Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3230302e3232392e3232392e302f32342d3234203d3e203238313635.roa
File:                     3230302e3232392e3232392e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          TDH/vT50VT4Q45k/mprK9lTWj2yeKBUsQA30s23X3Bc=
Subject key identifier:   8E:1E:06:DA:6B:B1:2D:3D:EB:FF:A8:2E:CA:84:97:56:02:19:35:7A
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       528C6B4429296A53714C90175A9BBF9F5F6E5E10
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3230302e3232392e3232392e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 28 Jul 2025 12:31:29 +0000
ROA not before:           Mon 28 Jul 2025 12:26:29 +0000
ROA not after:            Mon 27 Jul 2026 12:31:29 +0000
asID:                     28165
IP address blocks:        200.229.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 13:42:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:8c:6b:44:29:29:6a:53:71:4c:90:17:5a:9b:bf:9f:5f:6e:5e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Jul 28 12:26:29 2025 GMT
            Not After : Jul 27 12:31:29 2026 GMT
        Subject: CN=8E1E06DA6BB12D3DEBFFA82ECA8497560219357A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:db:34:8e:f8:1a:59:ef:25:8f:37:f2:79:77:
                    3c:ee:8d:ee:e4:72:49:79:b6:51:cb:b0:3a:9a:94:
                    3c:10:6b:6d:67:2e:59:e9:73:b2:91:5f:bb:ac:c8:
                    5b:ce:b1:af:71:0f:ff:63:ea:c2:7b:26:63:fa:42:
                    ea:a9:28:c5:1a:e5:c6:24:77:a9:fe:ac:41:44:db:
                    94:87:67:5e:24:aa:d8:6b:e9:3a:df:19:ad:7e:45:
                    4a:29:31:74:cb:2b:45:5a:5b:6d:d5:35:08:2b:5a:
                    4b:49:52:18:15:a1:e6:82:ba:39:7c:05:8b:7b:0d:
                    3e:da:16:c0:cd:6a:5e:51:c2:07:10:e7:73:d6:57:
                    bb:54:fc:1b:a9:9f:c7:c1:82:44:59:26:11:c8:cf:
                    ab:9c:a1:e6:c3:d3:f3:e2:ac:bf:41:ac:41:93:cb:
                    0a:88:bf:fd:67:ba:1b:c6:1d:46:51:da:7b:e7:08:
                    cf:0a:ef:ac:7e:01:b6:39:7f:41:d1:b1:d2:0d:7d:
                    fd:2b:2d:85:7b:92:dc:a0:67:b6:fb:db:8f:3f:67:
                    fd:23:e6:85:8f:da:da:07:34:2d:72:cc:4a:96:ed:
                    d9:5f:d1:7e:99:da:b3:62:42:c1:93:41:62:60:b8:
                    32:0b:5a:34:24:c7:a2:27:fb:e7:c0:e4:98:09:23:
                    76:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:1E:06:DA:6B:B1:2D:3D:EB:FF:A8:2E:CA:84:97:56:02:19:35:7A
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3230302e3232392e3232392e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:ab:33:91:7b:1d:37:af:54:9c:30:00:d5:34:83:9d:f3:5c:
         56:02:ce:12:d4:7d:55:55:0d:15:72:ab:a9:ce:fe:01:01:dc:
         be:81:78:d9:97:4e:1b:a9:e0:3b:7c:6a:bd:90:d2:29:36:38:
         49:60:56:ed:6c:1c:f8:a8:7f:6e:ff:9c:33:e4:c7:49:0f:8e:
         89:b5:26:81:3b:6c:21:91:6c:4f:ee:51:45:6e:dd:ea:ea:cd:
         d2:c8:6e:af:2e:77:ef:c5:81:d5:03:5f:a5:e5:4c:1b:8e:a7:
         77:15:1f:cb:2f:18:4b:c9:e0:95:44:1b:02:2e:6b:10:fa:23:
         1f:66:72:8c:ec:ae:cf:78:51:ab:f1:1a:59:e8:a4:53:e3:44:
         d1:43:de:b1:d3:8a:9a:de:48:7a:ea:6e:67:88:0a:41:99:8a:
         f6:60:90:7f:26:52:8a:a9:a3:ff:56:85:4a:7c:d2:6c:09:33:
         23:c3:d2:68:1f:30:16:f8:07:6e:03:f6:2e:85:4e:ac:0a:ea:
         2e:35:21:be:4f:2e:7e:5c:40:2f:5c:22:df:f0:f8:dc:96:73:
         70:54:5d:e0:94:0b:9f:48:16:7e:f0:d1:0b:31:c9:2a:69:dc:
         92:b5:29:16:d0:4d:44:43:d2:f1:d8:a9:62:ca:ee:fd:51:ce:
         b1:5c:db:ef
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUoxrRCkpalNxTJAXWpu/n19uXhAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTE2MDFBOUVGNUUwREE1RDBDMTUyRUNCN0ZFMjNDODc1
NUNCQzIwNzAeFw0yNTA3MjgxMjI2MjlaFw0yNjA3MjcxMjMxMjlaMDMxMTAvBgNV
BAMTKDhFMUUwNkRBNkJCMTJEM0RFQkZGQTgyRUNBODQ5NzU2MDIxOTM1N0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH2zSO+BpZ7yWPN/J5dzzuje7k
ckl5tlHLsDqalDwQa21nLlnpc7KRX7usyFvOsa9xD/9j6sJ7JmP6QuqpKMUa5cYk
d6n+rEFE25SHZ14kqthr6TrfGa1+RUopMXTLK0VaW23VNQgrWktJUhgVoeaCujl8
BYt7DT7aFsDNal5RwgcQ53PWV7tU/Bupn8fBgkRZJhHIz6ucoebD0/PirL9BrEGT
ywqIv/1nuhvGHUZR2nvnCM8K76x+AbY5f0HRsdINff0rLYV7ktygZ7b7248/Z/0j
5oWP2toHNC1yzEqW7dlf0X6Z2rNiQsGTQWJguDILWjQkx6In++fA5JgJI3ZTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUjh4G2muxLT3r/6guyoSXVgIZNXowHwYDVR0j
BBgwFoAUkWAanvXg2l0MFS7Lf+I8h1XLwgcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXBQcFhSUmN1RzlRMW1YcXh6UXhIS28zdXA4V1V0M3Q0VjRFbXl4dERu
SmovMC85MTYwMUE5RUY1RTBEQTVEMEMxNTJFQ0I3RkUyM0M4NzU1Q0JDMjA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxNjAxQTlFRjVFMERBNUQw
QzE1MkVDQjdGRTIzQzg3NTVDQkMyMDcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FwUHBYUlJjdUc5UTFtWHF4elF4SEtvM3VwOFdVdDN0NFY0RW15eHREbkpqLzAv
MzIzMDMwMmUzMjMyMzkyZTMyMzIzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzMTM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADI5eUwDQYJKoZIhvcNAQELBQADggEBAA6rM5F7
HTevVJwwANU0g53zXFYCzhLUfVVVDRVyq6nO/gEB3L6BeNmXThup4Dt8ar2Q0ik2
OElgVu1sHPiof27/nDPkx0kPjom1JoE7bCGRbE/uUUVu3erqzdLIbq8ud+/FgdUD
X6XlTBuOp3cVH8svGEvJ4JVEGwIuaxD6Ix9mcozsrs94UavxGlnopFPjRNFD3rHT
ipreSHrqbmeICkGZivZgkH8mUoqpo/9WhUp80mwJMyPD0mgfMBb4B24D9i6FTqwK
6i41Ib5PLn5cQC9cIt/w+NyWc3BUXeCUC59IFn7w0QsxySpp3JK1KRbQTURD0vHY
qWLK7v1RzrFc2+8=
-----END CERTIFICATE-----
Generated at Sun Aug 10 13:53:48 2025 by rpki-client