Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3231342e302f32342d3234203d3e203238313635.roa
File:                     3138372e36322e3231342e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          hqnCDyyUfgXkCQwDXzkTSmSCfd2wyNFYZclmbpa1ooY=
Subject key identifier:   F6:DD:61:F6:A5:09:19:93:4B:7A:74:10:C1:9C:8A:45:A7:89:54:01
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       1BACB5582C71B734CA54654A5BFE28A43F63A9D2
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3231342e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 28 Jul 2025 12:31:52 +0000
ROA not before:           Mon 28 Jul 2025 12:26:52 +0000
ROA not after:            Mon 27 Jul 2026 12:31:52 +0000
asID:                     28165
IP address blocks:        187.62.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 20:22:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:ac:b5:58:2c:71:b7:34:ca:54:65:4a:5b:fe:28:a4:3f:63:a9:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Jul 28 12:26:52 2025 GMT
            Not After : Jul 27 12:31:52 2026 GMT
        Subject: CN=F6DD61F6A50919934B7A7410C19C8A45A7895401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8e:76:be:13:66:d0:3c:94:f1:eb:8e:9b:f7:
                    0c:b7:10:2a:f2:f0:4f:53:62:b0:4c:05:ad:dc:a9:
                    fd:2d:48:12:8c:80:f1:7f:a4:f4:cf:ff:c1:93:dd:
                    58:7b:9b:e3:74:23:8d:6c:ec:99:9b:6a:00:ba:31:
                    52:c1:1c:3d:8d:89:3a:96:96:c2:a6:fe:d1:46:79:
                    0b:ab:2b:46:ec:ae:ed:f0:06:61:86:e5:a5:e9:69:
                    f8:90:89:f9:64:95:fb:30:98:09:11:7a:df:e0:cd:
                    06:9e:0f:30:54:d0:21:fd:ea:88:f5:7e:6c:e5:c7:
                    3d:a3:95:1e:25:17:44:02:a9:62:5a:72:19:30:ab:
                    cc:ef:e3:a3:b3:c9:ed:22:a9:78:f6:38:44:d8:ee:
                    55:88:6f:6a:ec:73:96:08:ed:74:68:99:2c:0a:c5:
                    e0:03:e3:06:a7:02:e2:23:6f:eb:44:29:32:84:68:
                    cd:6d:b8:da:82:4a:a1:1d:90:63:aa:99:56:20:d4:
                    d1:1e:3e:3c:1d:1f:a4:3a:63:25:7c:1d:36:bb:86:
                    1e:f9:1e:b5:c7:d9:a3:1d:bf:72:4c:f8:4d:d8:54:
                    75:97:04:94:db:01:f7:ed:fb:68:fc:c2:72:fd:b1:
                    77:5a:8d:c0:5b:92:84:a2:51:c3:a2:a7:59:37:df:
                    53:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:DD:61:F6:A5:09:19:93:4B:7A:74:10:C1:9C:8A:45:A7:89:54:01
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3231342e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:82:10:35:1e:0c:60:51:37:63:68:85:9b:2a:de:45:e5:95:
         65:73:f9:2b:fd:e5:4f:4d:e9:a4:74:8c:a0:62:a4:76:49:93:
         80:f1:af:28:76:a6:9f:fc:49:c6:4b:e9:22:55:84:f3:09:3c:
         96:31:43:1d:12:d5:aa:0b:a0:24:fe:7c:c6:83:14:49:43:67:
         79:e8:87:6e:99:79:72:f8:64:12:3f:63:2c:80:92:f2:88:8c:
         61:7e:9d:e1:84:a6:aa:aa:e0:7e:c0:68:db:cf:e1:24:ed:12:
         94:2b:6b:72:e5:90:72:1d:2b:27:06:58:7d:90:e0:8b:5a:6a:
         53:aa:89:e2:e3:cc:0e:2b:22:d2:6c:2f:e2:79:79:58:44:29:
         71:77:31:11:11:ae:94:4a:e6:cd:48:ce:f2:43:02:9c:7b:5a:
         45:7a:9c:9b:da:6d:a0:f3:7c:c2:df:d7:5a:64:16:c1:57:ab:
         a5:ef:19:25:f6:24:42:9e:dc:a1:20:7f:e3:06:71:a6:5f:9f:
         d9:7b:d3:a4:74:ed:0e:23:0c:4e:a0:d4:17:0c:dd:6c:66:e2:
         f5:b3:90:9c:db:fa:c8:d4:ce:5d:d2:0b:72:65:80:92:37:62:
         f6:bf:73:b0:c5:93:97:41:82:38:7b:87:51:b9:af:20:56:25:
         c2:49:fe:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:38:03 2025 by rpki-client