Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3230382e302f32302d3230203d3e20323733343930.roa
File:                     3138372e36322e3230382e302f32302d3230203d3e20323733343930.roa (raw, json)
Hash identifier:          rVWFR0JyHl4tp3jDw0AMogsDo3HfKz1eGsckiuy3ZxI=
Subject key identifier:   48:CD:C5:3D:69:BE:BC:CB:C5:44:9A:86:40:A6:70:4F:71:E6:9C:88
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       7A46548CD258254783307A4E22619792EEACAA53
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3230382e302f32302d3230203d3e20323733343930.roa
Signing time:             Wed 01 Oct 2025 22:13:56 +0000
ROA not before:           Wed 01 Oct 2025 22:08:56 +0000
ROA not after:            Wed 30 Sep 2026 22:13:56 +0000
asID:                     273490
IP address blocks:        187.62.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 16:38:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:46:54:8c:d2:58:25:47:83:30:7a:4e:22:61:97:92:ee:ac:aa:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Oct  1 22:08:56 2025 GMT
            Not After : Sep 30 22:13:56 2026 GMT
        Subject: CN=48CDC53D69BEBCCBC5449A8640A6704F71E69C88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:77:5f:ad:3c:40:29:ad:d3:ad:13:c9:cc:13:
                    30:2f:d5:3d:3f:ff:5c:27:eb:58:28:a1:48:52:51:
                    42:09:5e:4b:cd:da:cd:58:99:80:3d:24:66:dc:ff:
                    78:26:41:03:32:95:3f:f3:7d:e9:68:e2:a0:fd:38:
                    80:44:e2:85:4f:0d:42:e8:95:cb:9a:0a:81:cc:fc:
                    96:56:1c:5a:18:9c:77:ac:de:ae:df:a8:be:3c:4c:
                    41:e4:94:9f:a1:ae:27:e3:16:1e:b5:5f:dc:53:38:
                    41:b9:e0:08:65:f3:1e:0b:f6:87:fe:26:2f:2a:ba:
                    6f:69:8d:18:82:29:01:c3:60:4b:15:ae:dd:ad:68:
                    d5:9e:2b:4c:34:e4:4d:22:37:20:9e:cd:02:ec:20:
                    90:49:d3:fd:89:67:f4:34:ff:af:5d:e1:23:1a:48:
                    3e:b0:59:94:47:3f:0e:e1:73:bd:7d:8f:c6:57:43:
                    d5:8c:90:46:1f:fe:af:94:bd:c7:87:84:c4:9b:a5:
                    fa:54:37:38:c4:8b:05:12:bc:9e:f7:59:60:8d:f6:
                    2a:2d:c5:c7:30:1f:59:fb:2c:7a:5b:71:d2:73:da:
                    b4:ed:c1:e4:0c:cf:53:80:5c:dc:04:32:4f:98:4b:
                    f6:96:70:ea:29:89:58:57:6a:11:7e:33:b5:fd:03:
                    34:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:CD:C5:3D:69:BE:BC:CB:C5:44:9A:86:40:A6:70:4F:71:E6:9C:88
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3138372e36322e3230382e302f32302d3230203d3e20323733343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a4:20:4f:75:32:14:cf:bb:28:b7:94:23:38:a8:77:f7:f6:8d:
         73:c9:a8:48:01:89:58:4e:43:ce:30:db:59:e6:da:1d:68:28:
         e6:a7:e7:f3:ac:3c:46:b0:76:30:dc:38:64:5b:5c:ee:b4:8b:
         5a:7a:ea:32:b1:23:54:8a:0a:fc:26:08:54:61:bd:4b:16:4c:
         cf:e7:ee:e6:9a:93:a8:43:dc:ec:4b:7b:0b:cf:c4:f9:c2:70:
         5c:49:19:c4:47:31:d8:66:79:b6:97:a7:ee:37:50:0a:9c:82:
         fe:61:9a:64:b0:5a:b1:00:da:ad:f9:70:af:19:6d:1b:74:4e:
         bc:04:c7:7c:46:0c:d0:e2:3c:0e:80:e5:5a:23:6b:c9:73:82:
         8f:58:7e:8e:f6:78:63:80:81:65:b0:c5:5b:4b:39:a8:bd:cb:
         0c:d6:d5:76:94:85:b0:60:ae:6e:bd:62:11:53:8d:aa:9d:9d:
         43:c3:0d:f0:65:af:84:76:16:4e:1e:9a:2f:cc:a9:24:32:f9:
         97:80:8e:50:07:82:1e:f1:79:ab:c9:a8:d9:95:7e:7f:a4:11:
         4f:5e:f9:33:b6:86:cd:69:1c:28:b8:07:59:02:95:f6:7d:92:
         c3:5c:24:1a:8b:c3:3d:e3:b6:06:c0:ac:a3:9c:43:d3:80:1d:
         d4:f4:b0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:17:27 2025 by rpki-client