Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3231352e302f32342d3234203d3e203238313635.roa
File:                     3138372e36322e3231352e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          4U3S4/yx/DYGZMHmTPjY/0SxvBkh08xm5A5i4+I7RZo=
Subject key identifier:   8E:1A:7F:D5:7D:55:94:4B:06:74:E4:0B:45:B3:6A:E4:95:2C:52:8C
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       5684CCE90EBF75EEEF91DB529A7741D8A081D7B1
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3231352e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 28 Jul 2025 12:31:37 +0000
ROA not before:           Mon 28 Jul 2025 12:26:37 +0000
ROA not after:            Mon 27 Jul 2026 12:31:37 +0000
asID:                     28165
IP address blocks:        187.62.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:84:cc:e9:0e:bf:75:ee:ef:91:db:52:9a:77:41:d8:a0:81:d7:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Jul 28 12:26:37 2025 GMT
            Not After : Jul 27 12:31:37 2026 GMT
        Subject: CN=8E1A7FD57D55944B0674E40B45B36AE4952C528C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cc:2e:56:01:69:8d:01:82:94:f5:a5:6e:c7:
                    6d:38:c7:13:4b:df:19:d5:70:44:7c:2e:de:e8:4d:
                    29:5d:87:50:14:af:b3:d6:af:7a:9d:b4:0b:b0:a3:
                    f1:c6:d6:4d:58:ea:ce:8f:26:d8:5b:82:c8:ed:f8:
                    96:b7:4d:43:be:ab:72:e9:56:e4:5c:ab:76:4b:1f:
                    dc:f7:ae:a5:85:0a:fe:5e:a1:9e:fd:f6:ef:a6:f3:
                    39:ea:1d:23:61:df:ab:41:91:dd:7b:70:1a:91:50:
                    55:67:15:48:5f:c0:d1:b8:f7:d7:fc:db:fd:3c:8d:
                    14:dc:58:3c:d3:66:9d:c7:87:bb:f8:34:a4:3f:bc:
                    9d:c0:78:fd:6d:eb:f5:9b:67:5f:ae:af:5c:b6:f1:
                    65:50:0e:fe:b2:47:a7:32:fc:60:ae:74:3e:04:8d:
                    2f:58:4e:4d:c6:19:63:29:7b:12:8e:56:77:81:79:
                    7e:c8:9b:b3:96:6f:a4:d5:b7:28:f5:bd:e0:80:ed:
                    1f:ab:11:31:aa:50:52:7f:a9:3b:f1:87:de:36:dd:
                    46:2e:a5:ed:7d:9a:9e:da:a6:8f:76:3e:f6:61:cb:
                    e7:ca:d5:d2:54:a2:74:44:e1:51:4c:92:9e:10:1c:
                    ff:5f:75:c7:13:b7:92:c7:1b:0b:d2:bc:e3:03:1e:
                    3e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:1A:7F:D5:7D:55:94:4B:06:74:E4:0B:45:B3:6A:E4:95:2C:52:8C
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3231352e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:09:14:96:cb:02:ae:78:c0:8d:44:7e:84:9c:f4:91:57:78:
         a5:87:ba:b1:6e:99:d9:08:71:d3:69:9c:d0:07:5a:b4:78:b7:
         0e:4d:a8:ca:ec:64:8c:1f:79:0c:26:19:ef:17:01:1e:86:85:
         5d:39:23:a2:d6:84:cc:f0:90:69:db:3a:8f:40:76:45:b9:17:
         a9:89:d9:32:3a:f2:b9:22:7b:7d:c0:16:83:c5:3a:98:2a:b2:
         3e:5f:13:47:08:ce:fb:1d:90:ba:88:e4:14:fc:7a:13:08:98:
         75:5b:2e:76:bc:a0:34:5f:2d:68:2f:33:84:f0:ca:18:77:2e:
         e4:49:49:ac:33:14:ad:51:53:6e:41:2e:09:0a:c6:cd:bd:dc:
         38:22:5d:9b:0d:80:75:c4:e6:c2:bf:0e:5b:57:90:55:60:52:
         34:51:52:18:61:58:e3:6e:e1:12:5d:0b:c2:8b:2c:a8:48:49:
         2c:e3:a6:2f:19:47:52:56:34:6c:cd:6a:60:d9:64:7d:8b:73:
         a4:7c:a1:0f:c7:11:5a:c0:ba:86:03:ae:44:41:89:65:39:fa:
         0f:8f:a0:da:1e:7c:6e:09:dc:0f:c9:6b:8c:35:e5:e7:88:9f:
         c1:44:60:d4:d5:ec:36:b4:92:34:3d:06:4a:5a:64:ed:ef:ed:
         0a:17:48:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:57:23 2025 by rpki-client