Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e39342e302f32342d3234203d3e20323633343133.roa
File:                     3137392e39372e39342e302f32342d3234203d3e20323633343133.roa (raw, json)
Hash identifier:          YZAw5vp5aYPc/Pg+4sItQywNC0/lvarCsg+BCBZ68D0=
Subject key identifier:   1A:32:ED:2E:2C:44:2C:FF:B8:1C:DC:43:5F:2E:1C:B4:A3:33:1C:92
Certificate issuer:       /CN=FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC
Certificate serial:       7DB8EB09F8DDEDFF317AA06616CDAC3F99ED1C9D
Authority key identifier: FE:15:2D:1B:1B:D5:63:AE:38:64:E7:38:A8:E6:52:CE:1F:2E:DB:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e39342e302f32342d3234203d3e20323633343133.roa
Signing time:             Wed 27 Aug 2025 19:37:01 +0000
ROA not before:           Wed 27 Aug 2025 19:32:01 +0000
ROA not after:            Wed 26 Aug 2026 19:37:01 +0000
asID:                     263413
IP address blocks:        179.97.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.crl
                          rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 22:06:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:b8:eb:09:f8:dd:ed:ff:31:7a:a0:66:16:cd:ac:3f:99:ed:1c:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC
        Validity
            Not Before: Aug 27 19:32:01 2025 GMT
            Not After : Aug 26 19:37:01 2026 GMT
        Subject: CN=1A32ED2E2C442CFFB81CDC435F2E1CB4A3331C92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d0:48:7d:a3:ab:94:b4:2e:c2:c5:09:58:09:
                    0a:c9:8e:0f:e8:07:15:c9:47:9b:31:3a:9c:03:9e:
                    25:dc:b0:0b:9c:4f:1b:8c:16:26:a8:e5:fd:d5:56:
                    a5:e7:d3:1c:ed:e2:c9:18:c1:ac:83:a1:41:67:60:
                    55:98:f4:49:10:31:cd:b9:c8:60:44:ff:43:fc:98:
                    e4:34:c4:4b:e3:72:1e:74:fe:6b:84:00:71:d7:98:
                    63:45:21:ea:2f:f3:92:06:68:50:1d:7c:d7:bb:d6:
                    03:f8:45:54:14:22:bc:69:94:ea:c5:84:77:48:40:
                    1c:bc:57:f1:1b:d1:86:c5:63:b8:37:db:d6:ff:90:
                    9e:b1:60:1e:07:3b:24:89:3c:35:70:7e:92:c6:e4:
                    63:18:91:7e:4f:8f:84:7a:60:2d:84:c7:71:85:70:
                    40:46:70:64:15:8e:da:d2:a5:a5:86:71:8d:7a:a8:
                    88:d5:70:bd:fe:8b:a9:f1:4b:03:b6:54:6a:1b:bd:
                    94:0b:b6:8b:4a:da:77:77:e7:5a:a6:69:bb:be:c2:
                    35:d5:45:4a:0b:07:a5:f4:e7:89:6d:a5:1e:31:36:
                    5e:56:17:cf:28:8c:41:df:06:5e:3f:d3:34:14:02:
                    34:94:34:7a:c9:bf:cc:26:d5:a4:4b:92:43:ac:5c:
                    1a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:32:ED:2E:2C:44:2C:FF:B8:1C:DC:43:5F:2E:1C:B4:A3:33:1C:92
            X509v3 Authority Key Identifier:
                keyid:FE:15:2D:1B:1B:D5:63:AE:38:64:E7:38:A8:E6:52:CE:1F:2E:DB:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e39342e302f32342d3234203d3e20323633343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:57:6a:27:67:92:de:84:1c:02:67:5c:d8:38:06:18:37:17:
         16:df:88:41:27:49:3e:3f:fb:f6:7b:57:20:a9:cc:48:76:df:
         5a:0f:19:47:40:27:00:ec:8b:b0:39:43:c0:8a:95:95:f2:65:
         f5:e1:14:a8:fc:18:41:a2:37:db:28:0b:4d:9d:60:35:cc:52:
         ce:f4:3f:ff:b8:c8:3d:ad:35:3e:39:5e:76:fc:5b:a9:d2:5e:
         5e:da:db:5d:90:4f:b4:31:b2:c8:6a:12:30:87:42:3b:a8:2d:
         64:1e:a5:1d:75:1f:80:a2:b2:40:63:0d:6a:f3:11:10:f3:1d:
         e4:67:78:48:07:ad:5c:03:a5:db:b6:a9:c7:9f:ca:92:0a:3f:
         28:79:4d:bb:02:d1:79:5e:cd:35:b8:73:40:f1:f2:e8:e1:d5:
         6a:12:f5:d2:67:de:64:dd:f6:66:71:fc:9a:1b:f1:8a:09:8e:
         58:07:cc:c5:f9:83:39:ed:54:f8:d5:51:78:ae:a0:e6:01:82:
         03:07:b3:e6:92:93:38:0b:c2:30:32:1b:31:ad:f6:c3:1f:46:
         4b:0f:3c:c7:4c:3e:1a:ed:cb:90:10:63:53:8b:51:a8:53:b8:
         dd:4d:4c:f7:e8:57:8a:2d:52:c0:ea:0b:1d:b5:56:26:7a:4e:
         d1:4e:cc:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 07:47:08 2025 by rpki-client