Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e39322e302f32332d3233203d3e20323633343133.roa
File:                     3137392e39372e39322e302f32332d3233203d3e20323633343133.roa (raw, json)
Hash identifier:          Z2uhmEXEyiWgre6EA8NXsNp25u3k2q03ZAYNyEDjUnc=
Subject key identifier:   1A:AB:E1:28:52:1D:9E:99:90:A6:0C:44:DB:4C:6B:BC:26:CE:62:18
Certificate issuer:       /CN=FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC
Certificate serial:       3FD0E98164180131F1A84AD469A8DC5426BDB5C0
Authority key identifier: FE:15:2D:1B:1B:D5:63:AE:38:64:E7:38:A8:E6:52:CE:1F:2E:DB:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e39322e302f32332d3233203d3e20323633343133.roa
Signing time:             Wed 27 Aug 2025 19:37:00 +0000
ROA not before:           Wed 27 Aug 2025 19:32:00 +0000
ROA not after:            Wed 26 Aug 2026 19:37:00 +0000
asID:                     263413
IP address blocks:        179.97.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.crl
                          rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 05:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:d0:e9:81:64:18:01:31:f1:a8:4a:d4:69:a8:dc:54:26:bd:b5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC
        Validity
            Not Before: Aug 27 19:32:00 2025 GMT
            Not After : Aug 26 19:37:00 2026 GMT
        Subject: CN=1AABE128521D9E9990A60C44DB4C6BBC26CE6218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cf:b1:1c:55:9c:2f:d5:7c:90:ba:21:1e:41:
                    77:6b:fe:29:ff:c5:2f:f9:0b:5a:12:f2:cc:05:44:
                    3e:27:f4:d7:89:ea:26:ea:34:24:a5:93:58:2e:a0:
                    dd:b2:10:5c:72:3d:cf:ce:78:8d:8b:6c:4e:5f:92:
                    fc:e6:09:bc:9f:1b:29:67:0d:fd:ba:f6:c8:ca:fb:
                    05:59:94:81:51:bb:a9:ff:0d:a6:0a:45:9b:8d:91:
                    6a:4a:58:4e:7c:e2:30:07:9d:90:5e:0d:35:7e:fe:
                    a0:3e:84:f9:58:63:80:9a:90:e0:09:08:fb:dd:fe:
                    6f:7e:da:24:63:d9:29:43:96:0b:41:12:6c:49:2e:
                    84:c1:01:d8:6b:69:17:34:2f:6a:b4:e1:c3:2b:b7:
                    d3:fb:be:30:0e:08:37:69:6a:eb:03:2e:8a:bf:f5:
                    65:5e:d9:42:88:8a:58:fa:f3:ab:2e:48:ce:96:e1:
                    62:f4:e3:d5:6f:78:43:c0:e8:cb:19:52:a5:ce:1c:
                    33:a8:ae:c4:cb:f4:3b:f0:8e:74:be:d1:50:83:c8:
                    c4:20:9c:28:b4:e9:a0:96:ac:86:07:1e:75:f7:4e:
                    39:67:43:49:bf:89:7f:af:b5:d7:ee:e2:29:66:1a:
                    9e:51:75:7a:1a:d5:3e:ee:38:4f:e9:f0:1a:dc:b7:
                    4f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:AB:E1:28:52:1D:9E:99:90:A6:0C:44:DB:4C:6B:BC:26:CE:62:18
            X509v3 Authority Key Identifier:
