Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3139312e3234302e3135372e302f32342d3234203d3e203238313635.roa
File:                     3139312e3234302e3135372e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          c4y8zWCTJzrHuJpya6Unf3uuHCj9CINSTUjgvS/JwUI=
Subject key identifier:   79:36:97:F8:93:3C:FB:D3:CB:E1:B2:E5:43:A8:A8:E6:3B:DC:E1:8D
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       29EA327D0617DE4CB9554EA54CBB4D29AAABC588
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3139312e3234302e3135372e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 28 Jul 2025 12:31:50 +0000
ROA not before:           Mon 28 Jul 2025 12:26:50 +0000
ROA not after:            Mon 27 Jul 2026 12:31:50 +0000
asID:                     28165
IP address blocks:        191.240.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:ea:32:7d:06:17:de:4c:b9:55:4e:a5:4c:bb:4d:29:aa:ab:c5:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Jul 28 12:26:50 2025 GMT
            Not After : Jul 27 12:31:50 2026 GMT
        Subject: CN=793697F8933CFBD3CBE1B2E543A8A8E63BDCE18D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9d:c0:43:07:a6:ba:a6:93:b0:4e:b7:99:eb:
                    00:bb:78:ce:a4:9b:32:c7:2f:47:61:7a:86:ce:46:
                    ba:e6:6f:a2:69:6c:2b:32:ee:7f:6f:30:97:3a:72:
                    83:49:d4:ac:2b:9a:84:7f:98:3d:7c:ff:53:6c:6b:
                    e6:83:ff:d9:05:92:bc:8a:e8:e4:de:d2:c8:34:33:
                    b4:7c:f3:f5:b5:d0:67:bc:8d:80:4e:e3:3c:dd:77:
                    de:38:c3:1b:19:57:c0:b0:35:a4:d4:9a:e1:d6:d1:
                    57:06:39:9e:70:c8:0d:7e:63:aa:35:a7:9e:26:90:
                    25:bd:5a:12:0b:40:9b:9b:a7:69:23:08:42:d5:38:
                    d7:48:59:2b:91:76:87:15:e0:99:ee:4a:15:92:b7:
                    53:ec:82:52:79:ad:ae:bf:bf:7c:88:51:ee:6b:eb:
                    d2:0a:af:4e:ca:02:25:3a:ff:c4:91:83:89:db:9b:
                    9b:e6:64:79:2b:20:74:01:4f:7d:e6:eb:09:6c:ad:
                    8d:a5:71:74:72:8f:db:68:b1:45:8b:96:18:59:a6:
                    ab:01:12:32:fe:6a:f6:7f:a5:4d:97:7c:5e:52:7d:
                    11:55:34:a6:f9:9b:21:63:ab:6c:14:22:b5:41:be:
                    12:af:d7:e2:f8:da:bd:54:86:12:b3:27:25:fc:f7:
                    1e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:36:97:F8:93:3C:FB:D3:CB:E1:B2:E5:43:A8:A8:E6:3B:DC:E1:8D
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3139312e3234302e3135372e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:fe:5f:17:3b:01:3e:03:af:19:41:2f:de:9b:d1:2d:26:9f:
         2c:cd:7d:85:df:cf:c3:16:80:59:60:e2:58:2b:b1:f8:c8:60:
         df:c3:87:40:b6:c2:69:52:2c:c8:f1:72:1a:6c:a9:f1:f6:33:
         6d:99:1d:a9:a8:a2:f7:96:55:2c:ec:76:c5:51:65:75:e1:bd:
         b3:7f:41:2a:be:28:8a:f1:ca:8e:8d:65:8e:e1:5c:41:c6:ab:
         f7:95:46:c4:e2:40:05:9d:db:14:fd:3e:bd:6a:cc:f9:30:be:
         e1:64:64:be:75:82:e0:2e:49:7f:43:be:e8:39:4f:59:e7:47:
         14:f3:e8:ee:ac:ae:d6:29:30:20:b6:d9:d2:fe:0e:9e:18:65:
         29:98:38:97:94:b1:b3:c4:6a:96:18:15:bd:5f:6b:3c:87:bf:
         1e:11:25:70:f4:cb:9d:4d:a3:83:24:a7:1b:8e:56:9b:c5:c3:
         4e:14:a1:a7:17:81:76:81:42:0e:52:b4:90:0b:77:96:be:bf:
         c8:dd:6e:f1:d3:28:1d:f8:ac:0c:8e:38:37:73:1d:7d:96:fa:
         43:8d:15:97:ae:f5:b6:ed:69:ec:d9:9f:9c:33:73:57:bc:ae:
         44:c0:5f:99:40:6f:e4:68:99:8d:3c:a5:65:f5:1e:b3:27:c2:
         86:3f:57:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:20:31 2025 by rpki-client