Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e39352e302f32342d3234203d3e20323633343133.roa
File:                     3137392e39372e39352e302f32342d3234203d3e20323633343133.roa (raw, json)
Hash identifier:          egbPmDFBNYCcoSE7JNPo/8TqR5sqYHQocW4QDcAwZUs=
Subject key identifier:   75:63:2D:49:20:F8:D4:65:0F:58:1F:DA:CC:82:28:BC:52:6F:CF:F4
Certificate issuer:       /CN=FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC
Certificate serial:       2C0284E59D0177BF8BFD33037996AE4A7AA317C7
Authority key identifier: FE:15:2D:1B:1B:D5:63:AE:38:64:E7:38:A8:E6:52:CE:1F:2E:DB:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e39352e302f32342d3234203d3e20323633343133.roa
Signing time:             Wed 27 Aug 2025 19:37:00 +0000
ROA not before:           Wed 27 Aug 2025 19:32:00 +0000
ROA not after:            Wed 26 Aug 2026 19:37:00 +0000
asID:                     263413
IP address blocks:        179.97.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.crl
                          rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 05:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:02:84:e5:9d:01:77:bf:8b:fd:33:03:79:96:ae:4a:7a:a3:17:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC
        Validity
            Not Before: Aug 27 19:32:00 2025 GMT
            Not After : Aug 26 19:37:00 2026 GMT
        Subject: CN=75632D4920F8D4650F581FDACC8228BC526FCFF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5a:6f:b5:04:23:d2:b1:52:ff:cc:c8:3b:fa:
                    56:c7:86:38:05:fc:1c:12:74:5d:00:26:19:2e:75:
                    1c:c3:21:54:01:13:ad:63:87:26:34:1d:3d:cb:4f:
                    fc:ce:86:cd:ec:97:2d:e5:6c:8e:87:ec:77:4e:f8:
                    0e:d0:92:fc:92:41:22:30:30:3d:cf:11:4f:32:99:
                    6e:82:41:d9:2a:1c:85:73:27:41:5c:47:89:26:c6:
                    ae:4b:09:b8:fb:2f:99:e6:7c:d7:02:df:88:85:f2:
                    48:fc:d6:ca:98:35:75:8a:65:7e:5c:19:1c:f8:51:
                    a3:69:3a:64:b0:0f:87:8e:20:05:9b:9c:8f:00:d4:
                    3d:e8:6c:9f:89:77:fd:11:88:54:3f:e0:47:cf:2f:
                    16:32:31:65:6c:32:14:e5:7e:fb:b6:a2:b5:42:b2:
                    70:63:58:94:06:77:68:e1:6b:73:36:64:be:84:c6:
                    50:7f:cc:05:1a:67:83:d1:c1:cf:be:05:e4:77:5e:
                    50:8f:17:ed:33:82:8c:12:ec:f9:31:db:3c:28:63:
                    64:83:42:38:46:3a:ce:98:65:24:a7:97:61:f9:24:
                    28:00:b2:14:b3:9c:b5:c0:97:1f:05:f0:a8:36:d1:
                    2d:22:61:56:2a:20:8d:7c:73:09:70:81:e5:d5:be:
                    8f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:63:2D:49:20:F8:D4:65:0F:58:1F:DA:CC:82:28:BC:52:6F:CF:F4
            X509v3 Authority Key Identifier:
                keyid:FE:15:2D:1B:1B:D5:63:AE:38:64:E7:38:A8:E6:52:CE:1F:2E:DB:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/3137392e39372e39352e302f32342d3234203d3e20323633343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:f6:9d:89:71:da:a9:0a:e6:84:e4:38:21:fc:b6:1d:ba:5c:
         d5:6e:9e:c5:d7:3b:0d:ef:c5:f1:00:7d:b0:97:4b:e6:54:4d:
         19:9e:57:28:24:a4:6d:69:bb:69:2f:bb:e4:ad:61:01:34:82:
         b5:40:10:1f:c6:a6:5f:e8:eb:69:16:93:a7:c4:70:8b:ca:07:
         bc:58:90:4a:6c:fb:63:59:40:22:b4:f8:32:f2:aa:02:1c:d8:
         65:0c:8a:f2:4c:30:81:4b:93:b2:7d:02:7c:70:4a:44:da:de:
         11:b0:e2:c6:85:df:48:0b:e1:60:37:eb:8b:92:52:23:a8:ba:
         c1:db:e9:b3:bd:05:ee:d4:df:8b:a3:c2:67:4f:33:ac:48:17:
         d4:d7:1d:a4:17:45:ce:9b:18:d0:06:41:b3:45:8e:40:ba:f8:
         99:31:70:7e:e6:f2:05:09:98:c3:f1:57:50:db:90:d5:1d:5a:
         52:ff:97:a9:e9:97:41:a1:08:fc:fb:75:66:d5:11:f0:aa:68:
         56:43:fb:29:9f:51:f2:86:45:c7:74:1f:be:b2:70:cf:6d:ff:
         6a:c0:73:87:61:cb:5b:52:e0:07:6d:9a:6a:2f:98:1a:17:e4:
         d2:e5:8e:6f:da:56:27:25:3b:1a:2d:d7:0f:2c:b9:67:a8:2e:
         10:27:14:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 13:18:23 2025 by rpki-client