Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3230302e3232392e3232382e302f32322d3232203d3e203238313635.roa
File:                     3230302e3232392e3232382e302f32322d3232203d3e203238313635.roa (raw, json)
Hash identifier:          H9wslvjZ+o/Y3eVWNiw2UQ4NCLmaYeTcbq3PYLVxrqk=
Subject key identifier:   25:B4:F2:78:B6:B5:DC:DB:62:17:85:22:AC:33:4A:F6:B7:3E:04:7B
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       6B5E625B58FACF3A11599A0C116387DF7D1EBA16
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3230302e3232392e3232382e302f32322d3232203d3e203238313635.roa
Signing time:             Mon 28 Jul 2025 12:31:36 +0000
ROA not before:           Mon 28 Jul 2025 12:26:36 +0000
ROA not after:            Mon 27 Jul 2026 12:31:36 +0000
asID:                     28165
IP address blocks:        200.229.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:5e:62:5b:58:fa:cf:3a:11:59:9a:0c:11:63:87:df:7d:1e:ba:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Jul 28 12:26:36 2025 GMT
            Not After : Jul 27 12:31:36 2026 GMT
        Subject: CN=25B4F278B6B5DCDB62178522AC334AF6B73E047B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ce:fa:22:56:00:78:2f:45:67:3e:72:f4:5a:
                    10:89:02:99:4d:85:42:9f:78:b0:c0:db:b8:3b:c4:
                    3e:e8:ee:7f:2c:13:60:61:34:b3:2f:dc:60:e8:23:
                    e4:87:17:3e:e2:0b:f4:33:8c:93:6a:6c:de:ee:18:
                    57:4d:5b:41:90:95:36:2c:c2:41:aa:b7:c3:bb:9e:
                    75:c0:01:82:1b:f6:ee:bf:78:38:71:6c:6b:45:ee:
                    b6:57:47:9b:f0:28:9e:1c:57:db:2e:68:62:5c:7d:
                    22:a4:cf:de:3b:e5:fc:f5:9d:41:00:c4:84:d7:54:
                    b9:9e:f9:30:fd:5f:09:37:12:b5:e6:e9:78:38:3b:
                    74:a2:5c:4d:65:10:ab:e9:56:c7:d9:e6:ce:40:88:
                    74:0a:b2:e0:68:a0:6a:0c:50:04:9e:02:f3:e1:47:
                    db:76:0b:d9:4a:a9:73:8f:e4:b6:ae:16:bc:79:31:
                    02:d5:50:94:4e:c3:14:b2:cd:77:05:54:c5:99:66:
                    72:90:78:cb:ba:11:85:9e:04:05:94:c3:c3:83:c3:
                    fb:e6:81:c3:f7:91:f3:aa:66:5b:1b:dc:e3:37:c8:
                    e2:18:06:43:4c:af:b5:0a:5d:ea:38:c5:c5:ed:e6:
                    2d:ae:e2:73:94:a9:73:26:01:15:80:e7:6c:40:2a:
                    f7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:B4:F2:78:B6:B5:DC:DB:62:17:85:22:AC:33:4A:F6:B7:3E:04:7B
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3230302e3232392e3232382e302f32322d3232203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:07:76:c0:97:7c:41:27:28:84:21:ab:39:ac:bd:ee:cf:80:
         dc:ee:fa:85:cb:1e:0c:89:2e:ca:96:c7:3c:06:8c:09:a5:9f:
