Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3139312e3234302e3135312e302f32342d3234203d3e203238313635.roa
File:                     3139312e3234302e3135312e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          xJPP/whRFydMuHY2rC88fXurRraZy7QsgUF8DBLNSig=
Subject key identifier:   C5:3F:A2:A2:09:C1:88:EE:0C:46:35:A4:16:77:D0:57:37:B5:02:00
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       10A3DD14E154A259DCB829D265F3DD32CB7F2503
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3139312e3234302e3135312e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 28 Jul 2025 12:31:46 +0000
ROA not before:           Mon 28 Jul 2025 12:26:46 +0000
ROA not after:            Mon 27 Jul 2026 12:31:46 +0000
asID:                     28165
IP address blocks:        191.240.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:a3:dd:14:e1:54:a2:59:dc:b8:29:d2:65:f3:dd:32:cb:7f:25:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Jul 28 12:26:46 2025 GMT
            Not After : Jul 27 12:31:46 2026 GMT
        Subject: CN=C53FA2A209C188EE0C4635A41677D05737B50200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:9b:78:b4:b1:36:ea:29:3b:25:6d:32:23:60:
                    98:9b:64:b0:25:1f:cb:d0:c4:bb:ae:aa:72:67:33:
                    70:b1:5f:d0:af:61:3c:b7:ea:ce:f5:c7:da:f7:24:
                    c0:bd:64:06:04:d2:87:0b:4c:09:5f:1f:24:85:ec:
                    89:2a:1e:0b:c1:f6:c2:ea:d5:e2:52:66:e2:32:fe:
                    2c:36:a1:66:45:4b:05:92:36:d2:a5:7e:90:75:7d:
                    d3:13:9a:ab:2a:4d:fa:34:6c:9b:e0:76:d9:0b:16:
                    38:f3:34:92:dc:2a:e1:2c:41:10:2a:24:49:02:01:
                    46:90:a9:cf:a3:97:10:5d:59:19:15:d1:e3:f5:14:
                    69:28:d8:82:66:45:de:92:b6:7f:07:ae:ef:56:4c:
                    8e:d0:79:25:b7:e0:63:71:87:47:15:f2:38:ba:70:
                    e0:cd:69:56:ab:8d:de:75:31:ed:c7:ff:f5:20:c0:
                    33:5c:bc:e8:1c:c5:63:eb:af:d0:28:3b:13:04:e8:
                    50:28:19:01:5b:a0:1c:22:24:86:2d:df:3f:3e:74:
                    e7:98:d0:4a:26:6f:38:5a:4f:b0:c5:66:1f:6f:b3:
                    9a:50:c9:68:9c:cb:ee:8a:5f:12:72:84:e5:b0:8d:
                    49:fb:2d:15:a8:8c:3d:62:98:8c:79:57:60:51:74:
                    a4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:3F:A2:A2:09:C1:88:EE:0C:46:35:A4:16:77:D0:57:37:B5:02:00
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3139312e3234302e3135312e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:d3:f1:a7:e4:9d:0c:ef:cc:58:c2:8f:ed:90:2a:f6:2d:09:
         e5:eb:2b:95:8b:17:cc:49:68:9c:b5:1e:d5:c2:a6:70:b1:cb:
         be:e3:03:56:f6:55:b8:fb:d4:cd:fd:f8:af:c8:9d:89:4f:bf:
         b4:ef:e1:69:48:25:3e:fa:27:2c:7b:a7:36:1c:34:0a:db:35:
         f2:88:47:4f:f4:c8:b8:5b:0b:8b:ed:bf:2c:29:5b:b4:17:e3:
         02:ba:94:35:eb:1f:0d:23:46:59:7d:77:28:c9:30:22:46:f7:
         b7:65:ef:c7:e7:a8:15:5a:07:11:8a:cd:66:a7:68:0f:7e:4f:
         3f:f8:a3:f3:68:57:17:73:05:bb:8b:7c:26:90:03:5c:60:22:
         71:98:e5:fa:34:d9:61:46:1f:05:f3:27:5e:30:61:35:95:1d:
         c5:69:93:88:04:dd:fb:b6:f1:84:9b:4b:1e:88:23:1a:b4:d5:
         92:74:ed:42:71:cb:ce:96:50:41:f2:86:cf:2a:0b:c1:47:42:
         d9:f6:dc:1c:7f:a5:e8:50:be:83:b8:77:d9:07:2e:a0:24:55:
         ed:e9:16:4b:0b:93:af:1e:b7:cb:ca:7c:4c:56:fc:e4:96:7b:
         33:d0:66:1f:99:32:f5:1b:b5:d8:17:32:7d:60:cd:8f:8d:ff:
         e2:c4:50:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:57:24 2025 by rpki-client