Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/3137392e39372e36362e302f32332d3233203d3e20323632373937.roa
File:                     3137392e39372e36362e302f32332d3233203d3e20323632373937.roa (raw, json)
Hash identifier:          Of214fBKE2kUhiKHgyYggPtbS+AOMOzryYnFlJ0vu+M=
Subject key identifier:   5C:3C:1E:E3:B6:29:F1:4C:4C:5C:F4:BA:A9:13:BE:8C:36:AA:63:77
Certificate issuer:       /CN=36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6
Certificate serial:       5C60BA29D836EA3DFBD0AE4DAEAD57FF3B5F0553
Authority key identifier: 36:C9:A9:AD:CE:53:2B:3D:4D:E3:67:78:AC:FD:C3:B3:AF:5F:D0:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/3137392e39372e36362e302f32332d3233203d3e20323632373937.roa
Signing time:             Thu 27 Aug 2026 20:18:59 +0000
ROA not before:           Thu 27 Aug 2026 20:13:59 +0000
ROA not after:            Thu 26 Aug 2027 20:18:59 +0000
asID:                     262797
IP address blocks:        179.97.66.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.crl
                          rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 15:30:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:60:ba:29:d8:36:ea:3d:fb:d0:ae:4d:ae:ad:57:ff:3b:5f:05:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6
        Validity
            Not Before: Aug 27 20:13:59 2026 GMT
            Not After : Aug 26 20:18:59 2027 GMT
        Subject: CN=5C3C1EE3B629F14C4C5CF4BAA913BE8C36AA6377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:aa:e7:bc:1d:bd:92:4f:43:c4:41:82:55:7c:
                    de:40:61:e0:12:82:db:01:5d:5b:09:68:14:58:0b:
                    51:0f:fa:2b:1c:f6:02:32:f1:fe:ad:97:85:4e:ad:
                    53:b5:bc:08:37:be:92:08:72:c6:85:06:9e:9f:a6:
                    e0:7d:53:76:59:93:b5:d2:7e:33:f7:9b:fc:25:a6:
                    75:c7:2b:00:11:8d:ce:90:dc:04:48:eb:b7:33:aa:
                    ca:30:de:25:ec:82:6f:88:78:d1:3e:73:e2:fb:f8:
                    df:2d:44:21:df:a3:ae:da:c7:61:77:f8:61:1d:d1:
                    50:6a:78:45:b3:26:b5:58:40:16:58:01:78:79:3f:
                    b3:f9:5f:f5:1b:f4:a6:90:7e:ff:8a:f3:71:8a:61:
                    46:1a:68:77:39:d1:cd:1c:35:92:c8:b3:8a:ef:fb:
                    23:50:40:3a:fc:a1:18:bf:00:53:4a:48:7f:0c:22:
                    af:dd:ed:cb:6a:17:20:c2:6f:ea:90:2d:b2:97:18:
                    c2:a9:1c:27:49:1b:38:77:69:d3:c0:a9:23:9f:c8:
                    16:24:00:8b:fb:df:67:36:6c:39:43:97:0a:d5:ae:
                    97:5b:58:92:6f:13:55:93:16:1e:ed:de:a4:e8:f8:
                    17:87:0e:ac:89:7a:5e:80:c9:1b:30:19:d8:7d:0f:
                    37:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:3C:1E:E3:B6:29:F1:4C:4C:5C:F4:BA:A9:13:BE:8C:36:AA:63:77
            X509v3 Authority Key Identifier:
                keyid:36:C9:A9:AD:CE:53:2B:3D:4D:E3:67:78:AC:FD:C3:B3:AF:5F:D0:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/3137392e39372e36362e302f32332d3233203d3e20323632373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:b3:e8:de:48:d1:3a:a2:c0:33:e5:67:be:a0:ff:a0:48:75:
         db:50:f6:b6:de:b3:d7:fe:e1:0b:01:92:d3:bf:77:ec:ae:fe:
         48:7d:a9:d9:30:2f:01:e4:76:63:3e:3d:32:74:e7:83:75:2f:
         f1:20:10:a9:f5:49:af:18:7f:c9:9a:b4:b7:2c:db:c2:67:e4:
         6b:f9:e7:2d:72:00:b2:1f:75:44:1f:17:f6:6f:37:ec:c1:ef:
         b6:f1:30:1f:4a:54:74:a1:e9:a8:b3:f5:48:0c:a9:54:7c:2c:
         e6:04:f7:df:d7:96:f0:82:8a:d1:04:ec:8c:f6:0c:83:f0:cf:
         e9:3a:37:43:10:08:21:51:20:9b:c2:5c:54:50:df:94:53:61:
         37:89:27:ac:6a:3f:3a:e3:75:55:68:66:79:ea:a0:84:19:c6:
         ab:dd:c9:1b:13:e8:e9:c0:67:80:01:9d:0b:49:26:51:5e:93:
         47:02:cc:d6:8f:b8:27:f9:61:d0:e6:b8:59:30:f1:18:4e:45:
         2d:bf:c5:04:8a:c8:ab:1a:ab:dd:53:0f:13:db:33:78:08:6b:
         4c:5f:ae:ca:37:a5:61:96:fc:04:20:37:46:e9:02:c6:15:43:
         64:68:7b:3e:b3:94:a5:ec:1c:5b:c6:6d:2d:c7:f5:8e:cb:ee:
         73:08:9e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 14:59:17 2026 by rpki-client