Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3139312e3234302e3135302e302f32342d3234203d3e203238313635.roa
File:                     3139312e3234302e3135302e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          pgGB3AUdEU3yXhVLR7aFiOYxqbGDStBz7UH/4I4xHaQ=
Subject key identifier:   1D:A7:F9:E9:E9:AD:E9:28:F6:26:55:46:E3:FF:D7:C6:C2:82:82:66
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       12F976DB168980F9E38A91D3C64A176094E2688F
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3139312e3234302e3135302e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 28 Jul 2025 12:31:42 +0000
ROA not before:           Mon 28 Jul 2025 12:26:42 +0000
ROA not after:            Mon 27 Jul 2026 12:31:42 +0000
asID:                     28165
IP address blocks:        191.240.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 13:42:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:f9:76:db:16:89:80:f9:e3:8a:91:d3:c6:4a:17:60:94:e2:68:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Jul 28 12:26:42 2025 GMT
            Not After : Jul 27 12:31:42 2026 GMT
        Subject: CN=1DA7F9E9E9ADE928F6265546E3FFD7C6C2828266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9c:2e:01:c8:c3:63:e6:61:a3:fe:ae:82:8f:
                    96:84:c8:65:7c:53:c4:f5:74:16:30:a6:13:ad:d9:
                    4a:bf:44:7b:c2:fd:f3:e4:aa:cb:b9:f1:3b:6a:a6:
                    ef:90:28:55:33:64:14:4d:0d:9b:8d:95:4a:9b:f1:
                    d2:fb:95:53:0b:21:22:4b:30:9e:b0:2e:c2:48:3e:
                    ef:ed:4d:4e:9d:9b:5e:86:d6:48:8d:9e:75:b7:b1:
                    3c:85:e2:dd:77:a3:cf:60:4e:50:9f:b9:1c:57:af:
                    04:3c:10:9c:dc:53:3e:25:b4:45:37:ee:79:e6:ce:
                    a2:21:0a:a8:04:04:b9:11:3f:10:e3:7e:fe:8d:30:
                    7b:2a:f3:12:64:1f:49:c6:ad:a5:dd:d3:ea:22:d5:
                    22:0d:3a:62:dd:11:17:2a:80:79:fe:d3:34:f7:8f:
                    0b:10:69:b2:7c:70:d3:a3:34:4c:ee:75:cd:ba:ed:
                    be:a2:a1:57:e2:e1:d2:cc:ee:9e:7a:b3:c2:4c:b5:
                    05:9d:75:f0:31:0f:48:3d:84:e0:27:8a:d9:d2:80:
                    3f:9f:5f:d9:ee:91:24:47:09:a7:27:22:1b:03:94:
                    5c:67:51:eb:18:d2:07:41:ee:bc:94:69:92:79:9d:
                    62:d8:6d:52:76:25:20:b0:3d:15:62:64:55:ce:6a:
                    66:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:A7:F9:E9:E9:AD:E9:28:F6:26:55:46:E3:FF:D7:C6:C2:82:82:66
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3139312e3234302e3135302e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:c4:b5:6e:52:1b:56:0d:a6:f7:bd:c5:a1:82:2a:fb:57:a8:
