Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3230392e302f32342d3234203d3e203238313635.roa
File:                     3138372e36322e3230392e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          YpGkOBy3PjwH+/YazwRuA/3FZbTE1CUjdzqDJj8Qbgo=
Subject key identifier:   AE:CD:4A:0E:03:02:C5:CE:A5:2A:F3:C1:F6:BF:C5:84:F1:A1:FF:19
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       1474E711C8825E1FF8985F48711D4AE72450BACA
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3230392e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 28 Jul 2025 12:31:55 +0000
ROA not before:           Mon 28 Jul 2025 12:26:55 +0000
ROA not after:            Mon 27 Jul 2026 12:31:55 +0000
asID:                     28165
IP address blocks:        187.62.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:74:e7:11:c8:82:5e:1f:f8:98:5f:48:71:1d:4a:e7:24:50:ba:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Jul 28 12:26:55 2025 GMT
            Not After : Jul 27 12:31:55 2026 GMT
        Subject: CN=AECD4A0E0302C5CEA52AF3C1F6BFC584F1A1FF19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:4b:50:ec:33:e2:55:c2:91:3c:49:eb:7a:4b:
                    3a:c0:ba:60:c3:73:d4:0a:eb:06:d0:71:d9:3d:67:
                    ea:98:53:91:cf:fd:e8:80:0f:f8:03:df:99:13:fd:
                    0a:d9:0d:85:c3:4a:9f:b6:16:b8:8e:86:80:ab:4f:
                    ee:ba:7e:ab:b5:26:c3:09:2b:f9:aa:f5:04:2e:b9:
                    59:b0:a9:fe:a6:8e:fa:9b:30:2a:f1:55:eb:07:30:
                    5b:0b:ed:9f:07:3c:25:38:f8:9d:9b:0c:ef:31:59:
                    c5:44:38:a2:62:a0:91:27:b5:b0:00:5d:1f:c2:eb:
                    8d:88:18:ab:35:30:89:61:2b:22:d9:c1:53:84:8d:
                    ac:15:7e:9b:fd:44:0d:75:a7:dc:47:0b:a9:b8:fd:
                    c8:80:ae:0c:3d:5f:01:7b:0e:bb:15:33:7c:9c:28:
                    17:65:0b:06:d7:a0:f5:d0:05:e5:a5:16:f7:2b:5d:
                    40:11:c2:8a:25:89:48:f9:69:99:ed:a5:01:30:ab:
                    3a:fc:51:88:e7:3b:da:b8:2b:73:e0:cb:3b:e7:27:
                    b8:86:c8:19:49:e2:f4:31:de:d5:32:ca:5d:85:ac:
                    ae:04:9d:64:f1:c6:d2:ac:5d:5d:90:95:ce:5b:35:
                    1c:80:2a:fe:51:a3:10:9c:4e:b9:a7:46:46:f8:2c:
                    aa:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:CD:4A:0E:03:02:C5:CE:A5:2A:F3:C1:F6:BF:C5:84:F1:A1:FF:19
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3230392e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:f3:05:a9:44:fe:31:df:36:09:da:4e:5a:fd:b7:6f:f4:f2:
         0c:63:e7:96:68:47:77:30:9e:1b:84:dd:32:26:bf:ef:a4:48:
