Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e38392e302f32342d3234203d3e20323633343133.roa
File:                     3137392e39372e38392e302f32342d3234203d3e20323633343133.roa (raw, json)
Hash identifier:          hmOi//bNcFdOGwUGJhlCWD0j9cBWWyY0F/tR9QLW+Bk=
Subject key identifier:   73:BE:A4:8F:D1:B0:D0:15:AE:5F:17:7B:9E:A2:AE:4D:DC:0B:17:4A
Certificate issuer:       /CN=FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC
Certificate serial:       2C5FA33D4065D703D3DCA7AE1937F96C4D462DC4
Authority key identifier: FE:15:2D:1B:1B:D5:63:AE:38:64:E7:38:A8:E6:52:CE:1F:2E:DB:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e38392e302f32342d3234203d3e20323633343133.roa
Signing time:             Wed 29 Jul 2026 19:47:08 +0000
ROA not before:           Wed 29 Jul 2026 19:42:08 +0000
ROA not after:            Wed 28 Jul 2027 19:47:08 +0000
asID:                     263413
IP address blocks:        179.97.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.crl
                          rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 03:34:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:5f:a3:3d:40:65:d7:03:d3:dc:a7:ae:19:37:f9:6c:4d:46:2d:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC
        Validity
            Not Before: Jul 29 19:42:08 2026 GMT
            Not After : Jul 28 19:47:08 2027 GMT
        Subject: CN=73BEA48FD1B0D015AE5F177B9EA2AE4DDC0B174A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f0:0f:5c:fd:25:48:f7:54:37:ba:a3:70:db:
                    6b:92:1e:5b:69:3c:48:ad:ce:79:86:9e:be:ba:09:
                    95:48:44:98:d4:0f:6a:48:92:7d:c0:ab:04:85:09:
                    80:b5:17:5f:5e:bb:23:f1:85:c4:46:28:a1:81:b0:
                    0c:41:bd:ad:90:1c:37:34:57:46:2e:08:f4:54:00:
                    97:68:c7:86:37:d0:55:f1:5e:ed:58:20:ca:90:d4:
                    5a:ba:db:d1:44:ee:cf:32:37:72:5d:49:ae:ba:6f:
                    c4:c2:65:69:1a:7b:4e:59:5d:4d:4f:cb:f6:08:0a:
                    41:c5:50:2c:6f:02:98:4a:d0:3a:cd:99:60:3a:9c:
                    b3:97:88:1b:2d:f7:0a:0d:2b:0e:36:8f:dd:be:86:
                    f7:24:15:fa:3a:5e:f4:74:08:34:c3:ca:6d:10:8b:
                    09:e9:ec:f8:7d:df:9e:42:56:24:86:d3:79:a8:87:
                    cb:1c:a6:e4:a4:e5:e5:19:d6:56:02:97:3b:1c:c4:
                    ba:27:e9:bd:3e:d3:5d:82:3f:b5:aa:7d:52:f0:ba:
                    68:12:4a:f0:45:ec:6d:88:0e:3f:e5:82:36:b4:85:
                    6f:27:b0:e9:54:6a:4f:c8:d9:9e:cf:db:15:42:9c:
                    56:ac:8c:45:25:43:af:26:f0:54:38:7f:e3:2e:f4:
                    e4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:BE:A4:8F:D1:B0:D0:15:AE:5F:17:7B:9E:A2:AE:4D:DC:0B:17:4A
            X509v3 Authority Key Identifier:
                keyid:FE:15:2D:1B:1B:D5:63:AE:38:64:E7:38:A8:E6:52:CE:1F:2E:DB:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e38392e302f32342d3234203d3e20323633343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:2e:94:1f:c1:13:be:33:8c:18:2d:07:fc:c3:cc:a0:f8:71:
         25:b9:37:32:de:cd:d5:6e:9f:74:e0:89:15:6f:0d:e6:c8:58:
         a0:7c:cd:65:97:df:5e:03:22:8b:a4:1a:57:72:d8:bc:96:a3:
         a7:07:31:d3:1d:4b:67:fe:5f:84:86:77:f6:cf:19:35:0d:46:
         19:e9:71:5b:54:3a:eb:ed:1a:4e:ac:72:08:de:a6:e4:20:9e:
         3b:29:e4:28:ad:29:74:a1:7a:e2:16:a0:d2:55:07:ec:7e:39:
         ac:4d:27:64:fa:fe:57:24:78:47:94:8b:b3:de:a8:41:a2:8b:
         38:29:2c:a4:2c:14:5b:4b:c4:2c:9f:4b:80:f9:0b:26:b5:9f:
         88:55:54:65:5e:a0:b2:b1:36:eb:60:50:7e:06:43:8a:d5:91:
         b1:62:2f:c6:56:5d:45:98:14:f6:fe:af:17:cc:d8:75:7b:4c:
         5e:f8:93:8c:e1:65:0d:5d:79:5c:53:4c:97:06:6a:4b:74:4b:
         61:d4:a8:54:36:92:00:58:77:d8:6d:bc:47:27:0b:93:fa:b7:
         24:ac:a6:ab:43:d3:b6:9e:1e:ae:d5:74:76:17:25:2d:e0:7b:
         47:15:85:3f:81:9c:cf:1c:e5:34:89:63:ec:aa:af:dd:af:0f:
         45:36:78:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 13:12:10 2026 by rpki-client