Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3230302e3232392e3233322e302f32342d3234203d3e203238313635.roa
File:                     3230302e3232392e3233322e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          rfTgFT7b7wKYA4u5l4axyxjqiJPB2j7uFnT6DVMHk/Y=
Subject key identifier:   20:F2:5E:74:97:5E:78:84:AB:68:54:18:73:44:1F:53:AF:D0:80:2E
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       664A37B0B176D80140A5A47571A36F694EB03BA7
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3230302e3232392e3233322e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 28 Jul 2025 12:31:23 +0000
ROA not before:           Mon 28 Jul 2025 12:26:23 +0000
ROA not after:            Mon 27 Jul 2026 12:31:23 +0000
asID:                     28165
IP address blocks:        200.229.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 13:42:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:4a:37:b0:b1:76:d8:01:40:a5:a4:75:71:a3:6f:69:4e:b0:3b:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Jul 28 12:26:23 2025 GMT
            Not After : Jul 27 12:31:23 2026 GMT
        Subject: CN=20F25E74975E7884AB68541873441F53AFD0802E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:df:ee:4f:c7:e0:7b:c2:2e:1f:6c:23:ca:3b:
                    95:ae:d2:a3:09:dc:ba:03:04:f2:e7:27:88:88:f7:
                    b8:99:69:95:c6:87:14:14:71:b2:55:ef:05:ae:63:
                    8d:7a:3a:c6:a3:30:cd:3a:e4:0e:49:10:31:3a:e6:
                    5b:99:01:25:7c:e0:09:b3:89:7d:7b:05:0d:0f:e6:
                    38:6d:a5:61:51:d2:51:fa:23:b0:b6:20:18:f0:1b:
                    c3:0d:6a:89:66:19:80:eb:91:93:a9:91:4e:29:ce:
                    45:ed:3c:9b:dd:f2:5f:32:bc:19:50:63:a4:12:ec:
                    37:72:93:0b:70:33:b6:0d:e6:e5:10:9e:2f:2a:d1:
                    1c:59:3b:61:b1:77:6a:eb:b8:d6:d4:09:3b:14:c3:
                    eb:b4:c3:53:b8:d4:1b:b5:15:ec:5b:4d:5d:bf:81:
                    a4:c8:4d:6d:24:ed:ed:e4:9f:d4:4b:0b:34:ee:45:
                    a8:57:3c:d1:9e:b8:52:a3:53:48:46:8b:7f:ca:d8:
                    02:00:06:a3:a8:a7:fa:3f:29:d5:66:6f:5e:49:00:
                    c4:6b:7e:55:bd:11:16:12:db:a2:25:18:28:72:74:
                    ef:7d:92:e3:ef:74:17:ee:b8:f9:19:9b:a3:1f:17:
                    0b:2a:bc:39:50:67:d1:2e:ca:2d:18:00:65:be:cf:
                    9a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F2:5E:74:97:5E:78:84:AB:68:54:18:73:44:1F:53:AF:D0:80:2E
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3230302e3232392e3233322e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:80:86:f1:0c:73:f3:dc:74:8b:cc:c4:77:9d:c0:1f:58:84:
         e5:a0:fb:b7:1f:d4:3b:51:66:dc:1b:97:73:a1:cd:f6:63:74:
         4e:a4:8f:20:96:af:a8:ff:17:83:c1:27:21:fd:a9:39:9a:b8:
         de:e0:20:22:d1:39:b8:4b:96:f0:c4:57:1f:03:21:f9:91:09:
         d4:4a:66:49:99:27:a7:ef:9a:13:8e:94:74:3b:f7:3b:fe:49:
         94:08:a8:4b:8e:c6:c7:56:67:36:34:ce:f1:e1:a2:d4:cf:c4:
         55:4f:88:c7:96:8a:c7:f2:fb:a6:72:4f:23:64:85:1d:16:dc:
         6a:81:ac:26:3b:4b:f5:2a:a0:af:8e:71:c9:67:8f:ec:ba:2e:
         6d:8f:ac:23:ea:03:5f:e7:d9:17:58:42:76:48:10:c9:a5:3d:
         a9:bf:01:0c:b5:b8:77:21:24:72:bf:d0:8d:d5:e5:13:ff:32:
         c5:f7:3c:cc:90:ce:00:31:ff:df:8d:e8:56:93:3c:03:17:c5:
         e9:1b:8e:50:4f:5a:a0:53:73:ea:0b:3b:4a:06:f2:71:ec:07:
         92:cf:c0:04:ac:e1:65:58:b3:ed:4f:4a:fd:ee:4f:36:8f:59:
         42:44:0a:ce:99:ac:54:85:ef:2c:c4:7b:78:28:41:ae:0d:cc:
         9d:5e:27:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:10:41 2025 by rpki-client