Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/3137392e39372e36352e302f32342d3234203d3e20323632373937.roa
File:                     3137392e39372e36352e302f32342d3234203d3e20323632373937.roa (raw, json)
Hash identifier:          b7M/B/TZ8w4ON5k//9WvKEHn2fH6y9cQUK3zljXz2mA=
Subject key identifier:   F9:F6:BA:A8:B7:A6:A8:17:13:3D:21:4C:99:56:90:2F:ED:DE:0A:BD
Certificate issuer:       /CN=36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6
Certificate serial:       06253E23803AABD6285FC61D54C0EE32D8BB5819
Authority key identifier: 36:C9:A9:AD:CE:53:2B:3D:4D:E3:67:78:AC:FD:C3:B3:AF:5F:D0:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/3137392e39372e36352e302f32342d3234203d3e20323632373937.roa
Signing time:             Thu 27 Aug 2026 20:19:01 +0000
ROA not before:           Thu 27 Aug 2026 20:14:01 +0000
ROA not after:            Thu 26 Aug 2027 20:19:01 +0000
asID:                     262797
IP address blocks:        179.97.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.crl
                          rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 21:38:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:25:3e:23:80:3a:ab:d6:28:5f:c6:1d:54:c0:ee:32:d8:bb:58:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6
        Validity
            Not Before: Aug 27 20:14:01 2026 GMT
            Not After : Aug 26 20:19:01 2027 GMT
        Subject: CN=F9F6BAA8B7A6A817133D214C9956902FEDDE0ABD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:72:f4:e8:31:1b:1b:0a:2b:a5:06:89:15:5c:
                    3d:7d:20:80:b3:b0:73:12:c7:5c:ec:55:75:e3:39:
                    a1:c4:85:5c:34:60:9a:94:fc:56:8b:26:a4:0d:50:
                    44:72:b1:9d:8b:bd:f5:9d:67:3d:fd:b0:0b:95:7b:
                    5f:f6:5f:74:a8:90:f0:23:39:66:d9:de:ef:f2:98:
                    a9:30:46:9c:70:26:bf:6e:06:19:c3:50:ad:e9:0a:
                    31:81:d2:63:f0:3e:dc:e8:a8:75:6b:31:40:f0:94:
                    91:8b:10:58:cb:a4:21:d9:f4:40:bf:10:f6:61:c2:
                    1d:f6:23:d1:cb:f2:ad:26:2f:2a:2f:92:9f:cf:2c:
                    da:bc:72:6a:58:60:ef:4c:0f:b9:b7:91:04:5a:79:
                    1e:3c:37:2c:fb:67:68:5c:3c:49:ea:de:b6:d4:7c:
                    33:6a:1d:a4:16:15:db:dc:b2:ec:b3:31:ed:2a:b0:
                    68:8c:76:ca:d9:0f:ab:1b:97:e7:77:20:29:a1:bb:
                    c6:19:86:e8:6c:85:dd:65:26:f2:f6:09:2c:e3:59:
                    b1:4b:4c:a9:e5:d5:77:83:04:b8:62:18:31:18:79:
                    44:5c:61:17:c4:2c:6a:9c:b1:68:61:81:7c:0e:df:
                    29:21:5e:d6:f8:3e:0b:f9:79:eb:0a:c0:2e:26:0b:
                    ff:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F6:BA:A8:B7:A6:A8:17:13:3D:21:4C:99:56:90:2F:ED:DE:0A:BD
            X509v3 Authority Key Identifier:
                keyid:36:C9:A9:AD:CE:53:2B:3D:4D:E3:67:78:AC:FD:C3:B3:AF:5F:D0:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/3137392e39372e36352e302f32342d3234203d3e20323632373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:a8:39:f4:4c:36:20:c4:d9:4e:4f:6f:b1:f6:64:df:c2:7e:
         5c:87:93:7c:67:cc:e1:da:1f:75:e1:7c:94:20:6f:fc:f8:e2:
         4f:42:e5:b3:fe:da:47:ab:ae:0e:08:0e:0b:e9:c6:21:80:14:
         b0:0f:91:c4:a7:fb:3b:02:68:52:17:46:d5:32:78:31:37:13:
         82:e7:f9:d6:c6:99:33:49:f1:2c:fe:e3:86:f3:f4:f0:9c:e5:
         9e:b3:bd:d1:06:c7:0a:ea:1e:e0:c4:6c:e2:f1:c1:8e:88:6b:
         d7:63:ad:30:79:5f:8a:6c:94:e9:7a:70:19:90:c0:20:57:d0:
         05:0e:3c:f1:6b:d8:15:7f:c8:fd:00:6a:fe:0a:86:8a:28:c3:
         d1:fa:c6:fe:da:c0:3b:08:90:f1:34:1a:7d:60:1d:1b:b9:eb:
         c8:a7:39:c3:56:56:8d:2b:57:d5:28:90:1e:c3:99:10:04:f4:
         65:c3:65:c1:8c:37:aa:8d:01:56:48:e3:94:8b:8d:eb:bd:97:
         ba:00:da:71:d7:28:ec:93:54:d1:23:8f:26:31:e9:f4:47:6a:
         d0:c2:45:f3:2f:25:62:74:89:b7:4b:18:24:08:85:8d:c4:f7:
         33:51:a2:61:47:c3:0c:4a:f5:d6:4e:09:d7:81:72:2a:32:69:
         3d:c5:9a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 15:00:01 2026 by rpki-client