Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3232312e302f32342d3234203d3e203238313635.roa
File:                     3138372e36322e3232312e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          bOegrfmP16znUgfUHSm/AEfU/TNNFD3mKFzMB+3VueY=
Subject key identifier:   48:86:07:45:CD:6C:38:F6:59:69:16:F6:A7:93:09:B4:EE:58:D4:4F
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       1EDA99789C9970BCC4E575CBD228D9A227F35C4D
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3232312e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 28 Jul 2025 12:31:39 +0000
ROA not before:           Mon 28 Jul 2025 12:26:39 +0000
ROA not after:            Mon 27 Jul 2026 12:31:39 +0000
asID:                     28165
IP address blocks:        187.62.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 20:22:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:da:99:78:9c:99:70:bc:c4:e5:75:cb:d2:28:d9:a2:27:f3:5c:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Jul 28 12:26:39 2025 GMT
            Not After : Jul 27 12:31:39 2026 GMT
        Subject: CN=48860745CD6C38F6596916F6A79309B4EE58D44F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9c:53:f1:18:2a:17:9d:35:05:20:fb:92:32:
                    26:a1:c5:9f:7c:86:a1:fd:70:a1:3e:0e:1f:f3:32:
                    ad:87:f4:2c:f8:c7:c8:4b:2a:63:d0:57:45:81:c6:
                    2b:53:c0:88:9a:ac:40:bf:86:4f:54:56:e7:97:13:
                    7f:77:cb:36:fc:9a:e4:b8:3d:a9:1c:f3:46:5c:cf:
                    d0:d5:32:77:58:a5:b0:46:7a:98:66:fd:a6:e8:6a:
                    fc:1a:cb:d4:96:30:84:9a:f5:be:1d:a2:69:06:5a:
                    ac:41:d4:6c:a9:a8:d7:78:f6:1c:3c:c2:e8:9f:ef:
                    f5:3f:26:84:6d:5b:7d:b5:eb:05:b7:09:ae:57:54:
                    17:e0:c1:5d:6b:79:93:b7:26:04:60:3e:a4:0a:e4:
                    11:32:b4:d4:1e:17:21:86:31:a7:b0:48:ac:3b:38:
                    96:94:c8:f2:c5:3d:c6:43:bd:e4:56:fc:cb:5f:67:
                    df:98:61:73:f2:eb:59:da:8f:34:72:f7:a8:0a:33:
                    3c:b2:90:b9:81:07:e7:b9:33:83:71:27:20:d2:95:
                    83:08:8c:ca:0c:be:3d:ce:91:04:db:64:c9:9c:9e:
                    f6:c9:e4:31:50:9d:7d:bd:50:e1:77:99:bc:95:66:
                    97:51:06:de:fd:46:53:31:57:57:2b:ab:63:aa:89:
                    e6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:86:07:45:CD:6C:38:F6:59:69:16:F6:A7:93:09:B4:EE:58:D4:4F
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3232312e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:7a:75:8f:18:ce:9f:75:8b:13:7b:be:22:50:ae:74:00:4a:
         bb:f3:1b:0e:e8:9e:c9:c6:7d:1b:65:8b:da:0a:60:36:d5:31:
