Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3232332e302f32342d3234203d3e203238313635.roa
File:                     3138372e36322e3232332e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          Jrdp2pgt0xTd9gKcFiXp9QlnVoIYpX3OAP9slqDfoSA=
Subject key identifier:   72:14:1B:57:AA:58:3E:22:54:2E:D8:F9:B8:57:B6:AC:34:D6:AD:46
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       3F2767546AE31E958CA32F78C94C263B0E993181
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3232332e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 28 Jul 2025 12:31:30 +0000
ROA not before:           Mon 28 Jul 2025 12:26:30 +0000
ROA not after:            Mon 27 Jul 2026 12:31:30 +0000
asID:                     28165
IP address blocks:        187.62.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:27:67:54:6a:e3:1e:95:8c:a3:2f:78:c9:4c:26:3b:0e:99:31:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Jul 28 12:26:30 2025 GMT
            Not After : Jul 27 12:31:30 2026 GMT
        Subject: CN=72141B57AA583E22542ED8F9B857B6AC34D6AD46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:dd:db:43:c7:4e:4b:99:88:9b:5a:5e:d4:19:
                    05:82:5b:23:16:47:06:b7:a4:49:5d:3e:9f:98:dc:
                    d8:69:dc:16:0c:9e:50:a1:cf:04:f7:2a:c8:78:e3:
                    fe:fb:54:52:90:6d:0e:bf:43:08:8a:cc:4e:05:5c:
                    71:f8:85:5c:b7:62:dc:80:dd:5c:0a:8b:37:8d:de:
                    1f:b0:cc:7e:9c:2d:9a:7f:98:10:5b:35:20:d4:1c:
                    6e:cd:6d:b7:d0:36:ec:90:86:89:55:a7:30:67:87:
                    12:30:b4:12:c9:e0:fb:1a:84:83:d5:69:3a:e7:2d:
                    cd:3c:c4:5d:de:f5:fe:42:69:c9:5c:9a:b6:b3:2e:
                    af:09:52:90:3d:86:3e:9c:d2:80:95:cb:66:42:db:
                    e2:88:fd:13:d3:7b:c3:6d:36:7e:28:4b:f6:f1:e1:
                    2b:84:7c:3b:39:0f:5d:89:ad:6a:2e:eb:92:c7:96:
                    43:cd:f4:f0:7a:3a:fc:f1:96:79:36:da:7f:4e:a8:
                    e4:a9:f7:93:bb:d1:26:a8:60:79:c6:76:e5:07:8c:
                    3a:2d:79:a3:24:c5:80:a3:80:e4:00:08:66:02:45:
                    c8:30:4e:3d:e6:f3:9a:b2:18:cd:6e:70:b4:fe:82:
                    12:f3:ad:eb:03:75:cf:81:97:47:2a:9b:4e:e6:1c:
                    ff:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:14:1B:57:AA:58:3E:22:54:2E:D8:F9:B8:57:B6:AC:34:D6:AD:46
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3232332e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:63:66:34:7e:d2:d0:cb:f7:c6:ba:2b:2f:62:d3:4f:46:26:
         56:b3:81:08:53:68:f5:ff:c2:85:df:db:9e:58:d9:71:af:3d:
         ad:90:cc:4d:ce:da:7c:bb:2d:7b:20:20:88:74:ee:e8:fc:6e:
         50:a8:69:52:cd:d5:de:8c:9e:cb:5b:6b:b8:66:f1:5b:f8:ce:
         73:14:25:3a:18:67:c3:f1:51:13:6a:b0:3d:eb:55:ca:fc:9d:
         1b:8e:e0:4f:07:35:a6:cf:a0:69:ab:08:1f:48:2d:c4:6f:00:
         ac:d4:3a:2d:fc:21:5d:a2:4c:1b:92:2f:6c:4f:04:2a:68:83:
         da:78:45:e4:e4:8b:af:75:f2:6f:6f:b0:6e:7b:fc:1a:8f:a5:
         32:1f:f4:b0:a1:c2:62:18:9f:22:7b:a1:94:5f:b5:b0:33:8d:
         6d:42:70:a9:44:9b:51:be:ed:48:4b:84:5b:52:01:1e:39:38:
         da:dc:35:4b:5f:2e:80:ae:a6:00:c3:37:94:6d:fc:b8:c3:88:
         f7:09:61:a5:86:10:46:8b:19:1b:c2:e9:be:dc:f9:ba:4a:1d:
         1f:d3:c3:cd:f9:0a:ad:40:f5:f5:ff:77:65:cc:26:51:2b:d0:
         02:e8:39:77:e6:23:23:ca:6a:b8:56:5e:28:ca:0a:7c:b1:ab:
         ae:10:e2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:51:31 2025 by rpki-client