Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3230302e3232392e3233382e302f32342d3234203d3e203238313635.roa
File:                     3230302e3232392e3233382e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          ViZhJid36tewkMgwxYeLEZrYxbRXZeaoAeulcYNCFqM=
Subject key identifier:   23:ED:D3:68:AC:DC:04:03:A1:C1:A8:1F:37:EE:E0:D1:0C:19:EE:B0
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       1DA7C6A6A3F30D03E16A539DD2D86A4670694564
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3230302e3232392e3233382e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 28 Jul 2025 12:31:42 +0000
ROA not before:           Mon 28 Jul 2025 12:26:42 +0000
ROA not after:            Mon 27 Jul 2026 12:31:42 +0000
asID:                     28165
IP address blocks:        200.229.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 13:42:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:a7:c6:a6:a3:f3:0d:03:e1:6a:53:9d:d2:d8:6a:46:70:69:45:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Jul 28 12:26:42 2025 GMT
            Not After : Jul 27 12:31:42 2026 GMT
        Subject: CN=23EDD368ACDC0403A1C1A81F37EEE0D10C19EEB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:79:ea:94:e7:67:99:be:3a:33:50:30:aa:32:
                    38:ba:17:07:8b:4c:d2:b5:7f:c2:1c:78:80:1c:8c:
                    be:0d:01:2f:0e:23:0c:d8:97:b7:4c:a6:3b:55:83:
                    d2:2f:37:c0:ad:49:9b:6c:24:15:11:2b:f9:15:72:
                    c7:f8:c0:33:7d:74:fe:e4:ea:ed:4c:f5:d9:f9:c5:
                    db:62:2f:c5:f6:ee:d8:5c:f7:c9:33:df:9c:cf:16:
                    4e:94:34:30:07:32:14:47:55:ae:1c:7e:05:64:70:
                    35:dc:15:43:a5:f8:36:1f:b2:24:ad:8c:75:b5:9b:
                    73:c0:e6:68:18:bb:ac:ed:de:39:17:86:96:ae:88:
                    3f:ed:bd:ec:40:1c:32:52:00:0d:03:8f:c1:4e:05:
                    97:23:84:6c:7b:ad:a7:e4:38:65:22:8d:96:17:27:
                    8a:86:62:ad:a3:47:ed:da:dd:40:31:7d:c2:42:75:
                    1f:dd:55:b3:40:6d:60:6e:73:eb:d4:6c:ad:a2:14:
                    41:37:de:d3:cd:25:d2:a4:a4:0c:99:ca:f4:67:43:
                    23:ab:36:69:f9:e5:9e:ec:ef:7b:5f:bb:f9:e4:40:
                    9f:2b:fd:77:b0:de:0e:87:38:c3:30:77:af:38:e6:
                    e0:c6:e6:83:8d:98:08:b8:f7:cf:07:c0:a7:37:e1:
                    d5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:ED:D3:68:AC:DC:04:03:A1:C1:A8:1F:37:EE:E0:D1:0C:19:EE:B0
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3230302e3232392e3233382e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:aa:92:80:f4:32:83:2f:50:b5:ca:3c:86:5d:09:2b:a1:6b:
         80:ae:a9:eb:49:f7:4f:34:c8:e4:8d:2f:dd:04:9f:93:a1:0f:
         f4:13:78:d4:9c:96:a8:6f:38:a3:f9:46:72:cd:46:6f:26:43:
         61:f2:9d:bb:da:fd:51:e6:49:c0:38:83:95:9a:ed:39:ab:7e:
         78:67:89:da:36:94:28:a9:74:87:f5:d0:54:b0:ab:dc:22:b7:
         16:b7:ba:03:a4:d4:bb:41:0e:7d:13:38:30:d7:0e:6b:f4:a2:
         e2:71:c7:e5:6e:b5:75:87:b9:d3:64:20:b8:8d:16:47:7e:04:
         ec:fb:cd:b1:ea:15:17:62:61:53:f0:36:79:9a:d4:06:ee:4d:
         93:76:ed:5e:62:99:db:41:fe:c6:e0:f0:90:3c:a7:ca:42:cf:
         11:5b:1f:6f:f6:fb:54:c9:5a:91:d8:d5:0b:33:54:3f:cf:4a:
         ac:51:18:01:8a:20:48:2e:20:5f:83:0f:63:d9:5e:42:3f:a2:
         73:72:96:1b:57:36:32:04:f1:18:d9:7d:0a:cd:e6:f5:2a:df:
         b0:cc:24:f2:88:f9:68:12:bd:f8:ec:b3:50:a2:3d:f5:83:c9:
         71:de:6f:5f:3b:3f:26:93:25:e7:ce:33:c7:c4:59:87:5f:b3:
         56:56:b6:25
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHafGpqPzDQPhalOd0thqRnBpRWQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTE2MDFBOUVGNUUwREE1RDBDMTUyRUNCN0ZFMjNDODc1
NUNCQzIwNzAeFw0yNTA3MjgxMjI2NDJaFw0yNjA3MjcxMjMxNDJaMDMxMTAvBgNV
BAMTKDIzRUREMzY4QUNEQzA0MDNBMUMxQTgxRjM3RUVFMEQxMEMxOUVFQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNeeqU52eZvjozUDCqMji6FweL
TNK1f8IceIAcjL4NAS8OIwzYl7dMpjtVg9IvN8CtSZtsJBURK/kVcsf4wDN9dP7k
6u1M9dn5xdtiL8X27thc98kz35zPFk6UNDAHMhRHVa4cfgVkcDXcFUOl+DYfsiSt
jHW1m3PA5mgYu6zt3jkXhpauiD/tvexAHDJSAA0Dj8FOBZcjhGx7rafkOGUijZYX
J4qGYq2jR+3a3UAxfcJCdR/dVbNAbWBuc+vUbK2iFEE33tPNJdKkpAyZyvRnQyOr
Nmn55Z7s73tfu/nkQJ8r/Xew3g6HOMMwd6845uDG5oONmAi4988HwKc34dVdAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUI+3TaKzcBAOhwagfN+7g0QwZ7rAwHwYDVR0j
BBgwFoAUkWAanvXg2l0MFS7Lf+I8h1XLwgcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXBQcFhSUmN1RzlRMW1YcXh6UXhIS28zdXA4V1V0M3Q0VjRFbXl4dERu
SmovMC85MTYwMUE5RUY1RTBEQTVEMEMxNTJFQ0I3RkUyM0M4NzU1Q0JDMjA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxNjAxQTlFRjVFMERBNUQw
QzE1MkVDQjdGRTIzQzg3NTVDQkMyMDcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FwUHBYUlJjdUc5UTFtWHF4elF4SEtvM3VwOFdVdDN0NFY0RW15eHREbkpqLzAv
MzIzMDMwMmUzMjMyMzkyZTMyMzMzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzMTM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADI5e4wDQYJKoZIhvcNAQELBQADggEBAJGqkoD0
MoMvULXKPIZdCSuha4CuqetJ9080yOSNL90En5OhD/QTeNSclqhvOKP5RnLNRm8m
Q2Hynbva/VHmScA4g5Wa7Tmrfnhnido2lCipdIf10FSwq9witxa3ugOk1LtBDn0T
ODDXDmv0ouJxx+VutXWHudNkILiNFkd+BOz7zbHqFRdiYVPwNnma1AbuTZN27V5i
mdtB/sbg8JA8p8pCzxFbH2/2+1TJWpHY1QszVD/PSqxRGAGKIEguIF+DD2PZXkI/
onNylhtXNjIE8RjZfQrN5vUq37DMJPKI+WgSvfjss1CiPfWDyXHeb187PyaTJefO
M8fEWYdfs1ZWtiU=
-----END CERTIFICATE-----
Generated at Sun Aug 10 16:02:03 2025 by rpki-client