         f7:fc:7c:fe:1e:d0:46:ec:c6:f1:da:ab:ee:8a:23:4e:05:5c:
         fc:2a:fd:f0:9d:61:93:cd:61:89:14:6d:b2:63:91:7d:cf:92:
         a6:cf:8a:3c:0e:22:e2:eb:50:91:af:55:35:93:c8:05:df:cc:
         7e:49:69:7e:2f:1a:81:13:38:e7:46:ba:50:0b:0e:08:37:e8:
         de:64:2c:75:08:0d:fd:a0:28:53:c0:ad:0c:25:9b:58:0a:e2:
         b8:5d:d6:30:49:cb:7e:98:99:db:a9:09:cd:47:9e:1c:0e:ac:
         1f:28:1f:56:38:15:45:e8:34:ed:19:1b:24:67:a6:4d:84:09:
         45:64:ec:2f:bc:5d:c4:ab:46:c2:e3:8e:77:ee:47:4e:22:e0:
         41:7d:9b:f7:c3:6d:f4:52:45:4f:ba:1c:95:98:be:95:de:6e:
         51:f7:ba:db:c3:71:71:3e:18:5f:54:30:1c:62:b6:98:25:ab:
         ed:5f:00:6b:c6:2d:5c:df:78:48:f1:77:16:17:b1:b8:d4:92:
         95:3e:b2:7a:1a:e3:a8:3f:d2:72:48:1a:ee:1a:99:6b:fd:69:
         22:be:33:46
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUHtqZeJyZcLzE5XXL0ijZoifzXE0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTE2MDFBOUVGNUUwREE1RDBDMTUyRUNCN0ZFMjNDODc1
NUNCQzIwNzAeFw0yNTA3MjgxMjI2MzlaFw0yNjA3MjcxMjMxMzlaMDMxMTAvBgNV
BAMTKDQ4ODYwNzQ1Q0Q2QzM4RjY1OTY5MTZGNkE3OTMwOUI0RUU1OEQ0NEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOnFPxGCoXnTUFIPuSMiahxZ98
hqH9cKE+Dh/zMq2H9Cz4x8hLKmPQV0WBxitTwIiarEC/hk9UVueXE393yzb8muS4
Pakc80Zcz9DVMndYpbBGephm/aboavway9SWMISa9b4domkGWqxB1GypqNd49hw8
wuif7/U/JoRtW3216wW3Ca5XVBfgwV1reZO3JgRgPqQK5BEytNQeFyGGMaewSKw7
OJaUyPLFPcZDveRW/MtfZ9+YYXPy61najzRy96gKMzyykLmBB+e5M4NxJyDSlYMI
jMoMvj3OkQTbZMmcnvbJ5DFQnX29UOF3mbyVZpdRBt79RlMxV1crq2OqieaBAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUSIYHRc1sOPZZaRb2p5MJtO5Y1E8wHwYDVR0j
BBgwFoAUkWAanvXg2l0MFS7Lf+I8h1XLwgcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXBQcFhSUmN1RzlRMW1YcXh6UXhIS28zdXA4V1V0M3Q0VjRFbXl4dERu
SmovMC85MTYwMUE5RUY1RTBEQTVEMEMxNTJFQ0I3RkUyM0M4NzU1Q0JDMjA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxNjAxQTlFRjVFMERBNUQw
QzE1MkVDQjdGRTIzQzg3NTVDQkMyMDcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FwUHBYUlJjdUc5UTFtWHF4elF4SEtvM3VwOFdVdDN0NFY0RW15eHREbkpqLzAv
MzEzODM3MmUzNjMyMmUzMjMyMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzEzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAuz7dMA0GCSqGSIb3DQEBCwUAA4IBAQBzenWPGM6f
dYsTe74iUK50AEq78xsO6J7Jxn0bZYvaCmA21TH3/Hz+HtBG7Mbx2qvuiiNOBVz8
Kv3wnWGTzWGJFG2yY5F9z5Kmz4o8DiLi61CRr1U1k8gF38x+SWl+LxqBEzjnRrpQ
Cw4IN+jeZCx1CA39oChTwK0MJZtYCuK4XdYwSct+mJnbqQnNR54cDqwfKB9WOBVF
6DTtGRskZ6ZNhAlFZOwvvF3Eq0bC44537kdOIuBBfZv3w230UkVPuhyVmL6V3m5R
97rbw3FxPhhfVDAcYraYJavtXwBrxi1c33hI8XcWF7G41JKVPrJ6GuOoP9JySBru
Gplr/WkivjNG
-----END CERTIFICATE-----
Generated at Sun Aug 10 10:34:00 2025 by rpki-client