:36:0e:de:
         1a:52:b0:05:67:5a:62:2b:9a:17:2b:a4:99:f1:b2:82:4c:fd:
         65:1c:3a:06:a2:12:df:8f:1d:89:25:69:2b:e7:8c:f8:b8:41:
         3c:71:55:93:12:5f:d8:3f:6e:a9:6a:7d:65:17:8e:e5:c9:4f:
         6d:b6:ea:ac:48:78:d0:01:0b:66:13:0c:82:a4:47:f1:2d:fa:
         c8:52:cc:2f:90:e1:9c:de:12:91:6a:ff:1f:75:54:85:a7:a2:
         a4:58:15:7c:f7:d5:01:9f:7a:21:39:9d:ca:90:a4:4b:88:92:
         fd:61:8a:6d:e5:43:c0:71:14:54:1f:e4:5c:dd:11:c0:7a:8f:
         17:7a:85:5f:61:00:4b:20:ef:a6:60:2d:3d:f4:e4:b7:f1:b2:
         18:a5:84:33:20:7e:66:44:7d:80:6f:be:79:08:fc:e2:f8:c9:
         48:ff:22:db:0d:1d:c9:bc:a5:56:02:af:39:dc:d4:7d:83:db:
         47:4f:55:49:47:3b:88:e2:51:d1:fc:9b:99:8a:e0:07:83:bd:
         99:07:d8:77:55:fa:79:13:e6:97:e5:64:1b:d1:43:da:24:f3:
         f1:32:a0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:49:30 2025 by rpki-client