Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3139312e3234302e3135322e302f32322d3232203d3e203238313635.roa
File:                     3139312e3234302e3135322e302f32322d3232203d3e203238313635.roa (raw, json)
Hash identifier:          A6Rl0htJuZLbY5y+tiAYFXQ3nEntRq1SpmYdZGGFgIQ=
Subject key identifier:   30:36:6F:29:8C:3F:AC:E8:7D:22:2B:5E:DB:D2:CD:C8:47:E3:7D:90
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       0385DB479447CCD2A6B729B282D98131516D3592
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3139312e3234302e3135322e302f32322d3232203d3e203238313635.roa
Signing time:             Mon 28 Jul 2025 12:31:33 +0000
ROA not before:           Mon 28 Jul 2025 12:26:33 +0000
ROA not after:            Mon 27 Jul 2026 12:31:33 +0000
asID:                     28165
IP address blocks:        191.240.152.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:85:db:47:94:47:cc:d2:a6:b7:29:b2:82:d9:81:31:51:6d:35:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Jul 28 12:26:33 2025 GMT
            Not After : Jul 27 12:31:33 2026 GMT
        Subject: CN=30366F298C3FACE87D222B5EDBD2CDC847E37D90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:bb:0d:f5:f8:98:82:15:f9:4f:3d:19:c5:2f:
                    7c:c2:0a:dc:17:dd:9e:e5:76:e1:cb:fb:74:04:d6:
                    5f:00:b7:9d:9e:f0:32:75:60:59:3c:7f:57:4c:af:
                    97:8c:3c:45:2d:48:45:4b:11:b0:13:84:52:d2:af:
                    2d:d2:7c:1d:05:79:02:66:6a:86:91:ba:c0:62:45:
                    a4:22:f6:7c:fc:41:1b:bd:0f:d6:73:73:f2:d0:d8:
                    a5:ff:a3:6f:d0:bf:1f:de:04:99:34:59:9b:58:4c:
                    96:5e:c1:63:27:60:7e:80:c3:f0:21:37:e5:74:a7:
                    e5:f9:93:2b:d8:cd:07:ea:51:6a:21:f9:9f:cd:6f:
                    5a:b3:f6:9d:6d:47:1f:9e:a8:21:74:bd:04:36:31:
                    cb:f1:0b:f1:bc:a9:ad:7d:e2:eb:19:3d:4a:3b:31:
                    32:4f:1c:7e:b0:13:aa:33:7f:76:65:a8:d8:95:1f:
                    2b:d6:db:9f:fb:75:e1:2a:9f:72:90:c4:a9:1a:42:
                    61:e2:2c:1d:0d:b1:9b:6a:07:e8:3e:ad:9e:b6:08:
                    d2:1d:25:27:59:2e:20:3b:60:0b:68:f2:77:8a:4a:
                    66:c4:ce:f0:bd:3f:32:f3:4e:6f:83:be:ce:b1:b8:
                    a6:72:8e:39:49:a2:7c:54:c5:f6:7a:13:b7:e5:2b:
                    ac:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:36:6F:29:8C:3F:AC:E8:7D:22:2B:5E:DB:D2:CD:C8:47:E3:7D:90
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3139312e3234302e3135322e302f32322d3232203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:64:85:da:2d:e1:70:04:f7:f5:f5:15:76:76:34:b1:65:61:
         f7:dd:d6:b7:3f:8d:6a:20:7c:5c:f3:13:f6:da:a0:41:81:c7:
         d8:64:69:51:a2:dc:95:b9:a3:6c:01:28:70:df:aa:98:8f:38:
         77:f3:3c:94:6a:64:a0:31:d4:f3:07:e4:10:37:c9:a5:a8:42:
         52:71:32:35:7b:ff:99:97:0b:c7:ca:3f:1d:45:4d:58:18:0e:
         0a:65:a4:91:63:ae:3a:c7:1b:d0:7b:bc:e1:21:fa:65:48:9b:
         18:47:1c:72:ae:28:98:22:14:bc:36:f9:4c:e2:3a:14:18:8e:
         e1:e5:df:b4:7f:02:0f:65:39:49:73:48:96:e4:b9:20:24:8b:
         c5:e4:2e:32:4a:c0:25:82:29:23:3d:01:7e:08:aa:c4:6b:2c:
         97:58:4b:54:e1:5e:28:6d:c6:4c:32:62:61:6c:76:e2:fd:d9:
         6b:5f:4f:2e:e7:d9:d1:89:12:84:26:41:15:99:29:80:d5:2f:
         cc:ce:a3:8e:00:3b:11:74:07:7b:09:c1:7d:7a:71:cf:45:40:
         55:73:22:3f:b5:d2:a3:bd:9e:e1:bd:4b:93:9a:77:c4:45:ad:
         f8:1b:56:1b:bd:fc:da:d8:21:94:c6:17:32:77:30:51:3f:21:
         b3:22:4e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:07:58 2025 by rpki-client