Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/3137392e39372e36382e302f32332d3233203d3e20323632373937.roa
File:                     3137392e39372e36382e302f32332d3233203d3e20323632373937.roa (raw, json)
Hash identifier:          Xgm5gSidvtso+wnut3dAmHaTEpi6NAU+3MOhLRpyCcQ=
Subject key identifier:   4C:2E:98:F5:61:7E:5C:45:73:9D:38:2A:C1:56:7E:7D:B2:34:F4:43
Certificate issuer:       /CN=36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6
Certificate serial:       1896DF888E50F4336E0C723A664CD4F48E1AD94F
Authority key identifier: 36:C9:A9:AD:CE:53:2B:3D:4D:E3:67:78:AC:FD:C3:B3:AF:5F:D0:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/3137392e39372e36382e302f32332d3233203d3e20323632373937.roa
Signing time:             Thu 27 Aug 2026 20:19:04 +0000
ROA not before:           Thu 27 Aug 2026 20:14:04 +0000
ROA not after:            Thu 26 Aug 2027 20:19:04 +0000
asID:                     262797
IP address blocks:        179.97.68.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.crl
                          rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 21:38:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:96:df:88:8e:50:f4:33:6e:0c:72:3a:66:4c:d4:f4:8e:1a:d9:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6
        Validity
            Not Before: Aug 27 20:14:04 2026 GMT
            Not After : Aug 26 20:19:04 2027 GMT
        Subject: CN=4C2E98F5617E5C45739D382AC1567E7DB234F443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a4:6c:af:ba:af:4a:a6:a6:cb:ad:84:ce:d2:
                    b1:16:f5:c1:0e:83:96:6d:8b:11:5d:95:25:af:e3:
                    98:ef:ad:fd:49:9b:dc:24:06:36:be:08:b7:1e:db:
                    fc:bb:ec:6f:ce:63:f0:a1:92:1e:6b:90:33:b4:c2:
                    75:34:66:89:7f:72:72:df:66:fa:e8:85:9d:56:6b:
                    2d:05:9d:57:fa:7c:43:ff:82:da:0e:94:15:c1:9c:
                    f3:8a:fe:c6:d9:fb:3c:9c:ff:aa:87:c6:d7:4d:b2:
                    77:59:f8:b4:ab:91:6d:5c:5e:64:c6:8e:79:dc:a2:
                    f0:14:1c:f3:33:8f:df:4b:59:4e:32:b5:d1:d8:64:
                    7d:03:a8:91:23:2d:b0:0f:8d:57:12:9f:fe:08:5e:
                    45:61:4a:79:14:ba:f0:a4:28:a0:64:c4:fb:73:af:
                    88:c5:8b:a0:37:00:cb:52:4e:92:5c:2c:d7:de:f0:
                    98:39:54:8e:fe:1d:1c:2e:03:8a:e7:eb:9c:a8:82:
                    90:9a:44:87:b8:14:e2:79:77:ae:e7:f5:a0:14:8c:
                    bb:1f:51:d9:1f:64:b2:5c:99:75:6f:d4:eb:fc:d4:
                    a5:d9:24:a6:e0:68:67:3f:fd:1b:72:f6:55:e2:b4:
                    cc:64:02:a9:f0:2c:55:06:0e:b7:d5:13:48:64:8c:
                    f8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:2E:98:F5:61:7E:5C:45:73:9D:38:2A:C1:56:7E:7D:B2:34:F4:43
            X509v3 Authority Key Identifier:
                keyid:36:C9:A9:AD:CE:53:2B:3D:4D:E3:67:78:AC:FD:C3:B3:AF:5F:D0:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/3137392e39372e36382e302f32332d3233203d3e20323632373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:1d:53:26:2f:ef:e0:16:14:09:55:83:9b:6b:e4:a6:82:f4:
         b8:ff:c3:04:d2:e2:ba:14:3c:5c:b3:29:e3:3d:4f:b0:d2:60:
         b8:32:51:73:4d:39:4a:6f:de:4c:0d:cf:a8:05:f8:af:a9:7c:
         bc:ef:f1:3b:ad:3a:4e:9c:b5:34:9e:95:14:f3:c1:0b:8f:1e:
         6e:18:cc:5c:a7:ed:ef:ca:dc:84:91:d3:61:b4:1e:d0:f2:85:
         54:30:d3:c6:27:8f:4c:82:95:ff:d7:0b:59:aa:2f:23:b7:92:
         be:b1:62:bb:6c:c0:d7:eb:fd:37:07:83:85:90:4a:e2:6a:ab:
         8a:23:54:5d:1e:5f:89:2c:2a:19:46:05:9d:0d:6e:8d:36:e2:
         82:ee:58:d0:ec:4b:42:b7:f5:57:ad:70:08:6f:e5:c3:56:bc:
         99:c1:4d:8d:e8:08:e7:79:5b:10:2c:b3:5e:7a:4a:7d:5d:0c:
         4d:ec:e0:a8:49:a7:98:4e:87:6a:60:17:3f:2d:1f:1a:1e:9a:
         28:f9:d4:fb:e9:82:ff:cc:f1:68:99:c8:e7:6f:5b:3e:57:ae:
         53:95:9e:c4:80:f0:7c:91:08:f2:33:04:4f:78:d3:1a:bb:7e:
         63:df:cf:cb:18:a6:61:a3:b5:21:18:c6:59:7d:a9:93:4b:1a:
         7c:90:2f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 14:59:19 2026 by rpki-client