Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e38382e302f32312d3231203d3e20323633343133.roa
File:                     3137392e39372e38382e302f32312d3231203d3e20323633343133.roa (raw, json)
Hash identifier:          c1vAosqZXH9Tx8/gKXbZVqdoRb7LE1CmN4Fa+100Pjs=
Subject key identifier:   BE:D4:E1:67:14:39:14:63:46:ED:50:BB:96:31:88:55:B4:C5:E4:47
Certificate issuer:       /CN=FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC
Certificate serial:       328D1E2DAD29BAC301EDDA7683DB7E32FF24AA
Authority key identifier: FE:15:2D:1B:1B:D5:63:AE:38:64:E7:38:A8:E6:52:CE:1F:2E:DB:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e38382e302f32312d3231203d3e20323633343133.roa
Signing time:             Wed 29 Jul 2026 19:47:07 +0000
ROA not before:           Wed 29 Jul 2026 19:42:07 +0000
ROA not after:            Wed 28 Jul 2027 19:47:07 +0000
asID:                     263413
IP address blocks:        179.97.88.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.crl
                          rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 03:34:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:8d:1e:2d:ad:29:ba:c3:01:ed:da:76:83:db:7e:32:ff:24:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC
        Validity
            Not Before: Jul 29 19:42:07 2026 GMT
            Not After : Jul 28 19:47:07 2027 GMT
        Subject: CN=BED4E1671439146346ED50BB96318855B4C5E447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5a:d8:78:58:2e:50:34:01:92:95:54:7f:53:
                    94:1d:c3:d9:65:6b:a5:1d:72:4d:89:65:1a:78:14:
                    69:b2:98:41:36:3d:85:19:ab:8e:4a:aa:9f:de:40:
                    7f:7a:d8:d1:8f:f2:86:f8:7c:94:09:2d:b5:a3:63:
                    5d:27:c0:05:81:03:49:5e:c5:43:88:0b:46:2a:22:
                    f9:74:51:df:5a:e8:21:ba:11:8b:db:03:49:dd:70:
                    00:1d:33:7f:00:48:a0:1e:1e:d5:59:1a:3d:c2:75:
                    de:bc:d3:cc:ae:4b:63:34:9c:7d:02:a5:d9:03:b5:
                    d8:75:15:0e:c3:62:a8:b0:89:67:17:3f:f1:6a:fc:
                    9f:e0:5d:d3:94:e5:b0:71:b1:29:fb:1d:d2:a6:c1:
                    71:b9:6b:19:69:95:18:a3:22:5a:e1:4c:1a:09:45:
                    2d:cb:66:17:07:b7:59:4c:bc:0f:5e:ce:43:60:ef:
                    88:8e:a1:06:74:e4:a3:37:89:92:50:df:c5:ab:de:
                    db:4f:ce:d8:77:12:12:07:35:ce:21:7d:1d:87:c7:
                    a6:4a:90:5e:46:51:7a:be:74:9e:5b:22:0d:ab:22:
                    f4:77:98:81:13:4c:78:89:c5:f8:fb:9d:08:2b:dc:
                    7e:84:04:6a:46:f0:1c:cf:f7:cc:e2:27:ff:b6:3b:
                    da:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D4:E1:67:14:39:14:63:46:ED:50:BB:96:31:88:55:B4:C5:E4:47
            X509v3 Authority Key Identifier:
                keyid:FE:15:2D:1B:1B:D5:63:AE:38:64:E7:38:A8:E6:52:CE:1F:2E:DB:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e38382e302f32312d3231203d3e20323633343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2a:9c:c7:73:1f:2d:c6:c7:a2:2a:a4:a4:73:f8:e7:b1:8f:19:
         47:46:06:d2:7e:f3:85:bb:83:a5:d8:a2:c0:cf:8f:a1:bb:ac:
         d0:60:b8:91:b7:00:c8:f1:bf:52:19:97:d5:35:4a:a0:4e:8e:
         25:c3:e9:a3:4e:1b:fc:10:7e:49:3b:13:a3:12:18:de:16:3c:
         0d:d7:78:8d:12:cf:5a:09:ca:dd:ea:24:aa:f1:59:48:3a:d9:
         f3:cb:be:a8:05:2c:0b:49:71:82:0d:5e:a9:a5:08:a8:25:da:
         ff:82:f7:84:dd:a9:6d:d4:1a:1e:b7:38:43:c9:b8:6c:15:fd:
         4c:ba:a1:c5:57:cc:41:f0:ec:64:1b:a3:4d:4e:cb:5e:f6:a9:
         2a:f5:86:bc:f4:e3:7c:a8:16:bb:b9:53:f3:ba:c1:ec:6b:4c:
         a0:98:b6:95:fc:98:50:50:4d:f3:88:70:a5:bc:8f:53:c7:43:
         a7:c6:15:e7:23:70:04:2c:23:ba:15:ab:e5:bc:49:20:fb:14:
         4b:db:0c:09:2f:af:53:19:c7:8e:2a:28:37:d6:76:dc:e7:56:
         b4:c5:e4:da:f6:f5:83:29:51:a2:49:d4:b5:ba:ad:9a:1e:d7:
         5f:f7:f6:31:09:49:a8:61:85:91:7c:54:b1:8d:f2:1d:ef:df:
         c0:66:b1:58
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgITMo0eLa0pusMB7dp2g9t+Mv8kqjANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyhGRTE1MkQxQjFCRDU2M0FFMzg2NEU3MzhBOEU2NTJDRTFG
MkVEQkNDMB4XDTI2MDcyOTE5NDIwN1oXDTI3MDcyODE5NDcwN1owMzExMC8GA1UE
AxMoQkVENEUxNjcxNDM5MTQ2MzQ2RUQ1MEJCOTYzMTg4NTVCNEM1RTQ0NzCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJha2HhYLlA0AZKVVH9TlB3D2WVr
pR1yTYllGngUabKYQTY9hRmrjkqqn95Af3rY0Y/yhvh8lAkttaNjXSfABYEDSV7F
Q4gLRioi+XRR31roIboRi9sDSd1wAB0zfwBIoB4e1VkaPcJ13rzTzK5LYzScfQKl
2QO12HUVDsNiqLCJZxc/8Wr8n+Bd05TlsHGxKfsd0qbBcblrGWmVGKMiWuFMGglF
LctmFwe3WUy8D17OQ2DviI6hBnTkozeJklDfxave20/O2HcSEgc1ziF9HYfHpkqQ
XkZRer50nlsiDasi9HeYgRNMeInF+PudCCvcfoQEakbwHM/3zOIn/7Y72v0CAwEA
AaOCAk8wggJLMB0GA1UdDgQWBBS+1OFnFDkUY0btULuWMYhVtMXkRzAfBgNVHSME
GDAWgBT+FS0bG9Vjrjhk5zio5lLOHy7bzDAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud
HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby85U0YzRUx6emJCTlcyYjF1ZjZHSzhjNW9TR1FBdHhIWENRb05abnZCYXJR
RS8wL0ZFMTUyRDFCMUJENTYzQUUzODY0RTczOEE4RTY1MkNFMUYyRURCQ0MuY3Js
MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvRkUxNTJEMUIxQkQ1NjNBRTM4
NjRFNzM4QThFNjUyQ0UxRjJFREJDQy5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZ
BggrBgEFBQcwC4aBjHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OVNGM0VMenpiQk5XMmIxdWY2R0s4YzVvU0dRQXR4SFhDUW9OWm52QmFyUUUvMC8z
MTM3MzkyZTM5MzcyZTM4MzgyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM2MzMz
NDMxMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAOzYVgwDQYJKoZIhvcNAQELBQADggEBACqcx3MfLcbH
oiqkpHP457GPGUdGBtJ+84W7g6XYosDPj6G7rNBguJG3AMjxv1IZl9U1SqBOjiXD
6aNOG/wQfkk7E6MSGN4WPA3XeI0Sz1oJyt3qJKrxWUg62fPLvqgFLAtJcYINXqml
CKgl2v+C94TdqW3UGh63OEPJuGwV/Uy6ocVXzEHw7GQbo01Oy172qSr1hrz043yo
Fru5U/O6wexrTKCYtpX8mFBQTfOIcKW8j1PHQ6fGFecjcAQsI7oVq+W8SSD7FEvb
DAkvr1MZx44qKDfWdtznVrTF5Nr29YMpUaJJ1LW6rZoe11/39jEJSahhhZF8VLGN
8h3v38BmsVg=
-----END CERTIFICATE-----
Generated at Mon Aug 24 14:45:47 2026 by rpki-client