Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e38382e302f32342d3234203d3e20323633343133.roa
File:                     3137392e39372e38382e302f32342d3234203d3e20323633343133.roa (raw, json)
Hash identifier:          Fjk+OWKvJUQdp0TopG4Q6f/qPqD35ZZsFOPNhjmpzsU=
Subject key identifier:   3A:B0:19:9C:1F:C6:EB:6B:26:0F:BE:0F:DE:C1:D3:4D:72:49:1C:09
Certificate issuer:       /CN=FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC
Certificate serial:       256DB844F52BAA3CD7B99B5208520E4BE2982864
Authority key identifier: FE:15:2D:1B:1B:D5:63:AE:38:64:E7:38:A8:E6:52:CE:1F:2E:DB:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e38382e302f32342d3234203d3e20323633343133.roa
Signing time:             Wed 29 Jul 2026 19:47:08 +0000
ROA not before:           Wed 29 Jul 2026 19:42:08 +0000
ROA not after:            Wed 28 Jul 2027 19:47:08 +0000
asID:                     263413
IP address blocks:        179.97.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.crl
                          rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 03:34:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:6d:b8:44:f5:2b:aa:3c:d7:b9:9b:52:08:52:0e:4b:e2:98:28:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC
        Validity
            Not Before: Jul 29 19:42:08 2026 GMT
            Not After : Jul 28 19:47:08 2027 GMT
        Subject: CN=3AB0199C1FC6EB6B260FBE0FDEC1D34D72491C09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:01:f8:4f:bd:20:7c:84:c7:2e:0f:83:96:56:
                    35:d4:92:f8:7d:05:f9:80:0c:48:f5:da:a4:32:58:
                    af:c3:aa:d3:02:f2:c2:3b:39:ed:a0:9f:60:03:23:
                    86:10:b5:dd:d7:18:03:ca:82:d7:ef:9a:37:52:33:
                    15:e2:88:ca:8a:20:33:3d:75:0c:83:80:dc:32:41:
                    85:f4:0b:2e:68:b3:e3:9e:3d:f8:b3:30:0d:4a:e8:
                    99:be:1b:27:2e:32:83:10:8d:13:d9:74:ac:77:32:
                    d0:2a:7a:88:c8:50:1f:07:df:80:25:b9:31:48:02:
                    e3:7b:2d:4b:d9:6e:84:04:c4:8c:80:22:8e:ba:95:
                    52:00:ae:19:a8:d9:cc:a3:d6:66:50:b8:64:18:1b:
                    da:5d:44:ba:95:93:bb:9e:d6:cc:e9:4f:18:e2:fd:
                    2e:70:1b:39:69:63:77:ac:c7:18:c3:8b:39:66:8b:
                    10:d2:d0:e5:d1:e4:2c:c6:5b:94:9d:89:43:c7:d8:
                    3b:70:3e:90:4d:2d:8d:8f:15:b6:3b:93:97:91:e5:
                    f5:50:41:d1:3f:73:af:f2:7c:a2:d4:78:61:ca:df:
                    e9:97:2b:d3:46:d3:26:c9:f6:37:01:2b:94:5d:83:
                    e1:e3:2c:80:43:09:f0:fa:03:8a:92:ed:05:2f:14:
                    ee:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B0:19:9C:1F:C6:EB:6B:26:0F:BE:0F:DE:C1:D3:4D:72:49:1C:09
            X509v3 Authority Key Identifier:
                keyid:FE:15:2D:1B:1B:D5:63:AE:38:64:E7:38:A8:E6:52:CE:1F:2E:DB:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e38382e302f32342d3234203d3e20323633343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:af:dd:e0:c9:9c:31:0a:7f:e8:d4:32:36:cd:37:46:51:f6:
         c7:38:dc:6c:b4:bb:86:c9:0d:64:ea:12:f4:83:f4:41:c2:a4:
         9e:f7:23:f7:f4:48:f0:09:23:32:e5:cf:b2:56:40:25:7e:e5:
         f9:b0:7c:c5:cd:43:a9:16:f6:0b:09:88:45:62:6d:ce:8f:98:
         48:cf:bc:93:73:7e:b8:39:cd:cf:4e:ac:f5:d4:ff:fb:a1:7c:
         bc:ff:5d:70:a5:0f:40:37:9d:c3:23:6a:9f:ee:b4:18:70:62:
         18:d8:c7:ea:61:1f:c7:3d:ba:04:0e:e9:67:42:f7:db:0f:3b:
         00:32:e4:82:8e:07:f8:f8:02:66:60:b5:ec:28:46:e7:79:a8:
         4a:e3:30:f7:2b:93:ee:fb:c2:75:7b:4b:d4:31:d0:75:e0:0e:
         c1:8b:bc:c0:5e:70:86:e4:a1:46:98:a5:60:52:e8:d5:f0:2d:
         ed:87:1c:79:d3:52:aa:57:eb:97:26:67:fe:15:f0:bd:16:c8:
         f6:0e:21:be:59:0f:a5:b8:76:62:ab:13:24:cf:2f:c2:75:e3:
         96:08:cc:ad:90:99:ed:4e:07:7c:fa:44:18:4c:66:9b:3a:c1:
         bf:b3:5c:be:77:a9:ce:2c:91:8e:57:f1:d6:64:da:39:24:e6:
         9f:34:1b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 15:31:22 2026 by rpki-client