Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3230382e302f32302d3230203d3e203238313635.roa
File:                     3138372e36322e3230382e302f32302d3230203d3e203238313635.roa (raw, json)
Hash identifier:          NlhcbxrDtm+gF3ZGV7KO91HiM5YWNKz7HymXob4bobE=
Subject key identifier:   6E:F4:15:E5:FF:57:33:D4:14:16:B4:17:2D:AE:66:88:BB:82:F1:D5
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       031CA47211BFE79AEB13C3CB5E1D783552C57835
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3230382e302f32302d3230203d3e203238313635.roa
Signing time:             Mon 28 Jul 2025 12:31:24 +0000
ROA not before:           Mon 28 Jul 2025 12:26:24 +0000
ROA not after:            Mon 27 Jul 2026 12:31:24 +0000
asID:                     28165
IP address blocks:        187.62.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:1c:a4:72:11:bf:e7:9a:eb:13:c3:cb:5e:1d:78:35:52:c5:78:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Jul 28 12:26:24 2025 GMT
            Not After : Jul 27 12:31:24 2026 GMT
        Subject: CN=6EF415E5FF5733D41416B4172DAE6688BB82F1D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3a:10:2b:76:e8:08:91:21:f0:ef:ad:19:df:
                    34:6a:da:fd:9a:70:10:93:d7:3d:02:ca:19:0f:d2:
                    32:31:e8:c3:8b:38:38:e0:2e:ab:6b:92:e2:54:7e:
                    d4:bb:7b:bf:dc:88:67:24:2e:e0:38:c8:24:1b:a9:
                    33:eb:1e:90:02:3f:15:bb:1c:81:d4:14:5e:97:c8:
                    22:e5:34:8b:ac:3a:e6:50:0c:42:cb:2a:50:5c:60:
                    a6:36:bb:ab:9e:cc:bf:26:f3:e8:ab:35:2f:99:1d:
                    24:b1:d0:bc:b2:33:0d:ba:43:94:6f:4c:ad:1a:52:
                    1d:f0:d7:49:d3:2c:09:7d:5c:f8:da:1f:7d:c5:60:
                    c3:f3:59:32:1d:3b:aa:b7:e1:57:02:ea:d0:9a:af:
                    44:96:a8:e4:2f:13:8a:c2:c5:ca:f8:e7:05:d0:aa:
                    7f:29:00:93:9c:48:3f:4b:3e:c7:7e:5f:a3:ab:03:
                    ab:3a:13:19:1a:d2:74:0d:29:75:e9:5e:05:36:32:
                    5f:67:b3:ea:e9:92:eb:e1:a5:dd:be:b9:b7:82:44:
                    3c:28:be:c4:55:85:07:9c:7c:97:87:c2:70:15:de:
                    8e:95:e8:ad:f4:68:b9:03:63:d6:55:4b:f4:99:5e:
                    87:66:0d:27:df:b1:83:a5:a9:6b:5f:9a:69:ad:e3:
                    86:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F4:15:E5:FF:57:33:D4:14:16:B4:17:2D:AE:66:88:BB:82:F1:D5
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3230382e302f32302d3230203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1f:5f:5b:81:4c:57:53:3e:e7:3e:1a:28:b4:24:82:a5:83:e5:
         ef:88:f3:08:ed:3d:1e:b4:a6:b0:1a:3c:b2:76:9a:7d:23:b1:
         46:72:b8:79:a3:88:32:4a:c4:d1:40:f7:92:f8:d1:f1:80:76:
         54:36:b6:e5:fe:60:91:92:71:8b:5e:a5:01:3c:a2:4c:be:a8:
         b4:01:63:73:2c:70:41:ee:94:c9:76:37:9c:52:b5:94:c5:3b:
         72:6d:f0:d4:c5:ea:97:84:f9:00:6b:35:cc:84:92:f6:8f:5b:
         83:6a:c9:e4:6f:0b:1a:95:81:33:69:7a:e4:b5:66:43:f9:3f:
         b5:d7:c1:69:ba:ea:9d:62:b7:e5:f7:54:ce:5b:73:7c:e3:90:
         1d:a3:8c:d2:b2:e3:a6:16:13:3b:6c:15:6d:c3:84:f1:6b:57:
         d0:de:3f:a4:47:b9:92:eb:da:4a:0c:d5:ef:81:c9:37:95:58:
         ed:fb:7a:b4:8d:ed:96:36:5b:f2:ea:59:de:a7:19:d7:9b:b6:
         76:ec:28:57:8d:15:fa:79:52:8a:87:bb:a9:6e:a8:75:31:e1:
         dc:7e:cd:2a:af:3d:75:f0:03:b3:2d:01:60:a8:33:c4:98:83:
         de:55:74:25:b8:fe:bd:27:f0:81:c4:d8:34:f4:2c:92:af:a6:
         73:e1:24:a3
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUAxykchG/55rrE8PLXh14NVLFeDUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTE2MDFBOUVGNUUwREE1RDBDMTUyRUNCN0ZFMjNDODc1
NUNCQzIwNzAeFw0yNTA3MjgxMjI2MjRaFw0yNjA3MjcxMjMxMjRaMDMxMTAvBgNV
BAMTKDZFRjQxNUU1RkY1NzMzRDQxNDE2QjQxNzJEQUU2Njg4QkI4MkYxRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVOhArdugIkSHw760Z3zRq2v2a
cBCT1z0CyhkP0jIx6MOLODjgLqtrkuJUftS7e7/ciGckLuA4yCQbqTPrHpACPxW7
HIHUFF6XyCLlNIusOuZQDELLKlBcYKY2u6uezL8m8+irNS+ZHSSx0LyyMw26Q5Rv
TK0aUh3w10nTLAl9XPjaH33FYMPzWTIdO6q34VcC6tCar0SWqOQvE4rCxcr45wXQ
qn8pAJOcSD9LPsd+X6OrA6s6Exka0nQNKXXpXgU2Ml9ns+rpkuvhpd2+ubeCRDwo
vsRVhQecfJeHwnAV3o6V6K30aLkDY9ZVS/SZXodmDSffsYOlqWtfmmmt44Y7AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUbvQV5f9XM9QUFrQXLa5miLuC8dUwHwYDVR0j
BBgwFoAUkWAanvXg2l0MFS7Lf+I8h1XLwgcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXBQcFhSUmN1RzlRMW1YcXh6UXhIS28zdXA4V1V0M3Q0VjRFbXl4dERu
SmovMC85MTYwMUE5RUY1RTBEQTVEMEMxNTJFQ0I3RkUyM0M4NzU1Q0JDMjA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxNjAxQTlFRjVFMERBNUQw
QzE1MkVDQjdGRTIzQzg3NTVDQkMyMDcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FwUHBYUlJjdUc5UTFtWHF4elF4SEtvM3VwOFdVdDN0NFY0RW15eHREbkpqLzAv
MzEzODM3MmUzNjMyMmUzMjMwMzgyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzMjM4
MzEzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEuz7QMA0GCSqGSIb3DQEBCwUAA4IBAQAfX1uBTFdT
Puc+Gii0JIKlg+XviPMI7T0etKawGjyydpp9I7FGcrh5o4gySsTRQPeS+NHxgHZU
Nrbl/mCRknGLXqUBPKJMvqi0AWNzLHBB7pTJdjecUrWUxTtybfDUxeqXhPkAazXM
hJL2j1uDasnkbwsalYEzaXrktWZD+T+118FpuuqdYrfl91TOW3N845Ado4zSsuOm
FhM7bBVtw4Txa1fQ3j+kR7mS69pKDNXvgck3lVjt+3q0je2WNlvy6lnepxnXm7Z2
7ChXjRX6eVKKh7upbqh1MeHcfs0qrz118AOzLQFgqDPEmIPeVXQluP69J/CBxNg0
9CySr6Zz4SSj
-----END CERTIFICATE-----
Generated at Sun Aug 10 04:21:28 2025 by rpki-client