Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3231372e302f32342d3234203d3e203238313635.roa
File:                     3138372e36322e3231372e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          Ubca6/v6BROMcySlSFZm0A2UEdgDpRvehRiHOI3+w3A=
Subject key identifier:   3C:36:1B:E3:BA:03:CC:D3:8B:E6:FA:DA:34:52:11:D2:07:B0:F6:D9
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       582D4BD44FB7DD21DBBE278836DABF9CA263484A
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3231372e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 28 Jul 2025 12:31:25 +0000
ROA not before:           Mon 28 Jul 2025 12:26:25 +0000
ROA not after:            Mon 27 Jul 2026 12:31:25 +0000
asID:                     28165
IP address blocks:        187.62.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:2d:4b:d4:4f:b7:dd:21:db:be:27:88:36:da:bf:9c:a2:63:48:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Jul 28 12:26:25 2025 GMT
            Not After : Jul 27 12:31:25 2026 GMT
        Subject: CN=3C361BE3BA03CCD38BE6FADA345211D207B0F6D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:cd:5a:73:db:85:78:4d:07:0c:d9:c0:f3:76:
                    6d:4c:a0:a9:3d:45:f7:dd:9a:f7:a2:0f:a3:53:8f:
                    e1:0c:7e:cd:c2:d0:7b:06:7c:62:e0:7f:fa:59:6f:
                    0d:3e:93:77:3d:39:41:cf:64:f4:fb:c7:f3:6b:df:
                    35:39:d4:2a:cd:ce:0b:87:91:7f:22:22:bd:bb:07:
                    11:e4:0e:a9:a1:3e:77:a8:60:83:58:15:04:ee:a2:
                    a1:7c:b9:3d:59:8b:21:2c:08:6f:da:b8:b8:51:1e:
                    77:56:6d:63:7e:77:17:00:32:60:f2:2c:84:be:41:
                    3e:5b:ef:cc:db:34:59:e5:89:8c:f6:72:83:f3:e6:
                    a6:6b:72:7a:4e:fc:bf:2c:eb:fe:39:2a:77:1c:06:
                    b9:0d:b2:6b:f5:27:44:6b:31:41:60:8c:69:29:54:
                    e1:96:1a:cd:e3:94:a6:26:ba:41:93:b8:08:69:58:
                    68:e4:de:d9:4f:49:bc:b5:ba:f7:6d:10:24:a3:fc:
                    a4:64:bc:23:ee:1d:8d:c3:53:74:ef:44:67:fb:1e:
                    67:35:14:89:32:82:3c:31:67:81:f9:57:65:89:c5:
                    7b:39:79:22:dd:f6:df:6c:b3:09:85:60:39:d2:97:
                    2d:14:57:af:cf:2a:28:8c:1c:00:22:62:77:96:c6:
                    42:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:36:1B:E3:BA:03:CC:D3:8B:E6:FA:DA:34:52:11:D2:07:B0:F6:D9
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3231372e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:91:36:22:5b:1a:e9:09:6d:2d:46:60:44:81:46:16:8d:94:
         1e:2d:75:2f:01:6b:53:89:15:59:b0:64:d6:6a:c0:93:f6:b4:
         ff:37:97:aa:66:ae:02:2d:06:1d:3c:6d:b0:b6:51:dd:59:68:
         1f:69:99:01:b0:4f:ee:cf:0c:e2:df:1c:aa:9d:4c:c0:6f:62:
         db:d3:2e:11:f3:42:be:17:e5:75:a1:c5:94:d5:cd:6a:a5:b6:
         60:7f:0e:c5:14:ed:3a:f1:14:df:ef:f5:1f:ea:46:6e:0d:72:
         d6:d5:f5:25:83:e9:80:93:7b:5c:9c:e4:a2:41:ef:18:d4:d3:
         79:67:d1:16:84:0d:68:6f:bb:0a:66:80:64:43:63:da:96:8b:
         be:32:ad:cc:31:63:c8:3e:67:32:30:42:e0:f2:c4:7e:c0:14:
         db:46:60:7f:59:81:44:7a:ba:e2:fd:40:f8:d9:6f:af:b6:d2:
         7b:0e:26:90:c1:32:e3:8f:d2:bd:d9:fd:f5:1e:8b:ec:c9:d1:
         51:80:20:9b:fd:88:b7:72:0a:dc:f1:79:0a:59:69:6b:8b:0c:
         4b:c6:8e:34:95:d6:24:5e:d3:15:49:3b:09:8b:db:25:4a:e6:
         98:44:a6:79:09:a2:c1:61:87:dd:d6:4c:c2:5f:2b:16:f2:66:
         fb:a7:3d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:07:31 2025 by rpki-client