Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3139312e3234302e3134352e302f32342d3234203d3e203238313635.roa
File:                     3139312e3234302e3134352e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          WoGTzhBunvUb/g4f2Dwb9ejPQzrqUK3SBYVHsDtPbD8=
Subject key identifier:   1D:23:C0:14:FB:AF:4F:E9:5F:86:06:3E:34:5A:87:60:2E:01:6F:36
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       3C7851F706225B6481B8438079C0CDCDF0B448CC
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3139312e3234302e3134352e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 28 Jul 2025 12:31:35 +0000
ROA not before:           Mon 28 Jul 2025 12:26:35 +0000
ROA not after:            Mon 27 Jul 2026 12:31:35 +0000
asID:                     28165
IP address blocks:        191.240.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 13:42:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:78:51:f7:06:22:5b:64:81:b8:43:80:79:c0:cd:cd:f0:b4:48:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Jul 28 12:26:35 2025 GMT
            Not After : Jul 27 12:31:35 2026 GMT
        Subject: CN=1D23C014FBAF4FE95F86063E345A87602E016F36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:15:cf:da:8e:50:71:a3:d4:29:2e:b8:19:4f:
                    64:11:4d:63:69:4c:63:d6:9f:09:fc:0f:ce:75:4f:
                    7d:16:24:fd:6a:2b:3e:97:92:4f:c8:28:ed:16:60:
                    66:46:cb:d2:3b:ff:22:d4:ec:8a:ca:a5:86:f5:a3:
                    2a:de:33:9c:8f:cd:df:03:b7:7e:b8:f6:f1:b5:be:
                    d9:52:ca:81:b8:65:35:db:c0:97:db:cf:d6:c5:3f:
                    cd:e1:a0:2a:e0:8c:31:2c:a5:2d:14:74:e8:87:fb:
                    a0:27:78:49:60:b4:82:f6:05:a5:77:2a:57:0d:2e:
                    42:4b:2f:b1:2a:d6:b0:c7:76:a5:ad:20:7c:65:d6:
                    3b:0a:f5:b2:12:4b:6b:8f:a7:8e:6f:68:ed:e8:62:
                    86:ff:df:0a:27:8e:15:ee:91:53:6e:b6:b0:41:4f:
                    a6:07:92:91:d2:6f:f0:e1:e6:8d:4c:c2:01:1e:f9:
                    69:da:20:de:2d:95:39:32:46:c4:54:13:36:76:81:
                    43:79:61:50:43:d4:68:3a:1b:0d:46:4e:85:aa:ff:
                    8c:5c:78:ea:26:c7:85:38:0c:a4:75:11:ee:20:ce:
                    72:06:20:c8:41:65:84:e1:63:7e:98:1a:87:07:61:
                    54:7b:e4:d4:3c:19:4e:27:e9:d9:48:ca:1c:22:c4:
                    1d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:23:C0:14:FB:AF:4F:E9:5F:86:06:3E:34:5A:87:60:2E:01:6F:36
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3139312e3234302e3134352e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:7e:1a:0e:d5:bc:b3:d2:97:3d:f8:39:2c:17:18:58:96:c8:
         83:87:27:4a:7c:ba:1c:6e:e8:94:70:a1:2f:20:fe:56:03:3e:
         b5:c4:06:61:db:fa:55:33:ff:c2:8b:3a:e4:57:31:f5:2f:c1:
         d6:f8:ad:57:6d:b0:49:92:19:89:03:1d:51:26:fe:6a:a3:5f:
         1d:0b:e7:b7:02:75:0b:e2:4e:eb:57:f3:35:b9:ec:dc:1f:d0:
         3e:78:85:6b:d2:e9:cc:0e:39:39:34:a7:4c:a8:fd:41:52:a9:
         8e:09:c4:94:96:ea:5a:d6:64:dc:6a:7e:06:ae:b5:72:a9:5a:
         97:fc:a4:58:71:3a:6e:8c:3a:ed:d8:98:79:97:86:3e:b0:43:
         34:97:0e:ed:80:94:68:2c:8a:0c:5f:4c:0c:18:f4:d9:bb:03:
         37:89:eb:8c:e0:79:0f:d8:27:de:4b:bb:6d:d4:9f:f8:bd:e5:
         2e:20:8b:46:10:02:8a:34:37:71:da:44:41:57:d3:9d:dd:64:
         dc:99:97:a7:af:3f:65:ee:a3:8f:13:58:bd:94:d7:51:b4:36:
         9d:ab:d2:cc:82:20:fa:90:99:0a:0e:d0:ed:d2:78:56:2b:ae:
         2b:f7:a5:77:e5:eb:ed:d7:98:17:d4:fc:84:17:b0:7b:43:3f:
         ef:62:e0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:17:23 2025 by rpki-client