Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3139312e3234302e3135352e302f32342d3234203d3e203238313635.roa
File:                     3139312e3234302e3135352e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          /Si1amYxHGL0pItupCZ3gf4fZ+miWNZmwATNDcgYweo=
Subject key identifier:   03:78:7C:77:58:66:F8:DD:74:B2:F8:F7:E1:E0:75:D3:96:FE:FD:BD
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       3FF7D59081A7DCDC77A963FA9E2F8C38AAC5A8F9
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3139312e3234302e3135352e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 28 Jul 2025 12:31:38 +0000
ROA not before:           Mon 28 Jul 2025 12:26:38 +0000
ROA not after:            Mon 27 Jul 2026 12:31:38 +0000
asID:                     28165
IP address blocks:        191.240.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:f7:d5:90:81:a7:dc:dc:77:a9:63:fa:9e:2f:8c:38:aa:c5:a8:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Jul 28 12:26:38 2025 GMT
            Not After : Jul 27 12:31:38 2026 GMT
        Subject: CN=03787C775866F8DD74B2F8F7E1E075D396FEFDBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:70:29:e7:17:75:37:89:92:2b:a9:a9:93:61:
                    2e:7f:07:7b:82:15:11:dc:93:01:1b:ef:fe:25:61:
                    90:0b:de:e7:9e:4b:d8:46:b0:19:ab:d7:01:b9:4c:
                    22:77:6d:89:a4:20:02:4f:17:7b:9c:1b:91:12:98:
                    20:55:a4:32:40:79:ef:16:ea:be:9a:3e:26:af:ad:
                    1f:50:40:96:0a:e5:e6:98:21:06:ca:38:63:2e:0f:
                    47:21:e6:97:7e:23:7d:e6:ab:8e:44:ec:81:02:2d:
                    9f:e2:0c:38:54:c4:1f:7a:45:5b:b2:46:42:b6:13:
                    89:55:c2:ee:cc:9c:f6:f4:17:b2:9c:c4:fe:f0:9f:
                    40:be:6f:19:9d:50:e6:79:e7:94:30:66:30:0f:18:
                    fb:d5:38:88:d5:b9:94:29:d0:9f:96:a4:ee:fc:a6:
                    fe:57:c9:40:ee:35:f7:4e:8a:d3:cc:6f:e4:95:87:
                    cb:8f:23:81:6e:84:41:55:60:35:c1:73:4c:43:43:
                    0e:95:c5:41:d4:c3:e2:69:66:a3:a1:21:95:d0:ef:
                    d4:5b:9a:e7:94:aa:7e:87:95:03:7c:9c:02:a9:38:
                    71:1f:46:db:f4:0a:05:18:c0:07:f6:fe:0a:76:ae:
                    63:38:12:e3:17:32:aa:1a:b9:c0:aa:28:ff:4a:2a:
                    c6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:78:7C:77:58:66:F8:DD:74:B2:F8:F7:E1:E0:75:D3:96:FE:FD:BD
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3139312e3234302e3135352e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:57:23:62:5a:2f:46:0c:4b:15:3d:ec:97:a9:18:33:6c:5e:
         1b:a8:78:11:e8:b3:95:71:f0:db:ba:77:1e:86:c6:79:aa:2e:
         38:4e:47:e0:16:f7:74:9e:ed:55:1a:16:33:43:0f:5b:36:b9:
         04:78:36:50:90:46:9a:56:b8:78:cc:3e:82:70:e2:0e:9b:ff:
         50:71:f2:12:e4:22:b0:08:6c:71:f0:69:e0:ce:e0:8a:d3:04:
         45:7e:04:f1:00:26:22:2d:f8:d8:7e:d1:1e:14:f5:e3:a7:90:
         81:e0:55:de:ca:e6:7c:27:db:b2:11:dc:eb:be:b9:99:5f:2d:
         01:c6:0b:e2:70:75:02:93:e8:24:69:d3:4d:d9:34:ad:59:cb:
         dc:a7:87:56:df:ac:a9:32:74:ce:86:6a:28:6a:da:a1:60:e5:
         e2:bb:57:f8:c5:52:73:97:73:62:ad:09:d7:2b:50:ff:68:4a:
         be:cb:f3:04:62:05:c8:b1:d1:5e:b9:1c:ba:c4:19:c6:7e:df:
         9e:f0:3c:ff:a2:3b:49:ea:8a:93:08:c8:fb:89:14:83:91:c6:
         76:33:77:ed:9c:88:b0:82:90:18:96:ef:4a:df:d2:78:5b:58:
         c0:dc:0f:d2:89:06:b8:c1:9e:e7:89:a7:4a:89:41:44:21:96:
         fe:ef:e0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:00:25 2025 by rpki-client