Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3230382e302f32342d3234203d3e203238313635.roa
File:                     3138372e36322e3230382e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          36sx6+ctANiOwMsOJxQWX9yFaiWdG9LeyIcj6tea63k=
Subject key identifier:   0A:4A:80:49:99:A8:C2:4A:D5:B7:7E:FC:41:D3:6C:39:15:34:76:AF
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       1A289670FBBFEB6CF28AB6817BEDF85F9C2BCAC7
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3230382e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 28 Jul 2025 12:31:21 +0000
ROA not before:           Mon 28 Jul 2025 12:26:21 +0000
ROA not after:            Mon 27 Jul 2026 12:31:21 +0000
asID:                     28165
IP address blocks:        187.62.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 13:42:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:28:96:70:fb:bf:eb:6c:f2:8a:b6:81:7b:ed:f8:5f:9c:2b:ca:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Jul 28 12:26:21 2025 GMT
            Not After : Jul 27 12:31:21 2026 GMT
        Subject: CN=0A4A804999A8C24AD5B77EFC41D36C39153476AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:54:fa:e9:57:4b:b1:d4:4f:18:eb:a1:71:12:
                    80:32:6b:51:9e:13:62:09:b3:e9:9b:b8:ba:fe:cb:
                    76:a9:a2:8c:fd:a6:95:de:5f:a7:d4:39:32:b5:8a:
                    b4:1a:50:e4:50:2d:36:5a:ad:77:60:40:8b:19:94:
                    1e:e6:5c:21:c5:15:d2:88:67:29:19:cd:bc:8f:3f:
                    c8:b2:be:75:98:4d:03:0d:f6:00:23:cf:78:93:ad:
                    39:35:d8:26:86:d2:42:4c:16:02:a6:56:8e:09:d9:
                    a0:5f:a6:1d:d5:b7:6c:dd:2a:d4:2d:94:13:07:8c:
                    f5:d5:11:d9:86:c2:e0:db:76:da:48:a8:e1:48:4c:
                    e1:85:ba:af:e9:38:6e:94:b9:16:e9:8b:bf:4f:7d:
                    b9:87:01:75:95:c4:bd:05:b7:0c:7c:d7:9c:b2:ad:
                    6a:6a:5b:31:0a:56:b1:44:c4:08:54:9d:ce:37:79:
                    b0:4a:ab:ea:97:70:6d:00:90:08:9c:a0:85:b8:4a:
                    b9:42:76:89:61:17:b7:a4:f6:e9:7a:30:81:b9:6a:
                    f5:2d:59:9b:73:19:e2:c2:21:78:86:61:e5:a5:b4:
                    4f:aa:bc:67:96:51:07:70:ce:64:f4:e4:3a:b9:b7:
                    58:d6:a1:43:21:0c:22:b2:7a:16:b7:97:2c:b3:59:
                    a5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:4A:80:49:99:A8:C2:4A:D5:B7:7E:FC:41:D3:6C:39:15:34:76:AF
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3230382e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:09:16:41:aa:69:dd:b9:9e:78:c5:65:a5:49:7d:22:9b:5a:
         26:20:71:0d:97:3b:08:ac:65:06:91:50:6c:a1:cd:53:67:1e:
         b0:8a:9c:50:b9:47:8b:34:54:13:ea:cc:8b:ea:37:af:5d:7d:
         dc:fe:bf:a7:b2:3f:46:7b:03:75:db:b0:10:00:43:da:b7:dc:
         23:bf:cf:20:2d:18:3e:ac:b8:53:9c:e2:f1:a1:78:29:47:08:
         1b:8a:d2:ca:dd:c2:7a:78:a5:f0:d7:21:f3:84:2d:9c:eb:14:
         a2:63:cf:16:13:ff:59:eb:66:c8:45:3f:b7:52:89:f8:67:9a:
         75:f6:07:e2:fd:12:64:04:88:12:77:c1:ed:b4:35:e9:ef:fc:
         6d:44:da:ed:45:f9:3e:3f:fe:0f:08:d1:24:b3:e8:86:6b:3f:
         2f:e6:5b:db:d0:c4:db:51:6e:e4:b1:88:1b:74:66:59:40:2d:
         ca:46:55:e1:6d:b9:5b:74:6a:f8:ec:84:47:0f:d4:0d:cf:d7:
         9e:60:b0:f8:ea:d6:4b:d5:c6:ea:f3:36:0c:c9:9f:b9:b4:ef:
         ef:3a:a4:1d:d6:48:e4:29:bf:17:36:90:7f:ef:d9:3f:b5:03:
         f9:de:ea:3b:2a:99:4b:12:59:eb:9a:d9:28:f4:a6:07:9a:4f:
         6a:97:d7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:05:10 2025 by rpki-client