Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/3137392e39372e36372e302f32342d3234203d3e20323632373937.roa
File:                     3137392e39372e36372e302f32342d3234203d3e20323632373937.roa (raw, json)
Hash identifier:          L6Hq9xEp//3oW3HJjBL3fDCNaFI0rRADDnPhjZ7P3QQ=
Subject key identifier:   2C:3B:5F:A1:69:7E:EE:0D:20:29:A9:9B:21:36:67:AB:2D:AD:25:92
Certificate issuer:       /CN=36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6
Certificate serial:       6C75BD30188663933363AC9E71C6D9BE48236B56
Authority key identifier: 36:C9:A9:AD:CE:53:2B:3D:4D:E3:67:78:AC:FD:C3:B3:AF:5F:D0:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/3137392e39372e36372e302f32342d3234203d3e20323632373937.roa
Signing time:             Thu 27 Aug 2026 20:19:03 +0000
ROA not before:           Thu 27 Aug 2026 20:14:03 +0000
ROA not after:            Thu 26 Aug 2027 20:19:03 +0000
asID:                     262797
IP address blocks:        179.97.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.crl
                          rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 15:30:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:75:bd:30:18:86:63:93:33:63:ac:9e:71:c6:d9:be:48:23:6b:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6
        Validity
            Not Before: Aug 27 20:14:03 2026 GMT
            Not After : Aug 26 20:19:03 2027 GMT
        Subject: CN=2C3B5FA1697EEE0D2029A99B213667AB2DAD2592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c3:ae:8d:2a:41:36:aa:fe:06:fa:ee:15:09:
                    28:c3:64:7d:c8:ff:04:57:1d:59:55:20:84:38:10:
                    75:49:4e:34:f6:93:e0:45:b8:fa:22:38:8e:5c:95:
                    65:ff:b0:d1:83:90:a4:06:ab:0e:e3:e2:52:31:68:
                    aa:45:4b:ec:6c:d7:3e:13:29:f3:1f:ab:c2:eb:51:
                    0c:97:37:dd:4e:19:78:85:6f:39:38:49:c8:80:d9:
                    bc:49:7c:15:30:fd:f0:3b:52:8f:2e:c7:49:4c:43:
                    33:cd:75:3c:47:f2:ce:53:a4:bd:1f:1e:be:d8:84:
                    91:3d:52:74:e1:b4:91:83:f5:25:79:a1:8b:8c:5b:
                    89:1a:4e:79:0f:4b:e1:d3:9c:b1:83:24:af:81:7e:
                    91:6e:ec:5d:6a:d5:68:ed:b3:9b:b3:09:bc:4f:0a:
                    c4:1f:c7:48:b1:56:05:f4:5c:72:03:fd:a5:ba:e4:
                    63:b0:e8:17:ba:a1:6d:94:12:4c:b0:bb:5d:45:3a:
                    33:88:7a:4b:d1:69:a2:3b:39:22:e2:87:26:78:dc:
                    3d:75:62:51:69:f1:15:b3:f6:c9:77:36:20:da:98:
                    a1:20:ab:45:32:df:d5:0d:52:0d:ec:ed:ef:7b:45:
                    51:4c:1d:4b:55:03:b7:b9:8b:24:ef:ee:f3:e4:9d:
                    ea:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:3B:5F:A1:69:7E:EE:0D:20:29:A9:9B:21:36:67:AB:2D:AD:25:92
            X509v3 Authority Key Identifier:
                keyid:36:C9:A9:AD:CE:53:2B:3D:4D:E3:67:78:AC:FD:C3:B3:AF:5F:D0:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/3137392e39372e36372e302f32342d3234203d3e20323632373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:91:06:d8:62:c1:1b:c2:9f:82:ab:fa:6f:db:f2:09:34:05:
         d2:37:2d:3b:d9:dd:7b:eb:7d:60:e1:bd:7a:2a:85:4e:04:69:
         b2:1a:54:85:9a:8f:63:f4:2b:6b:ab:a9:eb:18:ce:1b:ab:0c:
         c0:ab:cb:66:f4:d7:2d:b7:3a:20:ac:1a:d8:5b:e9:c6:52:7c:
         4e:84:e9:5d:8d:b8:b4:ee:45:76:12:a9:d6:a7:df:7e:6e:41:
         70:5f:2f:86:38:74:2e:03:40:4e:78:01:b7:76:ee:8a:b6:a0:
         e6:90:87:32:1b:27:db:fa:4b:66:4c:bc:e4:93:d3:30:7b:54:
         84:7d:b2:2b:5f:cc:14:8b:1f:46:c9:32:84:40:a2:e9:fa:0c:
         7b:d0:a2:a3:b0:88:f8:56:87:dd:41:ed:3b:08:4c:d7:16:c2:
         94:2f:cb:cf:0c:6e:12:77:93:33:a1:76:2f:f9:53:8d:7a:73:
         1b:45:5f:ad:17:bf:d1:84:27:64:26:24:0f:19:24:f4:2e:6a:
         f1:b1:e7:87:3c:a0:48:8e:36:f2:04:91:8c:0d:bc:31:39:22:
         2d:11:7d:6e:da:73:7b:57:81:be:eb:c9:2b:0d:9d:4a:68:e4:
         04:8f:40:5b:50:95:d3:42:f7:ed:39:11:3a:ed:a8:97:57:f4:
         73:ec:c9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 14:59:54 2026 by rpki-client