         0b:8d:87:15:14:aa:b0:f2:62:0c:04:29:4e:eb:a3:0b:22:11:
         1d:c4:29:e4:41:ea:0b:06:a8:5a:7b:ef:80:21:15:31:9a:1d:
         46:88:ea:e1:73:53:2a:c6:c1:6f:30:c5:5c:99:c5:73:fc:f0:
         5c:39:fb:82:c7:cf:67:34:ac:78:ff:ca:66:44:d4:2d:0a:e3:
         eb:cb:e9:88:6a:21:54:8d:ed:b4:6f:6e:36:d0:cf:bc:3e:53:
         20:8a:db:27:0c:0e:8d:23:fc:42:40:aa:7b:c4:67:a7:05:69:
         7e:d7:5e:d9:29:3e:a2:69:db:b4:11:1a:5b:f0:65:13:04:b2:
         0d:71:b6:0a:c5:de:e9:99:1b:d2:f1:dc:9d:c8:c0:35:b1:73:
         78:12:41:64:da:57:56:01:68:75:02:55:f1:82:fa:d8:1d:3f:
         09:9e:af:fe:ad:46:87:3b:22:b8:8e:57:66:ac:0f:f5:d7:13:
         f5:e1:eb:6d:9d:5c:80:49:96:4c:f5:8d:80:e5:f4:f6:3c:c7:
         da:d1:32:d0:0a:6f:d5:4d:f6:df:e3:3e:fd:0f:51:66:a2:cb:
         99:f7:c8:0b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUFHTnEciCXh/4mF9IcR1K5yRQusowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTE2MDFBOUVGNUUwREE1RDBDMTUyRUNCN0ZFMjNDODc1
NUNCQzIwNzAeFw0yNTA3MjgxMjI2NTVaFw0yNjA3MjcxMjMxNTVaMDMxMTAvBgNV
BAMTKEFFQ0Q0QTBFMDMwMkM1Q0VBNTJBRjNDMUY2QkZDNTg0RjFBMUZGMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD+S1DsM+JVwpE8Set6SzrAumDD
c9QK6wbQcdk9Z+qYU5HP/eiAD/gD35kT/QrZDYXDSp+2FriOhoCrT+66fqu1JsMJ
K/mq9QQuuVmwqf6mjvqbMCrxVesHMFsL7Z8HPCU4+J2bDO8xWcVEOKJioJEntbAA
XR/C642IGKs1MIlhKyLZwVOEjawVfpv9RA11p9xHC6m4/ciArgw9XwF7DrsVM3yc
KBdlCwbXoPXQBeWlFvcrXUARwooliUj5aZntpQEwqzr8UYjnO9q4K3PgyzvnJ7iG
yBlJ4vQx3tUyyl2FrK4EnWTxxtKsXV2Qlc5bNRyAKv5RoxCcTrmnRkb4LKpbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUrs1KDgMCxc6lKvPB9r/FhPGh/xkwHwYDVR0j
BBgwFoAUkWAanvXg2l0MFS7Lf+I8h1XLwgcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXBQcFhSUmN1RzlRMW1YcXh6UXhIS28zdXA4V1V0M3Q0VjRFbXl4dERu
SmovMC85MTYwMUE5RUY1RTBEQTVEMEMxNTJFQ0I3RkUyM0M4NzU1Q0JDMjA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxNjAxQTlFRjVFMERBNUQw
QzE1MkVDQjdGRTIzQzg3NTVDQkMyMDcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FwUHBYUlJjdUc5UTFtWHF4elF4SEtvM3VwOFdVdDN0NFY0RW15eHREbkpqLzAv
MzEzODM3MmUzNjMyMmUzMjMwMzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzEzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAuz7RMA0GCSqGSIb3DQEBCwUAA4IBAQBW8wWpRP4x
3zYJ2k5a/bdv9PIMY+eWaEd3MJ4bhN0yJr/vpEgLjYcVFKqw8mIMBClO66MLIhEd
xCnkQeoLBqhae++AIRUxmh1GiOrhc1MqxsFvMMVcmcVz/PBcOfuCx89nNKx4/8pm
RNQtCuPry+mIaiFUje20b2420M+8PlMgitsnDA6NI/xCQKp7xGenBWl+117ZKT6i
adu0ERpb8GUTBLINcbYKxd7pmRvS8dydyMA1sXN4EkFk2ldWAWh1AlXxgvrYHT8J
nq/+rUaHOyK4jldmrA/11xP14ettnVyASZZM9Y2A5fT2PMfa0TLQCm/VTfbf4z79
D1FmosuZ98gL
-----END CERTIFICATE-----
Generated at Sun Aug 10 03:57:01 2025 by rpki-client