Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e38382e302f32332d3233203d3e20323633343133.roa
File:                     3137392e39372e38382e302f32332d3233203d3e20323633343133.roa (raw, json)
Hash identifier:          RmaOlvYhcUF9NoKEIgJww0lf6uw+IBgZNhuGrGRMySw=
Subject key identifier:   BB:6A:98:F4:FB:84:16:D1:74:6B:5E:DA:2F:35:92:8F:82:AB:70:D4
Certificate issuer:       /CN=FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC
Certificate serial:       6FF9BB0137BCC79D3A87F47B343CDC969444347B
Authority key identifier: FE:15:2D:1B:1B:D5:63:AE:38:64:E7:38:A8:E6:52:CE:1F:2E:DB:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e38382e302f32332d3233203d3e20323633343133.roa
Signing time:             Wed 29 Jul 2026 19:47:06 +0000
ROA not before:           Wed 29 Jul 2026 19:42:06 +0000
ROA not after:            Wed 28 Jul 2027 19:47:06 +0000
asID:                     263413
IP address blocks:        179.97.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.crl
                          rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 03:34:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:f9:bb:01:37:bc:c7:9d:3a:87:f4:7b:34:3c:dc:96:94:44:34:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC
        Validity
            Not Before: Jul 29 19:42:06 2026 GMT
            Not After : Jul 28 19:47:06 2027 GMT
        Subject: CN=BB6A98F4FB8416D1746B5EDA2F35928F82AB70D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c3:e1:44:b9:ca:a1:8c:89:c0:7d:c3:17:20:
                    fe:4f:06:35:82:79:2a:6f:8c:4b:10:9d:7e:29:57:
                    21:25:2d:3c:2e:eb:41:8a:57:9e:bb:e5:0c:20:38:
                    42:8e:28:02:4b:fd:b1:fa:62:4d:37:f2:97:92:49:
                    0c:a4:9c:ce:5e:05:3a:97:26:a3:8b:27:77:da:b0:
                    73:75:22:16:a7:7f:76:5f:08:66:20:dd:5e:27:57:
                    63:0c:40:7b:46:d9:80:8d:ea:26:d1:70:60:0c:10:
                    50:68:ed:25:d1:7e:76:d9:b2:a5:92:6a:16:84:0d:
                    7e:c5:4d:34:41:4c:98:9f:27:6a:d1:4a:10:29:ef:
                    8e:60:15:4c:97:72:68:0f:08:cb:ff:63:03:a2:e5:
                    5b:19:75:2a:68:32:4d:a0:05:ab:6f:32:eb:3d:17:
                    12:ab:2b:ce:fe:f9:96:fb:52:e0:19:0e:35:44:af:
                    6f:e0:cd:c3:06:da:19:45:b7:c5:f2:42:79:18:0d:
                    21:87:f8:fa:88:f6:85:6c:c2:00:5a:63:53:df:fb:
                    c3:1b:73:02:3d:31:6f:2e:13:08:28:49:e9:31:2b:
                    96:5f:6e:43:6d:2b:01:62:ef:fb:0a:8a:11:8f:38:
                    54:ee:5c:d0:b4:f3:d4:ce:41:60:3d:64:4c:e1:a1:
                    32:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:6A:98:F4:FB:84:16:D1:74:6B:5E:DA:2F:35:92:8F:82:AB:70:D4
            X509v3 Authority Key Identifier:
                keyid:FE:15:2D:1B:1B:D5:63:AE:38:64:E7:38:A8:E6:52:CE:1F:2E:DB:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e38382e302f32332d3233203d3e20323633343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:60:5c:e5:57:8c:57:a6:27:e5:32:86:3e:da:8a:56:d0:65:
         29:fa:48:7f:e2:e6:03:e2:7d:9b:d5:54:b7:c7:5c:8d:53:75:
         72:27:1f:da:54:2d:d0:93:a9:6f:af:a9:bc:b7:7d:91:28:e7:
         da:d4:1e:44:87:3c:56:19:7a:8a:c3:bc:36:ec:b2:8b:ea:92:
         04:85:07:cb:a5:0c:ff:ed:4d:35:d2:a9:4a:50:42:69:33:68:
         7f:b5:a5:16:17:63:51:03:6b:16:c0:78:26:f5:87:0b:93:41:
         42:a3:57:1a:b9:c3:da:f3:60:e8:b6:1f:f6:1e:4b:2b:46:e5:
         a5:93:e5:7d:c8:93:47:01:5b:dc:68:b3:4a:d9:1f:16:15:3c:
         7f:f8:4a:07:eb:df:5a:90:66:b0:aa:3a:52:58:db:f2:f3:b5:
         56:b0:38:bc:96:20:69:73:3a:eb:f3:eb:27:1a:c8:e8:5b:3e:
         29:e7:b3:3d:60:3b:a2:2c:f3:0d:e5:3d:a4:08:a4:9d:b6:5e:
         2c:11:38:c1:20:99:a6:3e:b5:2d:25:bb:45:d0:ff:a2:ee:a1:
         0f:05:d4:5c:a2:a0:27:53:22:26:3f:e1:eb:35:d3:87:36:da:
         39:b2:cf:af:51:de:27:14:99:2e:8a:90:60:83:1f:c5:96:59:
         88:33:cb:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 19:32:00 2026 by rpki-client