Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e39322e302f32322d3232203d3e20323633343133.roa
File:                     3137392e39372e39322e302f32322d3232203d3e20323633343133.roa (raw, json)
Hash identifier:          RIVJC3dLslAjoB5utF0MmmCzRYD+JvljnOq2ZEFoM1c=
Subject key identifier:   B0:DC:19:70:E4:D6:CA:57:5A:61:2A:AB:63:E7:0D:23:25:A0:D7:65
Certificate issuer:       /CN=FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC
Certificate serial:       0CA53EF0973AA840B589BFDFCB7A61CCBB14E4EC
Authority key identifier: FE:15:2D:1B:1B:D5:63:AE:38:64:E7:38:A8:E6:52:CE:1F:2E:DB:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e39322e302f32322d3232203d3e20323633343133.roa
Signing time:             Wed 27 Aug 2025 19:36:59 +0000
ROA not before:           Wed 27 Aug 2025 19:31:59 +0000
ROA not after:            Wed 26 Aug 2026 19:36:59 +0000
asID:                     263413
IP address blocks:        179.97.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.crl
                          rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 05:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:a5:3e:f0:97:3a:a8:40:b5:89:bf:df:cb:7a:61:cc:bb:14:e4:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC
        Validity
            Not Before: Aug 27 19:31:59 2025 GMT
            Not After : Aug 26 19:36:59 2026 GMT
        Subject: CN=B0DC1970E4D6CA575A612AAB63E70D2325A0D765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:43:f2:a5:d1:9f:e3:8e:c2:b6:5f:2b:c8:d9:
                    84:57:b4:24:eb:99:5c:44:e6:06:38:8e:b5:ca:c3:
                    f9:ea:94:b6:e1:19:63:db:13:c2:db:1c:0d:58:f6:
                    7b:d4:71:03:39:f1:81:df:8e:ec:7e:a1:7e:5b:99:
                    50:de:49:02:5c:95:76:04:0d:6c:ce:08:83:f2:21:
                    9a:e9:1b:22:64:7b:06:a6:51:b5:7c:cc:ab:ee:ce:
                    7b:1e:09:6d:d0:e1:eb:1f:89:20:d3:7c:2f:0e:38:
                    10:8d:c7:ee:38:f0:41:57:3c:8c:f2:e5:e1:9e:6a:
                    b8:e2:6d:78:c3:8d:ba:47:91:c6:14:cf:59:25:36:
                    c6:64:5b:f2:35:2e:53:e6:1e:66:34:f3:8f:56:31:
                    c6:65:aa:9c:48:b8:4a:e1:bb:55:c1:04:af:d2:82:
                    aa:16:4e:38:60:39:ff:5b:0b:4f:5f:58:ae:d8:ab:
                    63:c3:c4:de:5f:55:4a:82:3b:3e:13:f8:ad:a5:0b:
                    6b:19:ea:50:ee:76:4f:e2:19:38:3b:97:80:e1:27:
                    be:1a:e5:7f:97:0a:90:9e:59:60:82:0d:83:f0:1e:
                    3b:d3:69:cc:36:c4:36:72:1a:2b:f5:08:34:09:9c:
                    64:64:3f:83:52:5e:ea:7a:2e:01:c7:e0:5d:f3:35:
                    83:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:DC:19:70:E4:D6:CA:57:5A:61:2A:AB:63:E7:0D:23:25:A0:D7:65
            X509v3 Authority Key Identifier:
                keyid:FE:15:2D:1B:1B:D5:63:AE:38:64:E7:38:A8:E6:52:CE:1F:2E:DB:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e39322e302f32322d3232203d3e20323633343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:e0:f4:21:40:ae:0b:61:a7:e3:d6:3f:5d:8a:a9:cd:3a:8c:
         0d:18:61:ef:41:f3:67:de:05:d6:2f:3f:a4:c6:30:4e:9f:c1:
         4a:66:66:d3:32:5a:ea:e6:44:97:cf:65:43:6e:97:de:41:c4:
         db:7e:e9:48:11:cc:da:7a:37:ff:b9:7a:66:e1:83:6d:26:85:
         b8:59:f2:dd:64:76:a0:0b:4a:88:21:a7:09:c5:6a:64:5c:1e:
         90:16:14:db:1d:0e:c0:75:19:5e:fc:bc:29:f8:5b:90:57:b4:
         e9:68:1b:25:0d:0f:46:07:5e:19:99:ce:3b:f6:4f:46:f1:e7:
         3f:20:52:dd:48:ba:bd:46:69:fb:85:07:6f:23:ac:ac:39:7c:
         cf:dc:56:97:94:65:9c:39:3e:09:46:9c:88:2c:41:c1:bb:a3:
         d8:e3:15:e9:9e:cc:e6:08:22:d9:7c:8b:70:ee:a9:68:0b:67:
         4a:d2:1b:95:3b:e3:f1:85:88:05:fc:d4:78:88:71:67:23:01:
         c8:58:2a:b4:32:12:b8:48:4f:c3:a1:42:9a:67:2a:66:32:7e:
         c0:13:79:c2:01:45:02:c3:c2:14:58:05:c3:c5:27:9d:70:36:
         fc:18:96:6b:b1:0f:0a:f4:c8:3e:ff:f9:fc:c4:ca:04:c2:f7:
         37:4b:4f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 11:57:30 2025 by rpki-client