Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3230302e3232392e3233352e302f32342d3234203d3e203238313635.roa
File:                     3230302e3232392e3233352e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          QsLMbdBHfZkYvIRHonDXXoE0SWWRLFEyIWBK2BrcZ1k=
Subject key identifier:   11:93:74:E4:9F:39:EB:D7:44:16:AC:47:E8:5B:91:5E:EE:55:BE:65
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       6B4E629BBAD556838BAA73F8E7D4EC39E6035E24
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3230302e3232392e3233352e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 28 Jul 2025 12:31:28 +0000
ROA not before:           Mon 28 Jul 2025 12:26:28 +0000
ROA not after:            Mon 27 Jul 2026 12:31:28 +0000
asID:                     28165
IP address blocks:        200.229.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:4e:62:9b:ba:d5:56:83:8b:aa:73:f8:e7:d4:ec:39:e6:03:5e:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Jul 28 12:26:28 2025 GMT
            Not After : Jul 27 12:31:28 2026 GMT
        Subject: CN=119374E49F39EBD74416AC47E85B915EEE55BE65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ff:13:db:eb:1b:75:23:a0:7d:11:12:5a:32:
                    ab:77:1e:3b:68:ae:63:17:eb:d0:8a:ba:ca:bc:4d:
                    1d:48:02:f2:53:7e:6e:18:a0:0f:02:12:51:91:be:
                    b1:87:7d:3f:bb:57:07:1a:82:06:7a:85:dc:da:66:
                    a9:6f:e6:c0:18:9c:b6:98:ca:b1:87:c6:b9:7e:7b:
                    02:fd:4e:d2:f5:85:29:26:c8:d4:3d:bf:47:d4:a4:
                    2d:64:50:dd:2d:26:bf:27:ae:b5:df:02:51:c2:55:
                    3e:7f:bb:db:01:e0:37:03:72:30:df:80:ae:fa:fd:
                    43:d5:32:1c:61:fc:bc:43:4f:7e:e9:f0:81:37:73:
                    f0:6a:15:a2:47:3a:ce:47:31:a5:ba:64:b3:ba:9b:
                    af:84:22:5d:e3:12:03:fe:6d:c3:b2:72:4d:c5:64:
                    9e:5c:4e:c2:a3:aa:b2:1a:a3:21:75:34:9e:6a:83:
                    94:d6:e7:68:75:b7:e7:ac:0c:30:4b:e7:aa:46:9b:
                    0c:20:af:1c:86:c7:44:50:48:c3:4f:45:04:70:09:
                    11:50:f0:fb:4a:b6:75:a4:f1:5e:f6:73:fe:e5:8b:
                    f8:75:42:9d:e2:b3:97:59:72:49:17:75:95:70:41:
                    d1:48:d3:49:9f:9f:6a:ab:ab:64:ad:ec:0c:a9:98:
                    9e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:93:74:E4:9F:39:EB:D7:44:16:AC:47:E8:5B:91:5E:EE:55:BE:65
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3230302e3232392e3233352e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:ac:bb:74:bf:8a:5d:c6:2a:0d:0d:f8:f0:dc:36:fb:4b:9f:
         61:4e:ac:9b:66:cd:a4:ce:50:12:79:98:b5:01:41:4a:e3:db:
         81:e0:8f:69:89:20:ef:eb:45:dc:3f:3e:92:ad:d2:de:4a:24:
         93:cd:25:c8:d7:11:dd:18:1d:89:77:e6:98:54:cc:f5:2e:cb:
         68:88:e7:65:3d:10:32:3f:7d:a2:a8:e3:3c:12:3e:4f:57:a2:
         23:ee:bc:ac:f6:a9:b4:6e:a1:cd:80:34:27:0c:f1:de:52:34:
         ef:5e:a5:bb:08:5a:7b:19:84:ac:ea:9e:91:0d:fc:fd:0f:b9:
         5d:62:39:80:fe:2a:30:f7:a5:db:28:ac:58:62:2a:88:f0:59:
         cd:9a:cc:67:5b:8f:9a:ec:94:6c:68:9e:0b:59:d5:18:35:48:
         7c:32:16:e4:ab:b2:81:07:ef:4c:df:c6:95:66:e7:5f:9b:c9:
         0f:fd:74:64:56:22:9b:60:9f:f7:df:0f:3e:97:3a:93:c4:23:
         7b:44:66:1c:32:5e:24:3b:ec:5d:cb:f5:4c:3c:4a:b0:7f:5f:
         3e:26:38:57:2c:0c:fd:54:ad:f6:2d:45:c4:c2:49:da:a6:1b:
         50:d6:18:f7:19:dc:aa:16:ef:49:bb:bc:46:7b:2a:f7:5b:de:
         69:1a:f3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:19:13 2025 by rpki-client