Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e39312e302f32342d3234203d3e20323633343133.roa
File:                     3137392e39372e39312e302f32342d3234203d3e20323633343133.roa (raw, json)
Hash identifier:          f/BdAkg2tpEQQtzAS+gIDvyL4mwm9AF2MJc5lbmswhA=
Subject key identifier:   75:8E:E7:B1:86:2A:98:0B:46:B2:BD:E0:E9:C1:0F:0D:61:8E:A3:83
Certificate issuer:       /CN=FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC
Certificate serial:       72A0AA96307B05B676FDF2739832EC963789A371
Authority key identifier: FE:15:2D:1B:1B:D5:63:AE:38:64:E7:38:A8:E6:52:CE:1F:2E:DB:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e39312e302f32342d3234203d3e20323633343133.roa
Signing time:             Wed 27 Aug 2025 19:36:58 +0000
ROA not before:           Wed 27 Aug 2025 19:31:58 +0000
ROA not after:            Wed 26 Aug 2026 19:36:58 +0000
asID:                     263413
IP address blocks:        179.97.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.crl
                          rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 05:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:a0:aa:96:30:7b:05:b6:76:fd:f2:73:98:32:ec:96:37:89:a3:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC
        Validity
            Not Before: Aug 27 19:31:58 2025 GMT
            Not After : Aug 26 19:36:58 2026 GMT
        Subject: CN=758EE7B1862A980B46B2BDE0E9C10F0D618EA383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e9:0f:23:6d:67:02:ce:03:5a:57:8b:ca:8a:
                    eb:14:8b:30:2c:1e:ee:0d:78:25:16:6b:9a:3b:16:
                    8a:86:ff:f1:9d:e7:6b:82:5a:ce:3a:fc:3f:77:35:
                    4e:d8:20:3f:85:8f:f7:27:b1:4e:5c:69:be:df:d6:
                    fd:49:dd:95:1a:f5:3b:96:39:8b:f3:35:eb:97:1f:
                    8f:ed:5a:c9:fb:9e:90:7b:64:3b:71:c4:e3:85:98:
                    81:23:e9:ab:c9:67:12:92:a4:71:f0:cd:71:6a:69:
                    4f:fe:a3:7b:5f:88:19:9e:d6:69:30:18:bf:74:49:
                    f3:c6:2b:b1:c1:62:c3:6c:02:b3:80:49:5d:34:cd:
                    5b:72:f9:82:16:01:bf:3d:20:e6:bb:20:2e:27:8b:
                    bb:f3:96:91:39:44:7b:ab:47:2d:b2:49:6e:b4:e6:
                    71:15:85:a0:1d:3d:f7:32:b4:60:5d:b3:6d:95:4a:
                    50:b9:53:7b:a1:d8:a8:2c:42:f0:26:91:ed:4a:c0:
                    d7:cb:06:d6:43:46:a7:a8:04:60:21:ef:5a:0b:93:
                    c0:41:1a:f9:bb:07:90:46:b4:75:ea:c9:d2:49:b6:
                    5d:77:06:b0:56:e4:cb:aa:70:bc:47:34:4b:7b:dc:
                    3c:f1:05:3d:01:c9:40:9d:04:7f:24:b0:a7:46:84:
                    65:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:8E:E7:B1:86:2A:98:0B:46:B2:BD:E0:E9:C1:0F:0D:61:8E:A3:83
            X509v3 Authority Key Identifier:
                keyid:FE:15:2D:1B:1B:D5:63:AE:38:64:E7:38:A8:E6:52:CE:1F:2E:DB:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e39312e302f32342d3234203d3e20323633343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:75:8a:6a:37:f8:3d:b2:4c:fe:75:12:c1:38:b0:2e:4a:2a:
         e9:2f:28:5d:aa:9d:f1:84:8c:4e:19:ca:7c:4d:46:1a:b8:76:
         fe:a3:06:1d:db:f9:a7:7d:61:ae:53:87:1c:ae:aa:e4:4d:84:
         7a:fd:69:dc:4d:c7:41:e1:53:f2:83:13:3a:50:b9:e7:a7:1f:
         eb:1c:31:3a:54:a0:90:5c:35:71:9d:bf:78:da:3b:7c:3a:24:
         b2:66:c1:25:d9:3d:c2:fa:7b:49:8e:0c:e6:4c:db:73:04:6e:
         90:59:98:f5:ce:31:4e:9d:b3:31:4e:0f:11:7c:f5:8d:66:77:
         21:7c:6e:4f:59:d8:c5:90:87:ea:b4:b5:a3:eb:ef:15:8e:08:
         7b:d1:67:4f:bf:65:7b:e4:1e:f3:06:be:03:a1:0a:48:4e:df:
         93:fe:ae:b6:42:60:87:2d:9b:ec:90:9e:3b:97:00:19:ff:61:
         b2:a4:52:5c:44:54:10:24:0b:1d:4c:52:52:f2:40:f2:a8:b7:
         b8:d4:4a:fb:8b:59:aa:b6:30:73:f2:49:70:8d:ed:34:a0:2b:
         30:0b:ed:9f:4f:4e:f3:85:b2:ac:06:6a:4c:94:7e:f2:e1:21:
         50:12:e4:8c:56:16:1e:c4:ab:b0:2c:37:6d:9a:73:bd:be:f3:
         f8:5c:0a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 19:09:47 2025 by rpki-client