Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e38382e302f32322d3232203d3e20323633343133.roa
File:                     3137392e39372e38382e302f32322d3232203d3e20323633343133.roa (raw, json)
Hash identifier:          S4yrHm4tJeh4mDvNuEcCppsrrtBNJvRz/E//W+H+SCA=
Subject key identifier:   06:6F:40:FC:D0:F1:AB:C9:5C:A9:9C:3E:35:C2:BE:74:2E:8C:DC:D4
Certificate issuer:       /CN=FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC
Certificate serial:       353352DD177EFBDB451AB2B428E6BD0FAFE5FC2A
Authority key identifier: FE:15:2D:1B:1B:D5:63:AE:38:64:E7:38:A8:E6:52:CE:1F:2E:DB:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e38382e302f32322d3232203d3e20323633343133.roa
Signing time:             Wed 29 Jul 2026 19:47:08 +0000
ROA not before:           Wed 29 Jul 2026 19:42:08 +0000
ROA not after:            Wed 28 Jul 2027 19:47:08 +0000
asID:                     263413
IP address blocks:        179.97.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.crl
                          rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 03:34:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:33:52:dd:17:7e:fb:db:45:1a:b2:b4:28:e6:bd:0f:af:e5:fc:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC
        Validity
            Not Before: Jul 29 19:42:08 2026 GMT
            Not After : Jul 28 19:47:08 2027 GMT
        Subject: CN=066F40FCD0F1ABC95CA99C3E35C2BE742E8CDCD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fa:ef:dd:17:5f:96:fe:13:34:cb:6e:43:93:
                    f7:27:b0:54:b4:8b:45:52:7c:b0:37:20:21:5b:e6:
                    08:7a:ec:33:e6:03:16:ab:64:75:93:98:f2:f5:c2:
                    43:d9:87:2f:ef:3e:08:5f:f5:fd:e3:f9:80:40:7e:
                    c1:a3:b4:bb:2c:0e:9c:68:0c:95:48:bf:bd:68:01:
                    3f:46:3c:28:73:ec:14:c9:d6:dd:2d:94:61:23:84:
                    b3:99:95:ba:fa:9d:ab:e2:16:68:59:ab:a7:59:b5:
                    c6:fd:3f:16:7c:f4:fe:54:27:a6:b3:0a:e4:93:2b:
                    52:c4:d6:5d:db:36:1e:6c:7c:9d:63:1d:f4:6c:43:
                    64:94:e7:89:71:fd:ae:8d:62:2a:7c:2b:bf:51:20:
                    0e:7c:88:d7:aa:f9:19:12:2d:fc:b1:e3:e2:15:71:
                    e2:5b:72:c5:58:82:cf:99:56:25:79:33:90:10:c4:
                    29:50:9a:d5:04:ef:77:e4:7b:98:cd:a6:dd:c5:fb:
                    94:f0:a1:da:68:56:e2:dc:80:ff:1b:7e:be:5e:6b:
                    2e:30:39:ee:db:84:25:9c:3a:27:c7:46:3a:6e:29:
                    18:74:57:4c:92:93:9a:15:d2:6f:fd:b5:74:ec:04:
                    da:28:c0:ce:2c:4f:b1:a5:a9:fa:ea:59:86:4e:c2:
                    b5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:6F:40:FC:D0:F1:AB:C9:5C:A9:9C:3E:35:C2:BE:74:2E:8C:DC:D4
            X509v3 Authority Key Identifier:
