Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3139312e3234302e3135332e302f32342d3234203d3e203238313635.roa
File:                     3139312e3234302e3135332e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          xxaCKPzQvkh8oeBxFlolUIpUJh542HRS1eq+KSQu0V0=
Subject key identifier:   09:F5:54:E5:71:D0:F7:9D:92:42:44:8A:36:12:C0:B7:A0:C1:25:01
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       3486FABC8C51A22550916A0ED460A878B6BBF63C
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3139312e3234302e3135332e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 28 Jul 2025 12:31:50 +0000
ROA not before:           Mon 28 Jul 2025 12:26:50 +0000
ROA not after:            Mon 27 Jul 2026 12:31:50 +0000
asID:                     28165
IP address blocks:        191.240.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:86:fa:bc:8c:51:a2:25:50:91:6a:0e:d4:60:a8:78:b6:bb:f6:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Jul 28 12:26:50 2025 GMT
            Not After : Jul 27 12:31:50 2026 GMT
        Subject: CN=09F554E571D0F79D9242448A3612C0B7A0C12501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f0:1e:a5:0b:60:98:d3:7d:ab:02:4a:5b:4d:
                    b1:c0:82:7a:cd:5d:49:dd:26:01:05:1d:4f:7e:d6:
                    4b:b0:06:fa:45:ad:b2:42:32:1b:3e:43:93:26:9d:
                    20:c4:9b:c6:18:f2:5f:2c:1a:e7:e7:8d:35:dc:8b:
                    76:03:0b:e3:a6:f4:3c:0a:d1:f0:a8:c8:ae:ba:4a:
                    8d:57:d1:75:25:76:2a:5c:bc:23:16:31:77:83:61:
                    48:e4:ef:6b:e9:e9:c6:31:c8:d9:20:33:bd:f5:87:
                    3b:08:43:56:26:00:5c:07:e1:61:c2:39:10:e5:a9:
                    e7:9f:05:52:c2:ae:4b:92:8e:90:80:c2:83:c1:a9:
                    2f:2b:80:d6:ee:a2:51:6e:b3:94:35:da:1f:73:cd:
                    1e:d1:cd:8e:07:b2:2c:c8:b8:16:cd:c1:c6:9d:a2:
                    95:5d:cc:b3:5b:ed:7c:c2:ed:43:c5:86:63:f9:ba:
                    77:b1:cf:15:f2:41:8a:38:38:bd:7c:ec:93:59:69:
                    78:ed:94:e2:62:52:7e:1b:80:53:91:45:13:a4:11:
                    69:68:8d:9d:c9:f2:a8:6c:9b:ec:9f:49:8f:9e:eb:
                    ac:fc:46:75:94:cc:01:b5:e3:a0:60:7b:2a:00:28:
                    f0:92:4e:d8:2f:9b:c3:79:4b:cd:ad:49:67:49:09:
                    87:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F5:54:E5:71:D0:F7:9D:92:42:44:8A:36:12:C0:B7:A0:C1:25:01
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3139312e3234302e3135332e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:90:03:8e:31:8d:33:c1:ed:1f:4a:ce:a5:a7:40:f6:93:64:
         ec:0a:3a:10:10:88:c3:63:00:d9:ff:34:51:aa:ba:83:9f:ff:
         ee:50:a1:3d:a5:c8:ad:ae:e4:1a:04:5d:04:5b:c0:4e:d9:9f:
         15:bf:01:6d:4e:f1:f8:76:fc:a5:2e:d8:4a:17:cf:3e:86:3e:
         86:97:dc:fd:4d:51:a3:cb:44:67:36:78:fb:ac:5e:d9:77:5f:
         13:28:10:7b:05:d6:ac:c4:23:f6:df:a4:74:e1:80:e0:63:f1:
         f1:8f:66:f6:49:2b:d8:cc:dc:a7:4c:76:3f:09:a7:31:d5:b3:
         08:3b:eb:66:50:3d:a8:92:ac:d4:ba:f1:4a:03:c9:4e:a1:6a:
         d4:5a:90:27:85:a8:70:b6:ee:98:a6:7d:84:87:83:af:46:6e:
         71:b6:3c:3c:72:82:0d:17:66:80:21:86:cc:95:a0:d7:07:1f:
         ec:08:f9:74:ae:a8:a4:46:40:28:c6:21:48:75:4b:6c:6b:d0:
         15:a1:8c:f8:2d:e5:b4:2c:47:07:72:b4:e2:00:e5:41:98:f8:
         e1:0e:8d:2c:6a:fc:cf:29:d2:c8:4b:92:7c:ce:c1:f3:78:be:
         04:95:cf:18:8f:eb:46:1f:99:22:96:3e:ab:9b:68:45:84:46:
         2a:35:6f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:29:06 2025 by rpki-client