                keyid:FE:15:2D:1B:1B:D5:63:AE:38:64:E7:38:A8:E6:52:CE:1F:2E:DB:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e39322e302f32332d3233203d3e20323633343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:bf:20:b9:17:34:82:f5:c7:72:fa:3f:6b:af:1f:ac:87:79:
         49:71:ac:bc:bc:85:5a:64:f9:34:fe:79:8e:22:e5:32:f8:ad:
         b5:fe:af:5c:e4:fc:d8:aa:c4:fa:ec:8d:6a:5e:d2:79:00:b8:
         77:8a:6b:10:29:10:d1:4e:d1:a1:dc:43:0b:d8:28:12:71:4c:
         df:fd:76:2c:2c:f8:49:ca:c6:03:d8:66:b5:85:07:44:88:5c:
         65:94:55:d0:72:24:c7:2f:60:90:54:f6:c3:03:bb:51:44:ab:
         8a:c1:10:04:be:22:ed:ec:62:1e:09:6a:9c:c4:74:fa:9f:a8:
         02:60:17:e9:50:25:95:50:a3:a6:21:3f:76:25:23:0c:be:86:
         6e:8f:9a:7d:c3:05:84:84:33:8f:da:44:fa:e4:a4:7f:05:15:
         1e:c6:7b:86:7e:4e:da:49:bd:6b:5f:51:9d:c2:10:3d:d5:bf:
         82:1c:95:65:e4:26:11:cf:e0:bb:11:86:41:4c:2e:97:67:d7:
         f7:28:23:56:af:7d:57:79:77:8b:c0:b8:93:21:60:51:d0:f4:
         d7:11:0f:c3:29:d7:83:15:b9:74:2b:e8:2c:1c:4f:1b:02:8f:
         d4:68:4d:9f:f1:7a:7c:f5:3a:de:15:a7:99:a1:d4:bc:a6:80:
         d2:c2:f7:76
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUP9DpgWQYATHxqErUaajcVCa9tcAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkUxNTJEMUIxQkQ1NjNBRTM4NjRFNzM4QThFNjUyQ0Ux
RjJFREJDQzAeFw0yNTA4MjcxOTMyMDBaFw0yNjA4MjYxOTM3MDBaMDMxMTAvBgNV
BAMTKDFBQUJFMTI4NTIxRDlFOTk5MEE2MEM0NERCNEM2QkJDMjZDRTYyMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwz7EcVZwv1XyQuiEeQXdr/in/
xS/5C1oS8swFRD4n9NeJ6ibqNCSlk1guoN2yEFxyPc/OeI2LbE5fkvzmCbyfGyln
Df269sjK+wVZlIFRu6n/DaYKRZuNkWpKWE584jAHnZBeDTV+/qA+hPlYY4CakOAJ
CPvd/m9+2iRj2SlDlgtBEmxJLoTBAdhraRc0L2q04cMrt9P7vjAOCDdpausDLoq/
9WVe2UKIilj686suSM6W4WL049VveEPA6MsZUqXOHDOorsTL9DvwjnS+0VCDyMQg
nCi06aCWrIYHHnX3TjlnQ0m/iX+vtdfu4ilmGp5RdXoa1T7uOE/p8Brct09lAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUGqvhKFIdnpmQpgxE20xrvCbOYhgwHwYDVR0j
BBgwFoAU/hUtGxvVY644ZOc4qOZSzh8u28wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVNGM0VMenpiQk5XMmIxdWY2R0s4YzVvU0dRQXR4SFhDUW9OWm52QmFy
UUUvMC9GRTE1MkQxQjFCRDU2M0FFMzg2NEU3MzhBOEU2NTJDRTFGMkVEQkNDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZFMTUyRDFCMUJENTYzQUUz
ODY0RTczOEE4RTY1MkNFMUYyRURCQ0MuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlTRjNFTHp6YkJOVzJiMXVmNkdLOGM1b1NHUUF0eEhYQ1FvTlpudkJhclFFLzAv
MzEzNzM5MmUzOTM3MmUzOTMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMz
MzQzMTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBs2FcMA0GCSqGSIb3DQEBCwUAA4IBAQAcvyC5FzSC
9cdy+j9rrx+sh3lJcay8vIVaZPk0/nmOIuUy+K21/q9c5PzYqsT67I1qXtJ5ALh3
imsQKRDRTtGh3EML2CgScUzf/XYsLPhJysYD2Ga1hQdEiFxllFXQciTHL2CQVPbD
A7tRRKuKwRAEviLt7GIeCWqcxHT6n6gCYBfpUCWVUKOmIT92JSMMvoZuj5p9wwWE
hDOP2kT65KR/BRUexnuGfk7aSb1rX1GdwhA91b+CHJVl5CYRz+C7EYZBTC6XZ9f3
KCNWr31XeXeLwLiTIWBR0PTXEQ/DKdeDFbl0K+gsHE8bAo/UaE2f8Xp89TreFaeZ
odS8poDSwvd2
-----END CERTIFICATE-----
Generated at Thu Sep 18 13:18:29 2025 by rpki-client