Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/3137392e39372e37302e302f32342d3234203d3e20323632373937.roa
File:                     3137392e39372e37302e302f32342d3234203d3e20323632373937.roa (raw, json)
Hash identifier:          njjM0yKaqLccKiZDofDxD5miA50NzEiSn1jEwG9ft/s=
Subject key identifier:   DC:D4:4B:F2:0A:B1:C2:35:BC:97:58:6A:C1:99:4E:77:D6:0E:75:22
Certificate issuer:       /CN=36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6
Certificate serial:       6303B89BCE91DE491045E10E780008341F1D1B8F
Authority key identifier: 36:C9:A9:AD:CE:53:2B:3D:4D:E3:67:78:AC:FD:C3:B3:AF:5F:D0:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/3137392e39372e37302e302f32342d3234203d3e20323632373937.roa
Signing time:             Thu 27 Aug 2026 20:18:59 +0000
ROA not before:           Thu 27 Aug 2026 20:13:59 +0000
ROA not after:            Thu 26 Aug 2027 20:18:59 +0000
asID:                     262797
IP address blocks:        179.97.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.crl
                          rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 15:30:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:03:b8:9b:ce:91:de:49:10:45:e1:0e:78:00:08:34:1f:1d:1b:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6
        Validity
            Not Before: Aug 27 20:13:59 2026 GMT
            Not After : Aug 26 20:18:59 2027 GMT
        Subject: CN=DCD44BF20AB1C235BC97586AC1994E77D60E7522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f1:f9:0d:e3:d6:10:74:66:7d:ce:09:e8:fa:
                    97:7b:a5:8e:f1:a5:cc:10:3f:7d:43:d9:83:23:36:
                    37:59:69:af:be:28:16:c3:bd:bb:3a:57:fb:98:7d:
                    d6:7d:1a:d1:68:0e:b3:e5:fd:63:de:c1:1e:f2:ad:
                    19:e7:eb:80:4e:4f:d8:6a:86:72:3d:62:b5:5f:12:
                    ee:1e:cb:24:0b:44:a7:f6:6e:61:fb:8b:43:06:76:
                    d4:e6:ba:fa:e3:c6:43:1f:38:be:3b:54:de:1c:90:
                    5c:da:f9:d1:57:b4:48:62:66:b4:8b:c2:70:08:62:
                    7b:c1:eb:16:23:fd:14:a2:61:d8:ad:9c:d2:13:a3:
                    05:e1:a5:34:ac:33:4c:6b:37:b0:89:2b:6a:b3:ba:
                    c3:72:4e:01:bf:16:7f:8e:20:4b:2d:4d:ac:e7:6c:
                    d3:4c:9e:b7:24:8a:f0:07:78:22:40:7e:0d:ed:b9:
                    3e:69:56:8d:cf:89:8e:9d:0b:64:16:0b:b9:24:9f:
                    db:41:89:9a:2d:cf:8b:cc:d7:34:5b:3e:1d:5f:30:
                    70:e2:ac:37:cb:75:3b:b5:40:1b:fd:c9:32:47:d6:
                    78:4c:c8:28:3d:b6:50:12:bf:c7:73:c5:e6:7d:34:
                    a6:33:66:75:f4:07:ff:f2:5c:29:b4:36:f0:31:ad:
                    77:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:D4:4B:F2:0A:B1:C2:35:BC:97:58:6A:C1:99:4E:77:D6:0E:75:22
            X509v3 Authority Key Identifier:
                keyid:36:C9:A9:AD:CE:53:2B:3D:4D:E3:67:78:AC:FD:C3:B3:AF:5F:D0:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/3137392e39372e37302e302f32342d3234203d3e20323632373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:c9:c3:d0:94:9b:78:79:c9:4f:48:e6:63:f5:af:4a:95:de:
         0d:a6:a2:c9:51:ef:50:3b:ef:25:88:d9:ae:64:76:a4:f3:cd:
         86:c9:4f:57:03:a4:a0:32:de:f2:bc:a0:24:95:35:75:80:5b:
         cb:9b:06:16:a1:20:ac:91:16:ec:06:1c:2b:71:10:48:f1:88:
         3f:ec:74:09:69:4d:d7:f1:66:e5:46:cc:5e:ea:f1:e5:eb:fb:
         f7:83:86:3d:e7:86:0d:ca:75:7a:e9:a8:f8:09:fb:c1:f9:54:
         69:d9:bd:41:5b:23:34:94:07:bc:ab:b6:1b:3b:f7:f7:12:95:
         99:aa:c9:99:21:f2:59:5e:10:df:48:04:3a:a6:57:77:43:de:
         f1:aa:18:2b:10:29:fc:df:bd:89:12:8b:c5:f9:2a:be:2e:d2:
         53:9c:72:10:2e:92:9e:70:44:8f:0b:5a:36:0f:10:5b:e0:fa:
         8a:3f:f8:83:34:d5:5b:a3:2d:14:ea:75:e1:eb:b7:6e:a2:1c:
         dd:cd:e2:fe:a8:1c:96:6f:f5:5b:97:24:0a:3b:1f:d6:92:b2:
         39:4a:d7:0a:9e:22:4a:d4:90:8b:48:8a:b1:26:ca:ea:9d:a4:
         06:fa:e1:fe:c9:da:4c:c8:6e:ec:dd:44:a1:27:3e:24:34:91:
         54:b6:c6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 15:00:02 2026 by rpki-client