Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e39322e302f32332d3233203d3e20323633343133.roa
File:                     3137392e39372e39322e302f32332d3233203d3e20323633343133.roa (raw, json)
Hash identifier:          kDjQFJ7hQjFIOFX4lHwkyA62m/QDdqW2FSFHRCbw9/I=
Subject key identifier:   CD:6C:D3:53:5D:A2:3B:32:66:8E:0C:57:55:3A:EA:D3:51:47:27:C0
Certificate issuer:       /CN=FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC
Certificate serial:       2BADA8BD2E8AF4AFE0981112FECEE9532BB8FFDF
Authority key identifier: FE:15:2D:1B:1B:D5:63:AE:38:64:E7:38:A8:E6:52:CE:1F:2E:DB:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e39322e302f32332d3233203d3e20323633343133.roa
Signing time:             Wed 29 Jul 2026 19:47:07 +0000
ROA not before:           Wed 29 Jul 2026 19:42:07 +0000
ROA not after:            Wed 28 Jul 2027 19:47:07 +0000
asID:                     263413
IP address blocks:        179.97.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.crl
                          rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 22:43:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:ad:a8:bd:2e:8a:f4:af:e0:98:11:12:fe:ce:e9:53:2b:b8:ff:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC
        Validity
            Not Before: Jul 29 19:42:07 2026 GMT
            Not After : Jul 28 19:47:07 2027 GMT
        Subject: CN=CD6CD3535DA23B32668E0C57553AEAD3514727C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b6:a3:b9:f5:76:45:a0:31:91:a7:e3:57:3d:
                    ff:4d:6b:5e:80:df:40:63:d9:1c:c3:53:8c:99:95:
                    82:32:54:1c:7d:72:2f:ee:90:14:a9:6b:8d:31:81:
                    3f:34:c0:15:50:82:3e:35:7b:3d:7b:dc:e6:47:2a:
                    54:7b:d8:a2:2a:44:93:6c:42:54:3d:2e:89:94:3b:
                    b0:79:6d:71:02:e1:44:29:00:13:26:a5:7c:be:af:
                    3f:f3:19:62:9a:ee:af:be:c2:cc:39:f1:a0:eb:6a:
                    12:2c:03:9f:2d:10:95:16:51:30:f5:db:d9:9b:22:
                    4b:af:f2:56:ae:b9:af:83:55:63:06:c8:6e:bf:3b:
                    23:59:48:9d:f5:6c:39:94:07:f7:66:15:7a:a4:16:
                    37:3c:6f:79:02:33:48:f1:1f:d8:d6:32:97:3d:6c:
                    1a:5c:63:69:d0:db:26:80:f6:9b:ea:87:fb:a2:88:
                    2d:fe:ec:0d:78:6d:74:ee:86:c4:9a:b7:0e:17:78:
                    db:54:38:e0:fb:be:ff:5c:2e:28:31:bd:8c:55:d5:
                    a2:b3:cd:1d:0d:52:80:57:42:9f:7a:9d:38:48:b3:
                    09:38:e0:fd:45:23:80:ff:73:37:7a:8c:2e:ce:42:
                    85:de:f8:6c:1d:1b:49:62:77:97:b2:75:4a:01:0a:
                    12:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:6C:D3:53:5D:A2:3B:32:66:8E:0C:57:55:3A:EA:D3:51:47:27:C0
            X509v3 Authority Key Identifier:
                keyid:FE:15:2D:1B:1B:D5:63:AE:38:64:E7:38:A8:E6:52:CE:1F:2E:DB:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e39322e302f32332d3233203d3e20323633343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:c0:a3:c6:ae:29:75:44:63:7e:19:e6:58:d2:c0:ac:9e:e2:
         ec:40:8c:e8:10:c3:41:b0:0c:17:c2:97:92:d3:7c:54:70:03:
         7d:25:2e:04:70:51:87:c8:78:2c:39:56:18:1d:1c:10:c5:a6:
         2d:1b:34:ee:b9:b8:d4:31:4a:bc:ed:65:a4:89:18:73:78:3f:
         6c:5b:4f:38:62:88:84:f9:8f:50:5f:75:0a:72:6d:3e:b5:4e:
         5a:c5:12:4c:a8:37:29:2f:88:9f:33:9d:3d:2e:8e:00:02:95:
         ea:2c:79:68:85:8d:6b:fb:1d:ba:fb:89:ad:7c:e6:5a:af:c3:
         7d:07:6b:05:34:e9:ed:57:8a:03:85:a4:42:09:e9:bc:77:f4:
         81:67:2d:98:2d:32:f6:ce:f3:df:66:b1:22:ad:af:cd:6b:61:
         91:3b:78:63:74:66:9d:14:fe:d2:f9:2f:13:b3:7f:41:c7:2d:
         f6:31:21:60:11:ca:33:63:85:71:96:28:f0:d9:11:f3:e9:f6:
         10:cb:fd:b2:27:fb:85:8e:d8:32:90:0e:21:93:db:a9:fa:83:
         14:0b:fb:5d:7e:2c:62:f6:6a:0d:7e:6b:b3:73:21:70:11:4c:
         1e:d5:29:27:90:50:93:1c:f3:48:1f:0c:87:e6:59:1e:e3:71:
         4f:76:f0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 09:14:52 2026 by rpki-client