Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3139312e3234302e3135362e302f32332d3233203d3e203238313635.roa
File:                     3139312e3234302e3135362e302f32332d3233203d3e203238313635.roa (raw, json)
Hash identifier:          M0K/IB+1XhQNn3X9juf/DsKvGBZUB7afuv5+Y6g0Q6s=
Subject key identifier:   01:71:5E:91:C8:11:EA:41:38:2F:37:85:57:A4:86:55:2C:52:12:2E
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       34B2EA4028F1AABF0FD8551164338FF5E8E8F438
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3139312e3234302e3135362e302f32332d3233203d3e203238313635.roa
Signing time:             Mon 28 Jul 2025 12:31:25 +0000
ROA not before:           Mon 28 Jul 2025 12:26:25 +0000
ROA not after:            Mon 27 Jul 2026 12:31:25 +0000
asID:                     28165
IP address blocks:        191.240.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:b2:ea:40:28:f1:aa:bf:0f:d8:55:11:64:33:8f:f5:e8:e8:f4:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Jul 28 12:26:25 2025 GMT
            Not After : Jul 27 12:31:25 2026 GMT
        Subject: CN=01715E91C811EA41382F378557A486552C52122E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c4:00:1d:66:83:c5:23:3b:c4:d3:98:90:46:
                    d2:9c:d6:68:10:2e:c9:82:18:de:84:d7:8f:a6:53:
                    fe:75:a2:49:b4:01:c7:ea:c1:62:ca:08:79:c2:a2:
                    b8:24:4c:6e:ce:3a:34:f5:89:5e:35:a2:82:43:f3:
                    ea:dc:d5:e4:f5:c4:30:70:94:f2:86:f4:33:73:73:
                    c3:fc:83:f1:64:66:0b:bc:68:4f:fb:77:b7:80:d2:
                    97:de:c7:4d:b7:dd:8f:0d:fb:96:8f:e0:33:a5:f7:
                    ad:ae:05:d4:1e:58:25:0b:9c:67:21:59:39:96:4c:
                    f5:51:30:0f:03:a6:c1:3f:02:af:7d:e1:b6:91:1f:
                    da:23:51:73:7c:96:6f:4c:6c:ad:86:1f:ee:9e:85:
                    e1:65:bb:95:22:5d:02:4b:09:df:b7:06:b6:ec:87:
                    6c:47:45:41:09:fc:68:78:01:e8:7d:3a:14:a1:66:
                    4c:26:68:ee:73:f9:b5:cb:65:5e:ef:98:d1:57:00:
                    62:11:95:6b:87:74:b2:ef:4d:03:f6:f1:5d:fb:57:
                    00:54:04:6a:25:64:58:6e:61:15:b3:7d:72:e6:7c:
                    8e:4f:32:fe:31:9f:54:73:7c:9d:aa:36:5c:bc:3f:
                    00:d1:b9:d4:05:57:c9:99:b6:7f:cf:5b:87:87:b3:
                    05:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:71:5E:91:C8:11:EA:41:38:2F:37:85:57:A4:86:55:2C:52:12:2E
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3139312e3234302e3135362e302f32332d3233203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:f2:f2:bb:15:ca:ec:b9:4e:0d:4e:ef:b9:69:7a:45:5b:e5:
         e0:df:78:be:d6:55:62:e3:fa:50:8e:30:fc:39:41:d7:cf:8c:
         c2:70:15:a9:35:3d:91:92:37:aa:c2:2e:be:b5:4c:43:4b:6c:
         93:a3:4a:a6:be:f9:a1:05:15:e9:3a:17:1c:78:76:ce:d6:2c:
         c2:78:e4:09:2c:49:ea:32:24:92:a2:ab:2a:da:e4:e9:60:cd:
         9d:01:61:f7:fc:14:21:58:9c:4b:20:49:60:80:fe:14:1d:d6:
         60:32:3a:02:f9:67:24:84:23:1d:d6:3d:b3:02:6e:62:31:72:
         9e:e1:da:54:02:fe:2f:bd:e8:1d:bf:8d:1c:50:09:e2:5d:09:
         6d:c9:62:1f:d2:b9:4d:84:45:17:4f:4d:c5:99:0e:cc:4c:24:
         8d:78:8d:40:52:91:bf:cb:d6:40:b0:43:23:6a:dc:29:a0:38:
         3d:5e:09:de:e5:f6:ce:41:f4:c7:7a:3d:11:9b:0e:d5:27:60:
         df:28:f1:f3:c0:43:5f:eb:c2:fb:ea:f5:a2:ba:d9:55:e1:bc:
         e9:ab:a0:24:d5:f5:c8:1a:26:f0:6f:df:06:8a:59:04:17:24:
         61:84:34:59:42:90:f8:ac:8e:7e:41:06:59:45:50:54:1e:ad:
         e3:0c:c3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:25:52 2025 by rpki-client