Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3231392e302f32342d3234203d3e203238313635.roa
File:                     3138372e36322e3231392e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          N42RXUhhgUYMRnC+OsAcfHCRDaAwKr0Tbv1uaJX59hs=
Subject key identifier:   CF:6D:D8:E1:0A:0A:65:DE:F5:ED:5C:3C:C8:65:2D:66:FF:07:7F:B2
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       366C03DFC8EBE9AF6AA89FD963FFDB4890AA70F1
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3231392e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 28 Jul 2025 12:31:19 +0000
ROA not before:           Mon 28 Jul 2025 12:26:19 +0000
ROA not after:            Mon 27 Jul 2026 12:31:19 +0000
asID:                     28165
IP address blocks:        187.62.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:6c:03:df:c8:eb:e9:af:6a:a8:9f:d9:63:ff:db:48:90:aa:70:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Jul 28 12:26:19 2025 GMT
            Not After : Jul 27 12:31:19 2026 GMT
        Subject: CN=CF6DD8E10A0A65DEF5ED5C3CC8652D66FF077FB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e4:83:14:aa:00:8d:91:89:0f:18:6d:03:57:
                    07:d3:14:1f:a2:a3:b0:ef:ea:11:74:ab:71:ec:ed:
                    9d:3f:10:58:98:47:69:2e:d2:35:b7:a9:c1:38:0b:
                    48:5a:a3:00:b1:9d:a9:e1:c9:d5:6f:4d:67:c6:4b:
                    e7:ec:57:dc:75:d7:bb:0d:f4:59:98:6e:33:75:88:
                    a8:88:c7:99:47:7a:5d:4b:68:a3:35:45:55:e4:df:
                    50:4f:de:1a:9e:7d:e4:d8:5d:fb:6c:39:55:33:94:
                    ad:b9:31:79:6c:13:39:c6:09:22:f8:78:29:f1:3a:
                    93:49:f9:3e:1f:2a:14:ad:0a:2f:9d:3f:d5:ab:fa:
                    92:ef:cc:d1:43:7c:98:8f:9e:5f:c4:07:47:10:6e:
                    c0:28:47:ba:c5:1a:be:76:37:cb:53:01:b1:47:0b:
                    6e:5d:cc:35:5a:b9:5b:96:cf:ad:f3:3e:f7:dd:89:
                    0f:e2:f1:4c:3a:46:f7:37:48:58:f6:e0:bb:b2:19:
                    63:30:40:78:0f:af:ff:84:ef:69:57:40:c9:35:d6:
                    a1:ef:c8:47:2f:b4:4a:30:b0:06:c2:ef:ca:df:92:
                    b5:9f:60:27:36:0c:3c:8d:65:6a:1e:c3:22:ac:06:
                    15:f0:7f:59:da:ec:4c:03:cb:cc:ef:00:df:91:6e:
                    66:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:6D:D8:E1:0A:0A:65:DE:F5:ED:5C:3C:C8:65:2D:66:FF:07:7F:B2
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3231392e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:85:2e:a3:03:90:e0:d5:86:46:c2:1d:5d:a3:fb:4e:11:0e:
         10:38:30:8c:ea:e1:ae:db:15:80:3d:5f:97:d2:19:fa:7a:74:
         78:54:46:51:9d:34:d3:3c:24:69:1e:46:00:20:73:9b:b5:7c:
         71:0a:51:4a:fd:99:64:b8:6f:9c:ef:ec:6c:36:78:0d:16:10:
         09:2d:d6:2a:a2:81:cf:2f:fb:ce:81:06:99:34:57:19:c9:47:
         09:13:2d:86:ab:f7:32:6a:bb:e2:f7:69:74:9b:c8:79:92:c3:
         d3:af:a3:e9:a5:5f:99:9e:a3:f3:e3:b0:3c:16:07:51:d4:a2:
         ad:f8:ac:fc:e1:2f:18:4b:35:b6:27:02:c0:06:1e:23:b1:4c:
         5b:66:32:7c:4d:89:27:43:19:b4:ce:03:a9:8f:6b:75:38:77:
         43:f2:8b:de:73:55:f2:d4:a9:6f:e2:37:a3:f6:0d:29:7c:02:
         bd:bf:88:65:0c:2b:50:be:3e:32:ab:d9:86:5a:98:ad:b8:bf:
         55:8e:d2:86:f9:66:3d:85:dd:db:2a:5c:73:9c:93:ab:fe:cd:
         3c:3d:ac:23:f3:af:b1:00:f5:0f:35:29:a2:20:cd:f7:75:e5:
         b6:b5:c7:e4:57:d2:71:b5:43:80:2d:e0:0f:82:92:9a:a8:2e:
         9b:90:9f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:53:11 2025 by rpki-client