Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3230302e3232392e3233302e302f32342d3234203d3e203238313635.roa
File:                     3230302e3232392e3233302e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          rkvovSKk2oQZwiwee2i6ZAliZ/mwtbreP7YcMXn4iIs=
Subject key identifier:   FD:B6:90:49:24:5D:4E:D2:EF:E9:7C:4C:01:5F:73:5E:DD:B4:F2:AB
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       027A878F77FD59E719EEB9B0DEB6FD1793EFE3C8
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3230302e3232392e3233302e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 28 Jul 2025 12:31:40 +0000
ROA not before:           Mon 28 Jul 2025 12:26:40 +0000
ROA not after:            Mon 27 Jul 2026 12:31:40 +0000
asID:                     28165
IP address blocks:        200.229.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 13:42:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:7a:87:8f:77:fd:59:e7:19:ee:b9:b0:de:b6:fd:17:93:ef:e3:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Jul 28 12:26:40 2025 GMT
            Not After : Jul 27 12:31:40 2026 GMT
        Subject: CN=FDB69049245D4ED2EFE97C4C015F735EDDB4F2AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9b:6e:25:3f:9f:5d:c3:a9:10:22:57:bf:c0:
                    63:1f:b2:c8:c8:5d:a2:a9:c7:e9:cb:42:cc:76:0a:
                    7b:e4:9b:af:de:3e:c6:10:b9:8d:20:ae:37:54:09:
                    41:80:a3:28:4f:bb:01:a4:53:da:72:23:bc:ae:d9:
                    98:95:f4:aa:4a:60:60:23:55:d6:4b:bc:b7:2f:b0:
                    cf:2a:1b:4b:bd:fd:bd:39:04:d2:48:fa:da:ba:0f:
                    3f:c2:62:2c:20:49:32:5b:fb:c0:48:e5:fb:a2:19:
                    ed:f1:47:ab:f0:20:0f:ed:a2:a0:85:2f:da:d0:cb:
                    b1:6e:bd:85:57:af:4d:15:84:1f:51:14:9e:91:de:
                    c5:8a:a0:9c:d6:3a:0a:83:71:9a:aa:44:a0:f5:f2:
                    f5:2f:24:93:d4:5d:45:90:f8:80:32:5c:87:e7:f1:
                    f5:96:00:ff:70:6c:71:2c:45:b0:bb:69:a2:0c:d3:
                    ca:19:af:63:a2:ad:36:8a:db:2e:c8:46:e7:10:49:
                    d3:f0:b3:92:ad:ae:09:c5:9a:41:71:7c:7d:dc:0d:
                    e7:08:51:4d:fc:89:c3:3a:4c:9b:8c:d7:fd:65:d4:
                    f2:4b:a9:c8:24:6d:b7:af:d1:ec:ed:b8:aa:40:ff:
                    87:f6:ff:75:9c:98:de:24:01:ef:a4:62:5b:1e:75:
                    50:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:B6:90:49:24:5D:4E:D2:EF:E9:7C:4C:01:5F:73:5E:DD:B4:F2:AB
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3230302e3232392e3233302e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:d6:39:14:1f:d2:9d:e2:ba:48:c6:95:82:f0:b9:2c:f7:e2:
         ae:42:0c:aa:e9:c4:0f:6b:5c:a5:0d:cc:87:e3:76:16:91:1a:
         3c:bc:63:19:65:d3:6f:22:5c:ff:01:09:f5:4a:d1:ee:5c:21:
         c5:61:e2:d3:b3:b5:b2:53:38:72:0b:d3:04:2c:32:9c:d1:f9:
         19:5c:5c:4b:7e:bb:52:e5:30:8e:b7:e2:ec:bc:12:a5:48:a3:
         26:af:e2:39:31:a0:99:86:d9:53:b4:fd:a0:61:d7:8d:1c:e4:
         c6:f4:1b:6e:61:a7:38:7c:b4:24:cb:b4:0e:f7:d4:3c:2c:5a:
         54:5b:35:49:d7:d5:27:e6:2f:bc:76:80:d8:9c:c5:03:82:dc:
         5f:d9:00:fc:ed:58:6f:d0:b3:a3:83:a1:3b:ff:6d:ae:88:4d:
         b7:93:07:58:50:03:16:17:ad:e3:bc:08:81:fa:15:22:fb:cf:
         27:2a:6b:b1:ea:21:ab:15:ce:9f:1c:e2:8c:bf:d2:d7:5c:59:
         74:d7:15:2c:7a:c1:65:bc:22:80:72:34:6d:8a:4b:f5:7f:29:
         83:52:6a:05:b6:8c:00:be:18:8b:8b:9e:85:97:4f:36:55:33:
         1f:4b:5e:ec:a5:48:0d:01:4a:8c:7b:d5:d2:3c:d1:ab:a1:b7:
         ca:dd:d2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:15:40 2025 by rpki-client