Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3231332e302f32342d3234203d3e203238313635.roa
File:                     3138372e36322e3231332e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          f9/2ZIV+Mxn4D80+8Z9RmaxzS/szIFV3j4fDDoNd2EU=
Subject key identifier:   31:B5:56:23:10:08:18:6B:BD:A1:0E:F8:CD:34:EA:B5:32:8F:9B:DB
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       38BB6F69CCF82706DB6D72D1FDFE034190B74DA7
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3231332e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 28 Jul 2025 12:31:38 +0000
ROA not before:           Mon 28 Jul 2025 12:26:38 +0000
ROA not after:            Mon 27 Jul 2026 12:31:38 +0000
asID:                     28165
IP address blocks:        187.62.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:bb:6f:69:cc:f8:27:06:db:6d:72:d1:fd:fe:03:41:90:b7:4d:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Jul 28 12:26:38 2025 GMT
            Not After : Jul 27 12:31:38 2026 GMT
        Subject: CN=31B556231008186BBDA10EF8CD34EAB5328F9BDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2f:b7:05:7e:99:c8:ff:7a:8d:15:3f:37:da:
                    9d:2e:37:7c:85:b8:d7:23:44:37:d5:05:95:fa:d4:
                    60:75:aa:19:96:91:1c:97:78:00:4b:96:1c:be:02:
                    02:d8:c8:b2:a9:9e:8e:88:67:b9:ba:f8:38:b8:d8:
                    17:52:02:0c:31:10:51:0a:3e:cb:78:54:42:05:22:
                    28:94:b3:ba:cb:97:a3:ba:ef:1e:60:70:cc:35:ed:
                    7b:9a:5b:d6:0c:1a:cc:37:13:8b:b4:32:fb:73:60:
                    80:0e:3e:14:a7:65:c5:18:7f:11:e7:dd:35:18:76:
                    cd:09:97:11:eb:80:fd:c2:37:b1:da:aa:90:b0:b8:
                    b5:ca:a5:50:84:a9:b3:ad:fe:1d:e7:6e:c1:a7:71:
                    47:38:e5:66:aa:06:cd:71:30:e1:77:16:63:04:4d:
                    28:60:15:c2:55:b3:71:fd:aa:95:0d:03:31:bf:07:
                    67:a4:27:d9:cb:a2:49:10:8d:0f:d6:7a:0b:65:2b:
                    4a:04:3a:81:dd:c7:da:2f:a7:74:a6:f6:e9:43:63:
                    5a:be:02:e8:82:6c:71:3b:e3:02:75:3b:c7:74:12:
                    09:04:35:73:a6:1a:31:d4:6c:c6:9b:6e:32:e7:3e:
                    0c:a9:40:bc:a4:13:b2:ac:71:72:af:2d:73:5f:26:
                    49:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B5:56:23:10:08:18:6B:BD:A1:0E:F8:CD:34:EA:B5:32:8F:9B:DB
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3231332e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:7a:09:06:d0:f6:29:6d:8c:f1:d0:ca:94:d3:e0:01:be:8b:
         3c:8e:d0:aa:51:b3:f0:cb:35:be:f8:5a:14:8b:a0:98:1c:6b:
         3b:90:35:e2:30:8b:86:ae:8f:f1:48:bd:78:cb:e6:c2:50:ab:
         52:a7:58:2e:21:c2:a8:a6:41:28:fc:97:92:7f:7b:b4:cf:bb:
         4a:36:97:50:6a:ab:ff:6d:e0:55:9b:1f:4e:c7:54:2d:f6:b1:
         1a:2c:14:bf:34:62:64:05:72:eb:fd:8a:50:ac:a0:9c:de:af:
         80:4d:10:cb:07:8a:72:4a:a8:13:c6:ad:03:15:ef:3e:23:6a:
         de:cb:ef:e7:48:63:0d:e9:50:92:6a:cf:7b:6b:10:f4:0c:a6:
         4f:c7:d9:9b:5d:1c:93:4c:62:1b:7d:eb:a7:c8:bf:02:ce:2f:
         41:f1:82:59:7f:eb:c7:fc:34:76:7d:3f:cb:49:81:c2:31:26:
         00:32:18:37:62:4c:13:f5:01:bf:1e:b7:ce:47:f2:50:cb:24:
         af:a5:dd:09:c2:e2:be:ef:8a:b5:3b:e4:21:75:b4:47:2f:99:
         64:8b:aa:63:f2:3c:46:18:77:5f:f3:ba:74:c3:d3:48:07:92:
         bb:46:0a:e3:e7:ca:21:92:f0:90:49:d2:c1:fa:7a:bb:12:5e:
         3e:f5:e4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:09:17 2025 by rpki-client