Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3232322e302f32342d3234203d3e203238313635.roa
File:                     3138372e36322e3232322e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          V0qJ4/GYEF/rwLKRiRu0zLxWzR0jkU1H42rMecOmCto=
Subject key identifier:   9D:8F:82:CE:3D:67:8A:6D:D7:ED:D3:F3:F4:A3:9B:EB:5E:9A:E7:2E
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       69BC24BCABB7701CB1EDF3CA8BCE858C1147A0AF
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3232322e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 28 Jul 2025 12:31:32 +0000
ROA not before:           Mon 28 Jul 2025 12:26:32 +0000
ROA not after:            Mon 27 Jul 2026 12:31:32 +0000
asID:                     28165
IP address blocks:        187.62.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:bc:24:bc:ab:b7:70:1c:b1:ed:f3:ca:8b:ce:85:8c:11:47:a0:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Jul 28 12:26:32 2025 GMT
            Not After : Jul 27 12:31:32 2026 GMT
        Subject: CN=9D8F82CE3D678A6DD7EDD3F3F4A39BEB5E9AE72E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c3:ad:2d:93:cf:95:81:26:c9:e5:a1:60:60:
                    2a:12:ff:79:4a:b1:77:16:bb:2c:7f:a3:b1:9b:e1:
                    9c:a1:6f:86:e5:a0:ec:8d:84:f8:3c:b1:a4:6e:03:
                    13:e5:b5:b5:f9:ea:96:8c:65:87:d8:59:a3:ba:f8:
                    89:2e:51:eb:52:fe:f2:70:26:c4:ef:df:65:86:7b:
                    0f:de:87:e0:88:29:63:a6:46:26:7d:a3:5f:ed:d1:
                    37:87:24:5d:5d:d9:a1:8d:e7:f6:c0:32:7c:43:fc:
                    73:09:60:cd:55:0b:8f:68:4e:26:89:ea:06:6b:a8:
                    ca:f8:ac:71:01:97:44:89:85:a5:7a:f2:37:b1:8f:
                    99:36:00:0f:e9:66:c5:63:b0:6c:8e:2d:d2:38:6c:
                    fe:ac:72:a8:7f:d9:c2:9b:56:54:88:27:af:d8:42:
                    5a:d9:d4:0b:96:af:42:57:9d:b4:da:a1:27:a4:e5:
                    98:12:ab:ee:aa:1d:94:00:7a:32:d4:a3:56:73:26:
                    57:ab:1f:97:7f:e4:6e:85:80:6a:6c:9f:c8:2a:01:
                    2b:67:ea:ef:9c:61:39:95:b6:5f:05:fc:0e:60:75:
                    55:21:6e:c4:71:9d:b8:f1:22:a2:b7:f1:60:53:ed:
                    85:4f:a7:ea:97:f5:1d:e3:14:52:52:b8:36:58:0f:
                    fb:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:8F:82:CE:3D:67:8A:6D:D7:ED:D3:F3:F4:A3:9B:EB:5E:9A:E7:2E
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3232322e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:e8:56:c1:7e:bd:61:27:c7:d1:a0:7c:11:81:f1:45:f2:56:
         24:c2:2f:bf:4a:f5:35:4a:7a:a5:4d:80:23:8c:a5:e7:07:58:
         53:0c:a3:6d:c5:40:4f:cd:f8:82:a3:e6:d2:26:fb:2d:b2:92:
         68:8c:7c:1d:66:da:fe:d7:c9:98:4d:61:4a:26:ba:f7:92:a7:
         4f:0b:64:cb:49:85:33:df:e5:42:ad:09:be:82:30:de:eb:b3:
         46:9c:51:32:68:d9:56:18:1d:0e:ff:3d:f1:eb:9c:8f:98:6e:
         b1:da:9d:bb:e1:e6:ed:3b:53:99:ba:3a:c8:5b:37:c6:14:23:
         bf:de:67:52:34:df:ac:76:39:7f:a1:4c:49:9b:7f:a3:92:ae:
         82:fd:c1:84:79:6a:3d:78:69:ee:79:50:59:21:ad:53:80:46:
         5e:30:14:7c:28:35:96:ef:04:70:52:e4:8c:2d:01:9e:15:2c:
         07:a4:c4:ab:72:b3:4a:02:da:b7:95:68:8d:4f:c7:0a:94:eb:
         3a:a5:b9:18:35:4e:59:70:f1:c3:08:02:3c:c6:1b:bb:82:ef:
         0a:fa:e6:b8:ea:a6:e5:78:74:57:31:5e:d4:b9:c6:08:a1:54:
         11:1b:1c:c1:9b:a7:d5:da:a3:8f:b6:c2:87:12:04:9c:af:de:
         cb:5c:bd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:49:33 2025 by rpki-client