         71:61:92:48:a1:66:bb:0d:45:10:95:d4:4b:72:d9:75:96:42:
         c2:3a:e8:7a:ad:1b:28:83:3f:d9:89:9a:3c:c6:48:a4:84:3f:
         59:96:66:c7:0a:75:c5:8e:57:30:98:de:f3:90:06:b6:24:9f:
         43:ca:08:34:d3:bf:43:97:6c:dd:e9:f9:20:da:ce:ca:9b:10:
         5c:20:83:75:88:ef:f4:9c:fe:56:85:23:dc:6d:18:f4:a9:c3:
         d3:f0:83:bf:36:cb:64:95:4b:30:84:94:d0:df:03:60:d6:89:
         8e:0f:31:0c:db:a6:24:9e:91:ff:e5:60:c6:cf:b7:12:fa:18:
         fc:45:ce:86:d3:65:ef:24:6f:38:55:0d:bf:a4:b5:9c:00:ca:
         2c:8f:60:39:dc:97:71:64:22:69:6e:5e:12:1a:ee:c3:46:ab:
         c4:79:a6:f6:56:21:30:4e:9d:0b:9b:98:6e:e0:72:f2:1e:33:
         b6:f7:69:75:4a:21:9a:96:c7:db:34:48:8f:33:d1:50:24:54:
         23:bb:06:6c:a6:12:52:a3:29:a9:74:89:aa:12:50:b3:e0:c0:
         bd:80:c0:2c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUa15iW1j6zzoRWZoMEWOH330euhYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTE2MDFBOUVGNUUwREE1RDBDMTUyRUNCN0ZFMjNDODc1
NUNCQzIwNzAeFw0yNTA3MjgxMjI2MzZaFw0yNjA3MjcxMjMxMzZaMDMxMTAvBgNV
BAMTKDI1QjRGMjc4QjZCNURDREI2MjE3ODUyMkFDMzM0QUY2QjczRTA0N0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTzvoiVgB4L0VnPnL0WhCJAplN
hUKfeLDA27g7xD7o7n8sE2BhNLMv3GDoI+SHFz7iC/QzjJNqbN7uGFdNW0GQlTYs
wkGqt8O7nnXAAYIb9u6/eDhxbGtF7rZXR5vwKJ4cV9suaGJcfSKkz9475fz1nUEA
xITXVLme+TD9Xwk3ErXm6Xg4O3SiXE1lEKvpVsfZ5s5AiHQKsuBooGoMUASeAvPh
R9t2C9lKqXOP5LauFrx5MQLVUJROwxSyzXcFVMWZZnKQeMu6EYWeBAWUw8ODw/vm
gcP3kfOqZlsb3OM3yOIYBkNMr7UKXeo4xcXt5i2u4nOUqXMmARWA52xAKvcbAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUJbTyeLa13NtiF4UirDNK9rc+BHswHwYDVR0j
BBgwFoAUkWAanvXg2l0MFS7Lf+I8h1XLwgcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXBQcFhSUmN1RzlRMW1YcXh6UXhIS28zdXA4V1V0M3Q0VjRFbXl4dERu
SmovMC85MTYwMUE5RUY1RTBEQTVEMEMxNTJFQ0I3RkUyM0M4NzU1Q0JDMjA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxNjAxQTlFRjVFMERBNUQw
QzE1MkVDQjdGRTIzQzg3NTVDQkMyMDcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FwUHBYUlJjdUc5UTFtWHF4elF4SEtvM3VwOFdVdDN0NFY0RW15eHREbkpqLzAv
MzIzMDMwMmUzMjMyMzkyZTMyMzIzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzgzMTM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALI5eQwDQYJKoZIhvcNAQELBQADggEBAJIHdsCX
fEEnKIQhqzmsve7PgNzu+oXLHgyJLsqWxzwGjAmln3FhkkihZrsNRRCV1Ety2XWW
QsI66HqtGyiDP9mJmjzGSKSEP1mWZscKdcWOVzCY3vOQBrYkn0PKCDTTv0OXbN3p
+SDazsqbEFwgg3WI7/Sc/laFI9xtGPSpw9Pwg782y2SVSzCElNDfA2DWiY4PMQzb
piSekf/lYMbPtxL6GPxFzobTZe8kbzhVDb+ktZwAyiyPYDncl3FkImluXhIa7sNG
q8R5pvZWITBOnQubmG7gcvIeM7b3aXVKIZqWx9s0SI8z0VAkVCO7BmymElKjKal0
iaoSULPgwL2AwCw=
-----END CERTIFICATE-----
Generated at Sun Aug 10 05:38:23 2025 by rpki-client