Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3139312e3234302e3134342e302f32312d3231203d3e203238313635.roa
File:                     3139312e3234302e3134342e302f32312d3231203d3e203238313635.roa (raw, json)
Hash identifier:          zAibdRsyk56JsEljKENjRsSgpuIJ8RDdWXdjl8ctd34=
Subject key identifier:   B2:3A:56:B1:B8:E6:A0:8F:0F:3A:BB:2C:7C:8A:34:B0:F5:68:42:E4
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       06C7A3FBB81E2DD05F5888388A072041FEE089F7
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3139312e3234302e3134342e302f32312d3231203d3e203238313635.roa
Signing time:             Mon 28 Jul 2025 12:31:25 +0000
ROA not before:           Mon 28 Jul 2025 12:26:25 +0000
ROA not after:            Mon 27 Jul 2026 12:31:25 +0000
asID:                     28165
IP address blocks:        191.240.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:c7:a3:fb:b8:1e:2d:d0:5f:58:88:38:8a:07:20:41:fe:e0:89:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Jul 28 12:26:25 2025 GMT
            Not After : Jul 27 12:31:25 2026 GMT
        Subject: CN=B23A56B1B8E6A08F0F3ABB2C7C8A34B0F56842E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bf:3a:ec:fe:8a:87:13:15:fe:d0:6e:bf:7e:
                    22:3e:33:6f:42:a2:78:54:9a:b0:46:78:ba:4b:07:
                    23:69:88:86:af:86:76:16:a3:dc:4e:1e:b7:2e:ef:
                    ee:dc:09:b8:ab:35:fa:58:c2:b7:da:9e:95:12:22:
                    54:2f:ce:9f:df:e1:15:e7:fd:ae:57:8b:72:02:0b:
                    a7:a2:38:25:3c:c6:d8:d4:e2:8e:6f:54:cc:32:3b:
                    fa:88:a3:cf:51:39:28:f9:fa:b8:36:5f:0d:36:31:
                    4a:93:7e:e1:65:5b:f6:39:b9:75:b3:1b:ba:0a:d6:
                    c3:9e:b1:73:9a:dc:ab:9b:f8:10:b9:7a:21:fc:67:
                    c0:e2:19:c2:18:99:ab:0f:7c:6c:4b:56:60:00:a1:
                    c6:21:62:c0:82:d7:16:6c:80:e8:27:80:13:01:3b:
                    1c:85:3b:f4:8c:d2:e4:5d:7a:22:32:cc:df:43:50:
                    af:31:b6:65:81:8f:ba:6f:6a:7e:66:39:6d:a6:b2:
                    6b:37:30:e3:32:0f:9d:6f:3d:9e:ab:f0:da:47:a3:
                    50:b9:21:65:0e:5e:7a:28:c3:9d:10:e9:10:d1:fa:
                    46:cd:e4:dc:9e:7c:8e:c4:62:ed:9e:9f:db:82:02:
                    cc:6c:d4:92:69:27:8d:fd:f9:80:3d:7a:67:5f:cb:
                    e9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:3A:56:B1:B8:E6:A0:8F:0F:3A:BB:2C:7C:8A:34:B0:F5:68:42:E4
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3139312e3234302e3134342e302f32312d3231203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         01:05:ad:22:64:e5:e2:0c:dd:9a:ea:d8:55:9c:9a:c9:c2:c7:
         09:57:3c:e7:81:f2:28:b7:8c:96:6f:15:56:1d:af:37:b9:c9:
         73:8b:ad:aa:79:af:29:7f:f1:27:28:4d:3a:5f:f2:ae:5a:24:
         1e:c9:ab:c5:3f:89:be:c6:7c:41:40:76:79:98:2f:6f:7c:83:
         fc:a8:da:70:ac:e4:ac:76:b0:64:c1:2a:f7:cd:6d:94:47:df:
         04:35:70:1b:ac:e1:c8:74:ce:8f:78:cf:95:6b:50:6b:a5:c1:
         c1:4f:d2:7c:a2:1d:5c:ce:54:60:60:98:58:02:bc:be:62:38:
         6d:13:4d:eb:78:8a:11:29:6d:16:de:74:56:8a:5e:17:0f:88:
         db:5b:44:a3:bf:b6:f3:6d:41:c9:4d:d9:4d:7d:e4:c0:c3:88:
         db:72:b7:fd:81:88:7b:9a:95:c6:ba:cd:4d:51:b0:fb:37:7d:
         52:14:06:b7:e6:d7:ce:b8:c4:61:73:9a:9a:dc:3e:6f:c5:a4:
         e4:24:58:1d:8b:9f:97:23:4e:ec:a9:78:11:5f:38:cd:8f:03:
         81:76:c7:c6:c0:f5:8b:1b:b8:6c:92:c0:43:49:ef:9f:b8:db:
         d2:bd:01:30:45:45:9c:ef:a3:71:c3:99:22:bc:5f:8d:3b:cc:
         e7:75:5b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:53:37 2025 by rpki-client