Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3231382e302f32342d3234203d3e203238313635.roa
File:                     3138372e36322e3231382e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          zyinwM9YiRgXe18bG3djU+rEufz//1byEiaKOqosX9g=
Subject key identifier:   6F:DC:5E:30:4A:50:9C:E1:1C:BD:F9:87:9D:A2:95:05:81:11:96:2A
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       78D1B6F2BC6881A75FCFC3BE9F6ADECAFC242B9E
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3231382e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 28 Jul 2025 12:31:38 +0000
ROA not before:           Mon 28 Jul 2025 12:26:38 +0000
ROA not after:            Mon 27 Jul 2026 12:31:38 +0000
asID:                     28165
IP address blocks:        187.62.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:d1:b6:f2:bc:68:81:a7:5f:cf:c3:be:9f:6a:de:ca:fc:24:2b:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Jul 28 12:26:38 2025 GMT
            Not After : Jul 27 12:31:38 2026 GMT
        Subject: CN=6FDC5E304A509CE11CBDF9879DA295058111962A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:74:d8:90:13:4e:e0:d2:63:5d:06:ba:3c:43:
                    e0:f7:a8:ab:5a:54:37:89:e3:31:ee:2a:3a:8b:05:
                    44:c0:27:17:05:b6:95:3e:03:4a:ea:55:63:b7:e4:
                    f6:76:ee:f2:9c:cb:29:67:a1:5a:35:67:e0:8c:83:
                    2e:f3:0a:dd:0f:c5:95:40:21:5c:7f:08:bb:75:e3:
                    c5:77:cf:e2:fe:20:79:3a:94:ed:92:d2:c7:39:a6:
                    b9:28:71:d3:0f:ca:36:b1:57:05:d6:4d:e0:ab:68:
                    51:38:fa:c6:31:d4:7b:e4:12:66:0e:4f:b2:b6:90:
                    39:e2:34:50:d8:e9:c3:a1:9b:b1:dc:c0:d3:f7:a5:
                    d1:52:b5:14:13:3d:94:05:19:0f:f8:ce:66:ad:cc:
                    46:1f:88:aa:99:dc:8e:69:01:1c:20:66:d4:b8:a0:
                    73:04:03:ff:66:b6:2a:2b:0f:54:d3:f3:f6:86:d2:
                    18:07:1b:e9:fa:60:af:3a:36:74:14:93:e8:7f:04:
                    19:4c:89:25:8c:b6:03:a8:38:e9:71:a6:9a:86:78:
                    e2:be:32:c5:55:dd:41:97:73:07:63:dc:e1:1f:e6:
                    57:27:0e:ed:95:75:3d:36:a9:62:8d:f1:1e:45:53:
                    33:70:00:ba:03:b2:29:7b:02:f1:7a:e9:3a:12:76:
                    7a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:DC:5E:30:4A:50:9C:E1:1C:BD:F9:87:9D:A2:95:05:81:11:96:2A
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3231382e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:93:4b:15:c5:15:c0:42:04:77:10:22:30:e0:2f:d5:ad:ca:
         4e:0a:91:31:6e:08:07:cb:48:9a:81:16:da:1d:7a:ad:0a:10:
         5c:66:57:bb:29:8a:db:9f:db:5a:5a:38:5a:14:7f:99:b5:56:
         9d:52:39:a9:22:ce:73:47:f9:27:69:a0:7b:7a:65:fa:7e:61:
         47:f7:22:17:db:1a:46:b2:71:db:86:b0:c0:f6:33:ab:16:f1:
         ad:66:92:95:f8:7b:3d:09:3e:ba:2c:12:74:fa:ab:9e:31:d9:
         d8:c2:3f:1f:73:ac:dd:bf:31:d4:be:cf:51:1a:96:0a:d5:e5:
         24:cf:cd:65:78:bf:73:a7:8a:e6:8e:e4:4d:4e:e3:24:1b:0b:
         18:5f:92:7d:86:9a:37:57:e6:2c:22:a1:c8:8a:e6:ff:a5:08:
         2a:f7:2c:9e:6f:86:94:79:85:ed:4f:5a:b4:b4:a0:3f:0b:23:
         4d:5e:5c:71:f0:26:07:43:47:78:bc:46:57:3f:83:24:99:98:
         d9:c1:83:5b:f8:1d:bd:23:97:ab:98:e6:28:ed:1d:81:e5:ff:
         34:cb:9c:93:be:9f:95:fc:ba:25:5e:29:44:b8:1a:c8:f7:b1:
         85:67:6f:3a:02:7f:34:c0:c2:36:29:5c:eb:c4:0f:77:cf:a3:
         ba:c9:37:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:14:10 2025 by rpki-client