Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3230302e3232392e3233392e302f32342d3234203d3e203238313635.roa
File:                     3230302e3232392e3233392e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          iUFB9dBsjgc31m9YEtS8MHY9ATcctpYT+YCg3dJ/014=
Subject key identifier:   AF:E7:A1:1C:98:77:45:72:CB:0F:D8:FE:00:71:75:E6:9C:B9:7F:FB
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       1DB89B057A565911143FA1AF57ABA76D9D8EB36C
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3230302e3232392e3233392e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 28 Jul 2025 12:31:27 +0000
ROA not before:           Mon 28 Jul 2025 12:26:27 +0000
ROA not after:            Mon 27 Jul 2026 12:31:27 +0000
asID:                     28165
IP address blocks:        200.229.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:b8:9b:05:7a:56:59:11:14:3f:a1:af:57:ab:a7:6d:9d:8e:b3:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Jul 28 12:26:27 2025 GMT
            Not After : Jul 27 12:31:27 2026 GMT
        Subject: CN=AFE7A11C98774572CB0FD8FE007175E69CB97FFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:01:40:28:c4:85:67:5a:19:49:b1:ea:82:ec:
                    77:be:4d:ba:53:99:7e:6e:de:53:a4:aa:be:7a:57:
                    c0:81:ce:76:1c:56:a9:69:a4:60:0e:33:cb:cb:1f:
                    d7:8a:4f:5e:af:5f:89:42:2b:11:78:a9:d2:9b:80:
                    ca:0d:9f:7b:60:f6:f7:c8:9e:8a:91:6b:60:92:f2:
                    1e:d3:14:be:89:d1:b2:bb:de:d1:92:73:8d:36:fe:
                    fe:ac:c6:74:dc:cc:25:79:17:aa:eb:50:66:1b:ad:
                    aa:3a:10:f7:18:5b:cd:1f:4e:ae:ee:9b:34:48:af:
                    d4:8d:28:0d:bf:18:df:76:96:2d:40:c0:3e:ac:4d:
                    8a:74:1c:fe:f4:67:64:e7:94:20:fe:8e:90:a8:ac:
                    3d:97:00:f1:ae:22:27:c1:4d:af:d8:63:d8:07:8c:
                    d8:88:e7:6f:1c:eb:ec:80:7c:54:24:11:14:48:d5:
                    df:76:2a:43:c2:a2:06:f8:f2:89:dc:6b:41:35:a0:
                    53:64:5a:bd:06:bb:6f:b6:fe:a4:1c:a5:d2:dd:2f:
                    bf:48:dd:41:f9:78:5f:4d:46:8a:5e:b6:1f:44:37:
                    7c:b0:7c:91:73:f5:c6:00:b8:54:1e:fe:81:6d:41:
                    52:1e:02:7b:2d:fd:b0:0e:d3:9b:66:da:6c:b4:d3:
                    65:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E7:A1:1C:98:77:45:72:CB:0F:D8:FE:00:71:75:E6:9C:B9:7F:FB
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3230302e3232392e3233392e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:45:a9:97:e2:78:f6:10:ec:ee:e5:42:a3:5d:4b:18:90:e5:
         d3:59:6b:d9:5a:fc:dc:34:de:91:7b:b3:b4:83:dc:98:03:b0:
         0c:a6:ba:a3:f0:59:e8:b6:cb:7f:ee:2d:6b:8c:59:c3:83:95:
         2f:a3:3f:35:9c:a2:10:37:b9:1a:29:63:8d:bb:d8:89:6f:aa:
         22:7e:73:46:24:cf:98:49:fb:1a:38:61:31:e4:cb:e4:0d:8d:
         d6:75:1d:93:c0:db:b2:a3:5b:1b:20:1a:fb:c3:a3:98:5f:97:
         42:13:90:13:74:14:8f:b2:31:2b:ce:5f:ad:85:81:64:1b:8c:
         84:ee:f6:4f:a2:9b:50:3b:c4:58:79:c7:a6:23:bf:b6:07:02:
         3e:34:ce:78:69:8b:d3:2a:73:0a:26:cb:c0:87:92:73:ac:40:
         f5:33:be:26:41:9a:98:c2:18:be:13:e4:31:0e:0f:ec:99:25:
         f7:63:63:d2:34:81:d6:e9:2e:22:9d:9d:94:b4:f7:a6:a5:7c:
         6a:33:2c:94:bc:a1:51:67:3c:95:c1:e5:d5:d0:ea:17:da:e2:
         15:3f:36:82:18:dc:b7:5e:37:14:12:b7:e8:cf:47:bb:94:cb:
         5c:d6:1b:10:98:c0:fe:9d:be:31:e2:5e:b3:ec:94:21:d9:91:
         0c:55:dd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:15:22 2025 by rpki-client