Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3230302e3232392e3233322e302f32312d3231203d3e203238313635.roa
File:                     3230302e3232392e3233322e302f32312d3231203d3e203238313635.roa (raw, json)
Hash identifier:          3+c8++3sAmQsE6wVS+6F9OhBuB2mXWjG9/xEShHTTqk=
Subject key identifier:   8A:2E:7E:9B:47:5A:68:43:59:AA:53:9A:57:CE:3C:31:03:48:9D:8C
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       61AA28E68897115FEE66C5AF056F9D91C79E9222
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3230302e3232392e3233322e302f32312d3231203d3e203238313635.roa
Signing time:             Mon 28 Jul 2025 12:31:41 +0000
ROA not before:           Mon 28 Jul 2025 12:26:41 +0000
ROA not after:            Mon 27 Jul 2026 12:31:41 +0000
asID:                     28165
IP address blocks:        200.229.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:aa:28:e6:88:97:11:5f:ee:66:c5:af:05:6f:9d:91:c7:9e:92:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Jul 28 12:26:41 2025 GMT
            Not After : Jul 27 12:31:41 2026 GMT
        Subject: CN=8A2E7E9B475A684359AA539A57CE3C3103489D8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:51:65:31:19:d1:8b:f3:9f:e9:73:cb:82:7c:
                    14:54:95:7d:37:9c:58:73:dd:47:1c:64:35:77:cb:
                    91:7b:be:e8:d0:98:7e:0e:72:e3:8d:a0:40:1b:72:
                    b7:6a:df:b3:30:48:32:66:93:35:c9:c6:16:c8:fd:
                    0f:a9:bc:85:0b:36:6c:a5:af:5d:04:58:fe:c8:2b:
                    82:a6:02:0a:40:c5:28:9e:10:48:84:7b:dd:31:a4:
                    26:65:4b:9c:0e:82:f5:f1:0b:a7:70:1c:07:d4:80:
                    0b:99:6f:ae:b6:c9:93:b7:a0:33:41:26:58:08:30:
                    61:cb:f5:57:b1:b5:17:fd:03:17:fe:1b:b7:ea:02:
                    19:d4:c9:49:f3:08:0a:8f:51:e1:7b:91:d1:d5:4b:
                    c2:90:12:da:22:e3:1f:e0:48:e6:93:b2:46:44:94:
                    14:0d:c1:a1:6c:76:a5:23:69:20:a6:22:18:08:2f:
                    58:f7:e4:9c:5a:4f:6a:ff:75:8f:d2:5f:4a:63:95:
                    cf:e6:4d:bd:0d:d9:58:01:68:6d:d3:e3:c9:c6:71:
                    9c:65:27:ef:b5:bb:0d:e8:e6:92:b3:03:fe:2d:73:
                    5d:6d:49:e5:64:ff:3d:c8:31:d5:d5:33:5b:a8:73:
                    da:70:b9:dd:a0:dd:9d:1a:fb:49:22:b7:03:6a:db:
                    c9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:2E:7E:9B:47:5A:68:43:59:AA:53:9A:57:CE:3C:31:03:48:9D:8C
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3230302e3232392e3233322e302f32312d3231203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6a:1b:21:b2:e4:5d:b3:97:d1:f4:e1:56:13:c4:8d:d4:1c:84:
         e7:a5:ef:d6:f0:f2:cb:1a:29:a5:53:29:90:a9:18:03:20:a5:
         8b:17:2a:b8:35:48:ad:74:cc:5a:b3:37:d7:42:25:81:6a:e3:
         c6:59:5e:ce:ca:78:aa:f2:0d:23:b3:2c:db:60:af:56:84:d0:
         e3:80:b2:f7:03:76:40:b6:c4:7e:57:0b:fb:68:4e:52:bf:70:
         14:87:3d:39:af:6c:20:1a:cc:84:ef:27:c6:04:e6:07:db:be:
         4d:92:0c:5e:e7:0a:ce:03:08:17:a2:42:68:c2:0c:9e:18:b1:
         66:99:c5:f2:68:10:71:5e:dd:64:7e:41:3f:b9:eb:15:ed:ce:
         90:68:5f:3d:5c:c6:df:74:fa:1e:b8:89:90:1f:44:98:6b:af:
         04:d4:a8:a8:1c:f0:12:4c:f9:1b:1e:92:b4:a4:11:cb:cc:68:
         13:93:01:ff:58:57:57:9c:23:5f:04:87:e2:c6:0b:74:53:fe:
         9d:e0:6c:ff:51:c2:2d:70:ff:6c:2f:86:0e:c1:3c:09:36:05:
         60:f1:b2:a6:fe:8c:a6:6d:0f:e2:23:42:51:67:68:f3:dc:13:
         fd:7a:bd:ad:18:70:da:32:6a:77:54:2c:96:a5:c6:f1:2a:b9:
         97:bd:25:25
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYaoo5oiXEV/uZsWvBW+dkceekiIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTE2MDFBOUVGNUUwREE1RDBDMTUyRUNCN0ZFMjNDODc1
NUNCQzIwNzAeFw0yNTA3MjgxMjI2NDFaFw0yNjA3MjcxMjMxNDFaMDMxMTAvBgNV
BAMTKDhBMkU3RTlCNDc1QTY4NDM1OUFBNTM5QTU3Q0UzQzMxMDM0ODlEOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2UWUxGdGL85/pc8uCfBRUlX03
nFhz3UccZDV3y5F7vujQmH4OcuONoEAbcrdq37MwSDJmkzXJxhbI/Q+pvIULNmyl
r10EWP7IK4KmAgpAxSieEEiEe90xpCZlS5wOgvXxC6dwHAfUgAuZb662yZO3oDNB
JlgIMGHL9VextRf9Axf+G7fqAhnUyUnzCAqPUeF7kdHVS8KQEtoi4x/gSOaTskZE
lBQNwaFsdqUjaSCmIhgIL1j35JxaT2r/dY/SX0pjlc/mTb0N2VgBaG3T48nGcZxl
J++1uw3o5pKzA/4tc11tSeVk/z3IMdXVM1uoc9pwud2g3Z0a+0kitwNq28nNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUii5+m0daaENZqlOaV848MQNInYwwHwYDVR0j
BBgwFoAUkWAanvXg2l0MFS7Lf+I8h1XLwgcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXBQcFhSUmN1RzlRMW1YcXh6UXhIS28zdXA4V1V0M3Q0VjRFbXl4dERu
SmovMC85MTYwMUE5RUY1RTBEQTVEMEMxNTJFQ0I3RkUyM0M4NzU1Q0JDMjA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxNjAxQTlFRjVFMERBNUQw
QzE1MkVDQjdGRTIzQzg3NTVDQkMyMDcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FwUHBYUlJjdUc5UTFtWHF4elF4SEtvM3VwOFdVdDN0NFY0RW15eHREbkpqLzAv
MzIzMDMwMmUzMjMyMzkyZTMyMzMzMjJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMy
MzgzMTM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAPI5egwDQYJKoZIhvcNAQELBQADggEBAGobIbLk
XbOX0fThVhPEjdQchOel79bw8ssaKaVTKZCpGAMgpYsXKrg1SK10zFqzN9dCJYFq
48ZZXs7KeKryDSOzLNtgr1aE0OOAsvcDdkC2xH5XC/toTlK/cBSHPTmvbCAazITv
J8YE5gfbvk2SDF7nCs4DCBeiQmjCDJ4YsWaZxfJoEHFe3WR+QT+56xXtzpBoXz1c
xt90+h64iZAfRJhrrwTUqKgc8BJM+RsekrSkEcvMaBOTAf9YV1ecI18Eh+LGC3RT
/p3gbP9Rwi1w/2wvhg7BPAk2BWDxsqb+jKZtD+IjQlFnaPPcE/16va0YcNoyandU
LJalxvEquZe9JSU=
-----END CERTIFICATE-----
Generated at Sat Aug 9 22:45:49 2025 by rpki-client