Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e39322e302f32342d3234203d3e20323633343133.roa
File:                     3137392e39372e39322e302f32342d3234203d3e20323633343133.roa (raw, json)
Hash identifier:          290rLQq/EX7kAQlmyxoSbF+zD1JFKSIzR8w4Zm7wmYs=
Subject key identifier:   05:5F:75:7A:ED:58:1D:69:B2:FB:FB:67:C9:00:16:F4:4E:B6:17:46
Certificate issuer:       /CN=FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC
Certificate serial:       457CF36720B2DB59FA51D6D6EC876FE899F55014
Authority key identifier: FE:15:2D:1B:1B:D5:63:AE:38:64:E7:38:A8:E6:52:CE:1F:2E:DB:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e39322e302f32342d3234203d3e20323633343133.roa
Signing time:             Wed 27 Aug 2025 19:37:00 +0000
ROA not before:           Wed 27 Aug 2025 19:32:00 +0000
ROA not after:            Wed 26 Aug 2026 19:37:00 +0000
asID:                     263413
IP address blocks:        179.97.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.crl
                          rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 22:06:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:7c:f3:67:20:b2:db:59:fa:51:d6:d6:ec:87:6f:e8:99:f5:50:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC
        Validity
            Not Before: Aug 27 19:32:00 2025 GMT
            Not After : Aug 26 19:37:00 2026 GMT
        Subject: CN=055F757AED581D69B2FBFB67C90016F44EB61746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:2c:08:ed:87:1f:21:c6:08:f8:13:0b:02:7b:
                    1b:2e:1d:bd:6a:81:5c:e4:d0:ec:21:dd:e8:e5:2d:
                    19:f4:bc:86:7c:6c:e8:ca:fc:2a:1e:82:4e:d2:d0:
                    87:fb:5e:e0:2a:ff:04:3e:42:2e:76:4a:0f:17:46:
                    37:9b:67:e3:4a:fc:9c:7f:19:26:82:23:99:1c:c8:
                    f2:e6:94:75:c9:45:a5:b0:9a:7f:09:3a:aa:b3:a7:
                    6e:74:f4:21:c1:14:a2:32:7d:dc:12:97:02:38:6a:
                    7d:8a:b9:0f:7e:78:d4:3a:db:94:94:bc:f2:d0:f9:
                    90:89:3c:8e:7a:0e:04:07:eb:46:2e:04:f7:cc:12:
                    0f:fe:9e:8d:5e:6e:46:bc:33:f8:f2:ee:bf:45:c2:
                    cd:e1:e7:22:10:ab:b7:4c:d4:15:7e:4c:63:8c:8c:
                    a8:1e:f0:10:62:20:50:45:95:14:fa:72:29:25:01:
                    d2:dd:72:f6:ac:07:36:cf:1f:0f:64:45:d7:bd:51:
                    01:32:54:4b:45:5d:f7:64:c9:b5:b1:4f:99:6c:d8:
                    68:16:72:5d:dd:7b:aa:eb:c4:98:39:4a:e1:bc:89:
                    fd:6a:d9:14:5f:60:6e:82:53:37:62:ff:25:dd:6d:
                    42:9a:22:c0:33:a7:4e:4b:16:bb:04:32:52:82:72:
                    c8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:5F:75:7A:ED:58:1D:69:B2:FB:FB:67:C9:00:16:F4:4E:B6:17:46
            X509v3 Authority Key Identifier:
                keyid:FE:15:2D:1B:1B:D5:63:AE:38:64:E7:38:A8:E6:52:CE:1F:2E:DB:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e39322e302f32342d3234203d3e20323633343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:5c:65:16:b9:dc:34:f2:35:ea:4c:ff:8a:e8:c5:af:4f:df:
         6c:0c:3c:b6:45:42:cd:6a:05:d5:a6:36:b9:a2:b8:ac:f0:70:
         02:4a:d9:2d:62:56:6a:8e:62:85:22:a6:fd:11:45:8d:0f:1a:
         38:a9:c6:a6:61:ef:ac:3d:07:0d:07:ce:30:63:d8:07:fb:c9:
         80:57:92:a4:7c:e7:3d:b7:5b:ed:09:00:dd:f1:98:b2:f7:2d:
         48:fc:90:05:6b:da:fa:2e:a5:d9:ec:bc:d8:c8:42:93:7a:0d:
         97:7e:da:51:f4:a6:f6:7a:a3:71:4c:0b:7b:bf:e1:97:7e:85:
         4e:2b:c8:c7:94:d3:d5:e0:f4:04:a0:86:25:2c:ec:df:b6:8c:
         74:5b:a2:2a:53:d0:51:eb:48:cf:9c:3a:54:4d:76:80:cb:84:
         8f:fd:52:55:cf:48:6c:d9:ac:d8:7a:19:ff:cf:60:9b:42:c7:
         78:fb:a4:57:5b:23:44:ea:e4:45:bd:37:7d:fe:7e:88:92:af:
         13:cd:1a:6c:7e:38:43:f5:18:a0:f4:69:c0:4f:f9:fb:7c:e5:
         6e:8d:84:ea:be:26:4d:69:30:18:ec:7f:a8:f5:1d:13:95:42:
         7c:85:05:cb:88:e2:f5:01:80:81:ce:ce:06:f1:b2:ef:18:6c:
         8c:ea:a3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:30:12 2025 by rpki-client