Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e39332e302f32342d3234203d3e20323633343133.roa
File:                     3137392e39372e39332e302f32342d3234203d3e20323633343133.roa (raw, json)
Hash identifier:          yviY6pi0bVj+31/HyEdIAGe5ZhraM6R1thNXVu2l9RA=
Subject key identifier:   E9:AE:DB:EC:42:67:4E:84:88:3A:F3:EE:03:35:36:EB:3B:12:25:3A
Certificate issuer:       /CN=FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC
Certificate serial:       54AF92CE2717CFCFCE714BC4EE6C90CB2E33BA23
Authority key identifier: FE:15:2D:1B:1B:D5:63:AE:38:64:E7:38:A8:E6:52:CE:1F:2E:DB:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e39332e302f32342d3234203d3e20323633343133.roa
Signing time:             Wed 27 Aug 2025 19:36:58 +0000
ROA not before:           Wed 27 Aug 2025 19:31:58 +0000
ROA not after:            Wed 26 Aug 2026 19:36:58 +0000
asID:                     263413
IP address blocks:        179.97.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.crl
                          rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 05:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:af:92:ce:27:17:cf:cf:ce:71:4b:c4:ee:6c:90:cb:2e:33:ba:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC
        Validity
            Not Before: Aug 27 19:31:58 2025 GMT
            Not After : Aug 26 19:36:58 2026 GMT
        Subject: CN=E9AEDBEC42674E84883AF3EE033536EB3B12253A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cf:6f:b0:53:dc:79:cf:0c:05:2f:3e:13:1e:
                    70:29:7e:df:24:9b:e9:34:78:a3:c7:f8:a1:60:b4:
                    ff:34:7f:1f:c4:ed:12:fe:ee:56:d8:13:99:70:1a:
                    6e:07:c8:f6:2d:ed:5e:4e:57:f8:1f:99:4a:4d:70:
                    ef:16:01:3c:98:44:68:db:dd:c9:2d:55:ea:a4:7d:
                    23:4c:c9:f1:ad:e2:e4:95:22:7b:63:a0:dc:ee:34:
                    9e:3e:c6:4f:ef:8e:b8:94:9b:ee:90:89:41:b1:d9:
                    56:db:a9:96:0d:03:58:1e:df:a3:63:86:e8:87:08:
                    23:84:c9:13:5b:22:ec:8f:ce:b4:3d:6e:89:eb:d7:
                    6e:81:cb:73:e3:d0:b5:8c:0a:eb:c7:d6:b8:c0:35:
                    dd:39:e9:fd:65:7c:a1:e9:c6:99:0a:0a:76:5d:a4:
                    6f:2d:d9:d4:1d:ed:11:7f:01:78:c0:e8:af:9a:b0:
                    0e:df:18:e2:b2:46:e4:64:0b:7f:03:35:33:52:50:
                    02:3a:d4:6e:a5:d9:6d:82:7f:e7:90:04:54:3f:bb:
                    b3:f6:1d:13:35:0c:29:18:b9:55:2c:95:e7:b5:04:
                    4e:6e:3b:a3:51:1e:d7:87:ad:7c:8d:cf:03:fc:fd:
                    f0:f2:6f:35:90:90:12:67:65:a8:c1:4f:ae:a5:63:
                    27:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:AE:DB:EC:42:67:4E:84:88:3A:F3:EE:03:35:36:EB:3B:12:25:3A
            X509v3 Authority Key Identifier:
                keyid:FE:15:2D:1B:1B:D5:63:AE:38:64:E7:38:A8:E6:52:CE:1F:2E:DB:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e39332e302f32342d3234203d3e20323633343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:7e:76:ab:cc:f0:d3:24:32:7b:be:5e:50:ad:22:dc:c5:df:
         bb:10:0c:37:b1:3d:90:30:8b:54:5e:8a:00:c1:b1:78:04:50:
         e1:5d:93:8a:15:6c:dd:75:58:4e:99:c2:f7:eb:1a:99:8e:aa:
         bc:02:a3:c2:1f:bd:5e:4e:42:43:3a:5e:2a:5d:63:5e:32:02:
         d2:e3:eb:f8:fa:7b:ff:ee:76:56:86:a7:7f:87:02:cd:fb:59:
         3a:30:c2:3f:8f:b4:c7:20:e3:ec:00:25:30:45:3d:14:a1:cb:
         43:82:70:79:c4:f2:f7:3a:20:c8:3c:a4:eb:cc:de:c4:a2:c5:
         51:50:1d:02:14:ae:d7:0d:8f:70:f8:32:55:e3:34:1e:92:7c:
         f7:76:ee:fe:f1:f1:81:31:be:f2:f8:25:c1:e9:c3:11:c9:48:
         cd:9d:fe:c0:a7:53:e3:39:36:2f:7b:18:75:0e:12:0e:1c:d9:
         35:d8:93:a2:68:50:dd:27:22:3a:b5:12:d8:aa:58:bb:a0:69:
         96:d6:88:6b:13:79:61:f4:54:95:0f:0f:1a:02:b5:18:6d:6c:
         bc:74:bb:00:f2:80:0d:b7:66:95:03:3e:f0:22:fa:76:46:d5:
         c6:de:62:7b:87:e8:f1:65:9d:9b:c6:ec:de:b0:f3:73:f6:f2:
         d6:03:73:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 21:03:06 2025 by rpki-client