         05:c8:31:7a:1d:ce:b8:a9:da:8b:79:4e:00:87:ef:cb:03:1e:
         cc:75:6e:78:f7:18:d7:60:92:cd:4d:2d:5b:76:82:a0:55:43:
         5c:aa:33:71:6a:5f:0b:0a:13:9d:a6:fd:dc:e8:76:14:e5:22:
         91:b2:d2:cf:40:75:6b:b1:91:4c:c0:61:3a:a6:e6:a4:fc:82:
         6b:b8:9c:45:9e:94:70:59:39:4f:ac:96:57:65:2e:07:2f:b0:
         98:52:dc:85:e4:71:cb:eb:87:2e:92:c7:a6:c1:1d:a4:47:e5:
         67:1f:45:19:41:65:3f:f5:04:a1:a9:5d:7a:09:49:1d:e5:11:
         37:cc:e4:47:5a:8b:f5:bb:3e:46:ba:1e:61:4a:cc:e2:4a:50:
         44:de:d8:d1:ca:f3:1a:b1:46:37:46:c3:e1:8a:84:37:54:24:
         9f:3d:da:43:09:ad:50:68:6b:2c:c7:df:92:b9:ec:4b:95:f5:
         eb:b7:9f:4a:34:1b:01:98:91:34:d0:33:cd:8e:6a:d4:f3:d5:
         44:e5:62:b7:3a:38:39:36:f0:8b:f4:de:eb:41:7d:96:b3:ff:
         39:a0:2a:14:a0:66:f7:39:ca:4a:cb:ba:e8:7d:78:08:a9:07:
         9e:90:a1:8a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUEvl22xaJgPnjipHTxkoXYJTiaI8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTE2MDFBOUVGNUUwREE1RDBDMTUyRUNCN0ZFMjNDODc1
NUNCQzIwNzAeFw0yNTA3MjgxMjI2NDJaFw0yNjA3MjcxMjMxNDJaMDMxMTAvBgNV
BAMTKDFEQTdGOUU5RTlBREU5MjhGNjI2NTU0NkUzRkZEN0M2QzI4MjgyNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUnC4ByMNj5mGj/q6Cj5aEyGV8
U8T1dBYwphOt2Uq/RHvC/fPkqsu58Ttqpu+QKFUzZBRNDZuNlUqb8dL7lVMLISJL
MJ6wLsJIPu/tTU6dm16G1kiNnnW3sTyF4t13o89gTlCfuRxXrwQ8EJzcUz4ltEU3
7nnmzqIhCqgEBLkRPxDjfv6NMHsq8xJkH0nGraXd0+oi1SINOmLdERcqgHn+0zT3
jwsQabJ8cNOjNEzudc267b6ioVfi4dLM7p56s8JMtQWddfAxD0g9hOAnitnSgD+f
X9nukSRHCacnIhsDlFxnUesY0gdB7ryUaZJ5nWLYbVJ2JSCwPRViZFXOambRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUHaf56emt6Sj2JlVG4//XxsKCgmYwHwYDVR0j
BBgwFoAUkWAanvXg2l0MFS7Lf+I8h1XLwgcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXBQcFhSUmN1RzlRMW1YcXh6UXhIS28zdXA4V1V0M3Q0VjRFbXl4dERu
SmovMC85MTYwMUE5RUY1RTBEQTVEMEMxNTJFQ0I3RkUyM0M4NzU1Q0JDMjA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxNjAxQTlFRjVFMERBNUQw
QzE1MkVDQjdGRTIzQzg3NTVDQkMyMDcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FwUHBYUlJjdUc5UTFtWHF4elF4SEtvM3VwOFdVdDN0NFY0RW15eHREbkpqLzAv
MzEzOTMxMmUzMjM0MzAyZTMxMzUzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzMTM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC/8JYwDQYJKoZIhvcNAQELBQADggEBADLEtW5S
G1YNpve9xaGCKvtXqAXIMXodzrip2ot5TgCH78sDHsx1bnj3GNdgks1NLVt2gqBV
Q1yqM3FqXwsKE52m/dzodhTlIpGy0s9AdWuxkUzAYTqm5qT8gmu4nEWelHBZOU+s
lldlLgcvsJhS3IXkccvrhy6Sx6bBHaRH5WcfRRlBZT/1BKGpXXoJSR3lETfM5Eda
i/W7Pka6HmFKzOJKUETe2NHK8xqxRjdGw+GKhDdUJJ892kMJrVBoayzH35K57EuV
9eu3n0o0GwGYkTTQM82OatTz1UTlYrc6ODk28Iv03utBfZaz/zmgKhSgZvc5ykrL
uuh9eAipB56QoYo=
-----END CERTIFICATE-----
Generated at Sun Aug 10 18:18:16 2025 by rpki-client