Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3139312e3234302e3134372e302f32342d3234203d3e203238313635.roa
File:                     3139312e3234302e3134372e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          Vnoh+CaGTw5iFrLDW2xi1FD+PfWBAOaJV0WAPuD44/c=
Subject key identifier:   3D:B8:CD:DB:25:B3:0F:41:18:23:9F:B4:DB:B3:42:F4:0A:18:A3:BB
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       0670248F7437C0D6198D32692E37372299954611
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3139312e3234302e3134372e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 28 Jul 2025 12:31:40 +0000
ROA not before:           Mon 28 Jul 2025 12:26:40 +0000
ROA not after:            Mon 27 Jul 2026 12:31:40 +0000
asID:                     28165
IP address blocks:        191.240.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 13:42:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:70:24:8f:74:37:c0:d6:19:8d:32:69:2e:37:37:22:99:95:46:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Jul 28 12:26:40 2025 GMT
            Not After : Jul 27 12:31:40 2026 GMT
        Subject: CN=3DB8CDDB25B30F4118239FB4DBB342F40A18A3BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e0:28:c7:90:1f:27:22:eb:b3:24:79:5c:28:
                    e2:b4:4a:40:62:8f:ae:17:47:40:11:47:03:c3:ba:
                    c0:d4:b5:9a:da:bc:9d:e0:d2:55:3b:dc:f6:96:dc:
                    b3:9e:a3:e1:16:c7:e2:a2:6c:35:62:07:68:c4:90:
                    fd:a3:6e:c2:73:7c:23:60:64:ff:7a:93:11:cf:f0:
                    77:a3:bf:1b:b7:11:aa:c4:4d:86:1e:81:c9:c3:94:
                    a9:8d:81:c4:0a:c5:8a:1f:ad:b0:ec:4f:6d:ee:e6:
                    18:e0:a8:eb:b0:8d:84:33:28:03:c4:53:58:4b:0f:
                    bc:44:40:a1:9c:45:43:db:4c:36:ad:3b:78:a7:36:
                    c9:56:35:70:0c:67:11:ec:13:ca:65:3d:11:6e:00:
                    ac:ad:9b:b1:4d:3e:3f:d3:40:85:4e:9f:ee:38:3e:
                    72:a2:24:4e:28:75:4d:e8:dd:d0:94:a2:f9:6d:52:
                    66:23:34:87:7e:f0:de:9c:1e:ab:17:c5:e0:28:08:
                    68:13:b3:5b:e7:67:17:ee:bb:bb:f3:45:66:11:d0:
                    96:88:71:f5:89:a3:83:a7:72:56:a5:a8:72:3e:cd:
                    29:32:e5:ab:bf:2e:88:14:af:4a:8b:f8:8e:09:6d:
                    ea:2e:3d:de:ea:2a:d2:0d:a6:49:0f:c4:5c:94:fa:
                    17:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B8:CD:DB:25:B3:0F:41:18:23:9F:B4:DB:B3:42:F4:0A:18:A3:BB
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3139312e3234302e3134372e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:9c:f6:26:c6:2a:b1:de:10:72:ee:ea:3f:de:a7:3b:0b:62:
         8c:53:3b:17:79:0e:fa:a0:79:f5:99:b6:b7:c3:7f:21:09:7f:
         75:eb:72:c1:20:56:a3:2e:3c:1f:4c:0c:2d:ae:68:ee:3e:ce:
         60:4b:36:09:b1:63:b5:85:32:84:96:3a:72:9e:5f:92:55:d4:
         5c:0d:bb:33:58:43:35:95:25:26:58:f7:b3:47:60:d2:1a:99:
         0d:ab:70:2b:73:ab:16:29:34:ad:dc:2f:4e:9b:77:7b:3f:2c:
         27:1c:4e:4a:36:64:c4:f2:54:67:08:b7:2b:d8:98:f7:dc:e0:
         ff:2f:df:43:6c:9e:80:73:05:f5:3d:50:5c:8a:e6:f2:5e:1c:
         bb:96:7b:a9:28:8b:d2:f9:74:7e:53:98:9a:8d:c2:b9:e8:da:
         e8:25:54:fb:99:da:f8:d7:1e:57:06:3c:d1:c4:fa:f5:27:be:
         28:3a:d7:26:53:3a:80:db:d0:74:6b:4e:ff:4e:cf:3f:55:60:
         db:c9:95:4d:0e:bd:5c:72:c5:d6:87:3e:c8:57:3e:a1:0e:ae:
         34:81:76:72:8c:74:47:95:2b:4c:47:e2:70:5f:d7:a8:02:ae:
         ee:d5:1c:3e:f0:d7:67:e3:e0:be:3c:c3:03:b4:34:b0:eb:61:
         1d:1f:45:de
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBnAkj3Q3wNYZjTJpLjc3IpmVRhEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTE2MDFBOUVGNUUwREE1RDBDMTUyRUNCN0ZFMjNDODc1
NUNCQzIwNzAeFw0yNTA3MjgxMjI2NDBaFw0yNjA3MjcxMjMxNDBaMDMxMTAvBgNV
BAMTKDNEQjhDRERCMjVCMzBGNDExODIzOUZCNERCQjM0MkY0MEExOEEzQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs4CjHkB8nIuuzJHlcKOK0SkBi
j64XR0ARRwPDusDUtZravJ3g0lU73PaW3LOeo+EWx+KibDViB2jEkP2jbsJzfCNg
ZP96kxHP8Hejvxu3EarETYYegcnDlKmNgcQKxYofrbDsT23u5hjgqOuwjYQzKAPE
U1hLD7xEQKGcRUPbTDatO3inNslWNXAMZxHsE8plPRFuAKytm7FNPj/TQIVOn+44
PnKiJE4odU3o3dCUovltUmYjNId+8N6cHqsXxeAoCGgTs1vnZxfuu7vzRWYR0JaI
cfWJo4OnclalqHI+zSky5au/LogUr0qL+I4JbeouPd7qKtINpkkPxFyU+heLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUPbjN2yWzD0EYI5+027NC9AoYo7swHwYDVR0j
BBgwFoAUkWAanvXg2l0MFS7Lf+I8h1XLwgcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXBQcFhSUmN1RzlRMW1YcXh6UXhIS28zdXA4V1V0M3Q0VjRFbXl4dERu
SmovMC85MTYwMUE5RUY1RTBEQTVEMEMxNTJFQ0I3RkUyM0M4NzU1Q0JDMjA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxNjAxQTlFRjVFMERBNUQw
QzE1MkVDQjdGRTIzQzg3NTVDQkMyMDcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FwUHBYUlJjdUc5UTFtWHF4elF4SEtvM3VwOFdVdDN0NFY0RW15eHREbkpqLzAv
MzEzOTMxMmUzMjM0MzAyZTMxMzQzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzMTM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC/8JMwDQYJKoZIhvcNAQELBQADggEBACOc9ibG
KrHeEHLu6j/epzsLYoxTOxd5DvqgefWZtrfDfyEJf3XrcsEgVqMuPB9MDC2uaO4+
zmBLNgmxY7WFMoSWOnKeX5JV1FwNuzNYQzWVJSZY97NHYNIamQ2rcCtzqxYpNK3c
L06bd3s/LCccTko2ZMTyVGcItyvYmPfc4P8v30NsnoBzBfU9UFyK5vJeHLuWe6ko
i9L5dH5TmJqNwrno2uglVPuZ2vjXHlcGPNHE+vUnvig61yZTOoDb0HRrTv9Ozz9V
YNvJlU0OvVxyxdaHPshXPqEOrjSBdnKMdEeVK0xH4nBf16gCru7VHD7w12fj4L48
wwO0NLDrYR0fRd4=
-----END CERTIFICATE-----
Generated at Sun Aug 10 16:05:16 2025 by rpki-client