Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e39302e302f32342d3234203d3e20323633343133.roa
File:                     3137392e39372e39302e302f32342d3234203d3e20323633343133.roa (raw, json)
Hash identifier:          jQqlzPsavUoh6qDitZlCP4wkj1+92XyykdRQCqIl4fY=
Subject key identifier:   FB:2C:87:42:E8:87:94:04:AA:1A:B9:0B:53:42:5D:43:B6:FF:EE:63
Certificate issuer:       /CN=FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC
Certificate serial:       2BE670EAA7FB70E1FFD655E73AEBCC1DA0204515
Authority key identifier: FE:15:2D:1B:1B:D5:63:AE:38:64:E7:38:A8:E6:52:CE:1F:2E:DB:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e39302e302f32342d3234203d3e20323633343133.roa
Signing time:             Wed 27 Aug 2025 19:36:58 +0000
ROA not before:           Wed 27 Aug 2025 19:31:58 +0000
ROA not after:            Wed 26 Aug 2026 19:36:58 +0000
asID:                     263413
IP address blocks:        179.97.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.crl
                          rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 05:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:e6:70:ea:a7:fb:70:e1:ff:d6:55:e7:3a:eb:cc:1d:a0:20:45:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC
        Validity
            Not Before: Aug 27 19:31:58 2025 GMT
            Not After : Aug 26 19:36:58 2026 GMT
        Subject: CN=FB2C8742E8879404AA1AB90B53425D43B6FFEE63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1a:e3:a4:8a:c0:60:3d:9f:16:02:52:a8:b2:
                    c0:ac:55:61:e5:08:de:d5:55:2d:ef:d5:84:0e:05:
                    fa:1e:00:7d:85:0f:7e:49:d0:0d:0b:07:2a:d8:c9:
                    48:78:6a:02:dc:76:35:e1:34:4e:ea:09:b2:f2:1e:
                    a9:4b:f3:09:b3:dd:f3:23:c2:c4:0a:c1:ab:99:b8:
                    27:6a:3c:a0:05:4d:03:c7:42:8b:8d:3c:11:de:b6:
                    42:96:dd:cd:35:ae:9d:e5:bb:f5:df:fb:ce:6f:99:
                    3b:36:3a:f3:31:e4:05:89:d6:0b:e6:f3:98:c8:db:
                    70:63:84:64:cc:95:3e:93:d3:fa:05:2d:a1:2e:fd:
                    59:d6:3b:1a:c1:50:7b:d3:35:28:a3:fa:69:dc:8f:
                    08:06:a6:a9:b8:37:37:f8:d6:a3:2c:c9:9e:88:dc:
                    2c:6b:05:ed:5d:29:3b:04:85:04:c7:06:21:62:a1:
                    23:ab:fb:d3:72:02:79:ae:db:1d:13:f7:4c:41:a3:
                    0a:93:a4:2b:d8:4b:c6:5d:b8:d4:17:45:dd:12:8d:
                    42:a0:6b:02:3e:32:d3:2d:f3:91:79:ae:62:cf:0c:
                    c8:72:e6:79:18:cd:e7:25:b7:19:61:d7:16:48:e1:
                    b4:d6:4d:9e:ad:7e:7a:0f:5e:75:1c:6a:2d:65:14:
                    f9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:2C:87:42:E8:87:94:04:AA:1A:B9:0B:53:42:5D:43:B6:FF:EE:63
            X509v3 Authority Key Identifier:
                keyid:FE:15:2D:1B:1B:D5:63:AE:38:64:E7:38:A8:E6:52:CE:1F:2E:DB:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e39302e302f32342d3234203d3e20323633343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:4d:29:42:8d:39:41:2b:9c:a0:84:6b:55:2e:23:54:68:47:
         7a:f2:b7:6e:e2:14:93:31:a4:01:63:31:7a:c2:54:ee:b6:e8:
         49:de:65:9a:92:18:02:fe:3b:f5:f6:26:32:1d:10:1d:ca:d1:
         78:95:ee:1a:3e:fc:06:e3:8a:75:49:00:9a:07:7a:05:65:48:
         7f:7f:fd:4a:f1:b1:e5:17:51:5c:36:bf:0c:ec:ce:df:70:a4:
         a5:0d:c8:f1:8a:4f:32:eb:c3:03:b7:fd:dc:f4:2a:97:12:d8:
         a1:49:cd:f4:d3:3f:1e:af:2d:4c:fb:46:30:80:65:78:ff:ad:
         2a:79:ac:a3:55:73:43:bb:fc:99:2e:ca:28:4d:d3:05:c6:03:
         2d:27:e0:29:e4:e4:97:07:b1:9c:6e:96:ad:82:e1:b5:08:06:
         b0:ab:80:1d:7a:54:a1:f5:99:83:4d:08:7f:9d:bb:87:56:48:
         bf:67:16:2f:47:a7:35:2c:d1:bd:5c:9a:0c:61:9e:2c:3d:45:
         25:4d:69:37:71:9a:9b:67:42:ea:6a:af:0d:64:d5:2c:23:8e:
         ee:f9:7e:04:c8:24:c2:53:17:5f:f2:aa:62:24:fe:55:0a:1b:
         84:76:b6:c3:23:9b:48:44:e9:96:2b:ad:9a:78:8b:1a:fe:d6:
         34:95:1c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 17:54:54 2025 by rpki-client