                keyid:FE:15:2D:1B:1B:D5:63:AE:38:64:E7:38:A8:E6:52:CE:1F:2E:DB:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e38382e302f32322d3232203d3e20323633343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:fd:9e:f4:c3:62:67:f1:e2:2a:bc:b3:95:96:6e:cb:26:0f:
         24:00:af:b3:50:82:a5:68:de:76:d5:f3:67:fc:84:8a:7e:1c:
         17:38:31:e0:2c:35:11:b4:99:65:08:30:d8:6f:73:d6:f4:0c:
         21:50:bc:65:be:44:96:d2:5e:dc:c8:9f:57:b3:a5:01:5d:15:
         b2:c3:68:19:f1:9c:f5:a7:35:eb:60:cf:f7:fe:7e:66:d8:ec:
         0c:98:37:5d:3d:56:fa:b0:4d:a7:0d:0c:da:66:a0:dc:5d:08:
         0c:63:28:f6:6b:e5:de:6a:ac:54:c6:58:b2:e3:2a:2b:26:23:
         08:08:4c:3b:3b:55:ac:f6:8c:86:7b:68:5f:7f:50:3f:2a:1e:
         61:8a:d7:6b:5c:19:b1:85:df:4c:9a:4b:a7:59:d0:7f:a0:9e:
         c8:99:81:b3:5d:93:88:55:c6:40:5f:d6:e4:06:a2:2e:3c:f1:
         dd:2e:f0:c0:cb:fb:79:72:dd:d4:4a:e3:48:da:ac:7b:a3:37:
         9d:ef:19:e7:e4:44:6a:37:08:ce:11:20:f6:fc:0f:2b:23:c8:
         e5:bb:45:04:ac:af:1e:56:e7:5f:f0:90:21:a3:43:ca:5c:67:
         7f:9d:84:06:a5:32:4f:68:54:36:35:51:8a:21:7a:1f:d7:fe:
         f1:a9:db:3c
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUNTNS3Rd++9tFGrK0KOa9D6/l/CowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkUxNTJEMUIxQkQ1NjNBRTM4NjRFNzM4QThFNjUyQ0Ux
RjJFREJDQzAeFw0yNjA3MjkxOTQyMDhaFw0yNzA3MjgxOTQ3MDhaMDMxMTAvBgNV
BAMTKDA2NkY0MEZDRDBGMUFCQzk1Q0E5OUMzRTM1QzJCRTc0MkU4Q0RDRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd+u/dF1+W/hM0y25Dk/cnsFS0
i0VSfLA3ICFb5gh67DPmAxarZHWTmPL1wkPZhy/vPghf9f3j+YBAfsGjtLssDpxo
DJVIv71oAT9GPChz7BTJ1t0tlGEjhLOZlbr6naviFmhZq6dZtcb9PxZ89P5UJ6az
CuSTK1LE1l3bNh5sfJ1jHfRsQ2SU54lx/a6NYip8K79RIA58iNeq+RkSLfyx4+IV
ceJbcsVYgs+ZViV5M5AQxClQmtUE73fke5jNpt3F+5TwodpoVuLcgP8bfr5eay4w
Oe7bhCWcOifHRjpuKRh0V0ySk5oV0m/9tXTsBNoowM4sT7GlqfrqWYZOwrUNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUBm9A/NDxq8lcqZw+NcK+dC6M3NQwHwYDVR0j
BBgwFoAU/hUtGxvVY644ZOc4qOZSzh8u28wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVNGM0VMenpiQk5XMmIxdWY2R0s4YzVvU0dRQXR4SFhDUW9OWm52QmFy
UUUvMC9GRTE1MkQxQjFCRDU2M0FFMzg2NEU3MzhBOEU2NTJDRTFGMkVEQkNDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZFMTUyRDFCMUJENTYzQUUz
ODY0RTczOEE4RTY1MkNFMUYyRURCQ0MuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlTRjNFTHp6YkJOVzJiMXVmNkdLOGM1b1NHUUF0eEhYQ1FvTlpudkJhclFFLzAv
MzEzNzM5MmUzOTM3MmUzODM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjMz
MzQzMTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCs2FYMA0GCSqGSIb3DQEBCwUAA4IBAQBq/Z70w2Jn
8eIqvLOVlm7LJg8kAK+zUIKlaN521fNn/ISKfhwXODHgLDURtJllCDDYb3PW9Awh
ULxlvkSW0l7cyJ9Xs6UBXRWyw2gZ8Zz1pzXrYM/3/n5m2OwMmDddPVb6sE2nDQza
ZqDcXQgMYyj2a+XeaqxUxliy4yorJiMICEw7O1Ws9oyGe2hff1A/Kh5hitdrXBmx
hd9MmkunWdB/oJ7ImYGzXZOIVcZAX9bkBqIuPPHdLvDAy/t5ct3USuNI2qx7ozed
7xnn5ERqNwjOESD2/A8rI8jlu0UErK8eVudf8JAho0PKXGd/nYQGpTJPaFQ2NVGK
IXof1/7xqds8
-----END CERTIFICATE-----
Generated at Mon Aug 24 07:50:17 2026 by rpki-client