Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3230382e302f32312d3231203d3e203238313635.roa
File:                     3138372e36322e3230382e302f32312d3231203d3e203238313635.roa (raw, json)
Hash identifier:          9gag7EFompeIs28YB0JZ6HifkItMQqD1uX9VdGW5t9s=
Subject key identifier:   74:C8:C8:9E:13:93:8A:5C:E4:D5:9F:48:A1:A7:96:AC:76:F5:D5:94
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       3DB63ADAD035B168AE0D4D6EAB7233BDCEAEE5A4
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3230382e302f32312d3231203d3e203238313635.roa
Signing time:             Mon 28 Jul 2025 12:31:22 +0000
ROA not before:           Mon 28 Jul 2025 12:26:22 +0000
ROA not after:            Mon 27 Jul 2026 12:31:22 +0000
asID:                     28165
IP address blocks:        187.62.208.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:b6:3a:da:d0:35:b1:68:ae:0d:4d:6e:ab:72:33:bd:ce:ae:e5:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Jul 28 12:26:22 2025 GMT
            Not After : Jul 27 12:31:22 2026 GMT
        Subject: CN=74C8C89E13938A5CE4D59F48A1A796AC76F5D594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9b:23:49:1a:96:af:6a:9e:42:49:8d:c9:45:
                    5e:26:9b:44:3e:3a:0e:0a:b2:9e:5f:7e:c0:33:00:
                    58:e7:b3:8b:eb:79:97:26:23:7d:32:ab:13:10:d1:
                    12:a9:1a:91:63:3d:7c:9b:ca:56:57:fd:2e:d6:a6:
                    4a:ec:3c:bc:9d:66:8b:05:a3:92:40:11:4b:31:b8:
                    ea:dd:ff:2f:e0:45:05:9f:6a:91:99:d5:cd:4e:80:
                    22:d9:f9:e8:00:64:4f:af:56:48:86:94:d5:f6:48:
                    3f:a1:63:51:86:ad:c9:bd:ec:ae:3e:aa:f0:97:bc:
                    9b:67:5c:90:18:ac:27:63:d3:92:35:7c:f7:8d:96:
                    7d:54:29:cc:ec:b7:ab:25:c3:4d:ff:0c:bb:9a:1e:
                    5a:0c:3d:9c:9c:79:e8:2b:ff:ba:46:2e:c3:bc:8f:
                    f0:39:94:c6:61:8d:2e:05:18:1a:37:95:40:02:ea:
                    ca:fb:82:ca:0a:70:c2:b0:f6:e1:38:bb:87:51:93:
                    a7:f0:1f:29:d9:4a:29:74:cb:a9:4a:f3:39:16:6a:
                    3e:b0:fe:a3:b3:5b:7d:87:34:27:69:29:05:6a:95:
                    26:78:71:67:52:c2:2b:25:e7:e9:9d:19:64:ca:ce:
                    c0:1f:80:86:c0:f5:ad:99:a1:43:b1:8f:5e:89:b8:
                    d4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C8:C8:9E:13:93:8A:5C:E4:D5:9F:48:A1:A7:96:AC:76:F5:D5:94
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3230382e302f32312d3231203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         65:d8:39:e1:ba:d5:3a:2e:8e:bc:17:20:2a:6c:69:73:b4:4d:
         c3:34:47:ea:57:83:a7:17:58:99:64:78:83:a1:98:ad:8a:c0:
         8c:2a:c9:55:87:54:29:e4:9c:7e:0c:87:a7:32:b7:cc:4a:29:
         a6:41:b5:7f:2a:3c:20:fb:36:cb:e5:ce:9f:70:07:05:3c:44:
         28:87:e6:47:9b:38:4a:76:a9:80:12:a0:89:fd:02:65:2e:17:
         0b:78:f8:c1:8f:7a:b2:82:13:d7:5f:3a:ac:27:34:44:51:51:
         27:69:1f:9f:e0:52:9c:b5:3c:48:66:6c:98:ad:52:75:bf:11:
         a2:52:ba:de:89:b2:ee:62:75:a8:60:e7:6a:51:29:88:5a:1d:
         52:ef:5d:37:2b:ec:dd:10:46:89:37:20:ee:9a:91:a5:11:83:
         83:2e:60:9d:26:c7:09:55:e9:7a:e0:4a:08:53:b3:69:b5:bc:
         f9:d2:9c:88:e8:43:08:e9:d3:7d:2e:da:29:43:f6:30:80:3d:
         44:ff:46:25:4d:05:6c:99:5c:c5:58:9e:95:78:4d:8f:af:c7:
         6e:ce:8e:ff:34:25:1e:03:8d:4b:f1:ae:98:9f:2f:09:9e:d3:
         e8:58:eb:d9:9e:4e:59:3f:e6:a3:d5:e7:5e:33:ef:d5:be:9a:
         84:4b:1b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:18:19 2025 by rpki-client