Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/3137392e39372e36342e302f32312d3231203d3e20323632373937.roa
File:                     3137392e39372e36342e302f32312d3231203d3e20323632373937.roa (raw, json)
Hash identifier:          Ref6untU23IWznoAMq8EUPwi5YViQD+XeLWYdW/pmnA=
Subject key identifier:   CD:B6:C6:77:DF:F6:65:AF:4F:BA:30:A0:A1:AA:FD:05:4D:7B:0E:5D
Certificate issuer:       /CN=A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B
Certificate serial:       4D01EB72782B26F88869F97B05F859AF41FFF708
Authority key identifier: A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/3137392e39372e36342e302f32312d3231203d3e20323632373937.roa
Signing time:             Thu 23 Oct 2025 14:13:14 +0000
ROA not before:           Thu 23 Oct 2025 14:08:14 +0000
ROA not after:            Thu 22 Oct 2026 14:13:14 +0000
asID:                     262797
IP address blocks:        179.97.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.crl
                          rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 18:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:01:eb:72:78:2b:26:f8:88:69:f9:7b:05:f8:59:af:41:ff:f7:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B
        Validity
            Not Before: Oct 23 14:08:14 2025 GMT
            Not After : Oct 22 14:13:14 2026 GMT
        Subject: CN=CDB6C677DFF665AF4FBA30A0A1AAFD054D7B0E5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:37:4b:1e:68:4d:ed:d7:d1:e9:66:e4:01:18:
                    6b:50:a9:ad:ba:ac:5e:9c:35:a1:06:71:68:37:96:
                    20:a3:f5:b4:d2:86:90:29:38:e5:7e:39:7e:37:52:
                    7e:d6:f1:3a:af:6e:59:a3:9c:9c:3e:c8:26:1d:92:
                    f1:be:d3:9a:2d:8c:24:e5:64:e6:9a:10:dc:2e:ce:
                    41:c0:34:5e:28:ed:ae:f7:03:76:14:6e:bf:46:07:
                    cc:c8:a0:f6:31:c4:8f:6a:71:6a:77:48:71:4e:89:
                    1f:b7:fb:9b:8a:0f:6e:f8:fc:06:29:60:31:d7:6e:
                    14:05:15:01:7f:6a:13:00:fe:9f:9f:c4:18:1c:93:
                    5d:4e:f6:2c:d9:a3:f1:a3:3d:6c:7a:f4:b3:f7:cf:
                    90:44:91:4d:26:a9:74:55:0d:a0:3e:dd:4c:58:29:
                    8c:6e:a2:9d:f2:0f:99:3a:86:9c:a7:f2:53:e4:79:
                    f8:d0:c8:c4:a9:3c:e9:5e:94:ec:3c:c0:3b:68:80:
                    e0:9b:de:70:b3:f5:73:27:15:a3:9c:29:ad:40:bd:
                    39:2b:9b:82:32:cb:89:bc:b4:c9:9c:62:89:00:57:
                    ea:12:58:bd:35:5c:30:98:cb:6e:13:97:e3:93:a7:
                    21:ad:36:de:60:b1:08:ef:db:04:f6:17:1e:cf:a7:
                    20:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B6:C6:77:DF:F6:65:AF:4F:BA:30:A0:A1:AA:FD:05:4D:7B:0E:5D
            X509v3 Authority Key Identifier:
                keyid:A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/3137392e39372e36342e302f32312d3231203d3e20323632373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         87:ae:34:65:d4:e7:85:77:ab:71:95:78:6e:f1:3f:10:c9:36:
         18:4c:06:67:c2:4d:15:11:df:53:77:cd:1f:9d:9e:48:ea:32:
         89:0d:57:10:5a:e1:ee:e2:35:43:64:2f:3d:e7:a0:9c:63:a0:
         1f:3c:e9:a6:f8:7f:4f:74:d0:85:34:e4:10:b6:51:38:75:77:
         d5:8c:ec:ae:be:e1:c5:6f:d1:d4:5b:b2:87:43:0d:70:66:dd:
         a1:ce:8c:59:d0:c0:10:fb:85:46:f3:a0:ec:50:d8:2b:b8:12:
         2f:30:cb:bc:c3:38:70:6f:40:e6:26:9f:f1:8e:57:56:40:6c:
         a4:47:75:f7:87:ac:bd:0d:93:22:9d:2f:37:ab:74:e0:83:47:
         55:a0:31:9f:b4:84:5c:23:8d:5c:1d:df:9b:7e:95:59:05:c4:
         64:6c:1f:cc:48:19:c9:c4:72:aa:23:24:6f:95:b6:98:e5:ee:
         ab:b9:d2:e2:5f:2d:d7:15:e7:53:c0:ba:44:72:3f:6c:5b:13:
         03:62:a7:7b:a9:91:5e:89:87:88:82:a0:a4:a0:fb:2a:a1:b7:
         86:71:b4:70:e0:34:ea:ba:a5:a7:a5:e4:8a:33:d3:ac:c0:ba:
         f6:4b:02:b1:ed:aa:68:55:79:35:8d:af:55:cb:28:41:2c:e9:
         72:00:14:5c
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUTQHrcngrJviIafl7BfhZr0H/9wgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTYyQ0RBNEFFNEI1Q0FENzNCMDY4Q0Y2MUQyRUU4MkNC
RTkwQzIwQjAeFw0yNTEwMjMxNDA4MTRaFw0yNjEwMjIxNDEzMTRaMDMxMTAvBgNV
BAMTKENEQjZDNjc3REZGNjY1QUY0RkJBMzBBMEExQUFGRDA1NEQ3QjBFNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAN0seaE3t19HpZuQBGGtQqa26
rF6cNaEGcWg3liCj9bTShpApOOV+OX43Un7W8TqvblmjnJw+yCYdkvG+05otjCTl
ZOaaENwuzkHANF4o7a73A3YUbr9GB8zIoPYxxI9qcWp3SHFOiR+3+5uKD274/AYp
YDHXbhQFFQF/ahMA/p+fxBgck11O9izZo/GjPWx69LP3z5BEkU0mqXRVDaA+3UxY
KYxuop3yD5k6hpyn8lPkefjQyMSpPOlelOw8wDtogOCb3nCz9XMnFaOcKa1AvTkr
m4Iyy4m8tMmcYokAV+oSWL01XDCYy24Tl+OTpyGtNt5gsQjv2wT2Fx7PpyCpAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUzbbGd9/2Za9PujCgoar9BU17Dl0wHwYDVR0j
BBgwFoAUpizaSuS1ytc7Boz2HS7oLL6QwgswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1lwUHNCdEV0YTlKTDhTMlNnb1Ruejl2Mnk0QzU2Rkg4OWJXZ1ZCRlRO
UFMvMi9BNjJDREE0QUU0QjVDQUQ3M0IwNjhDRjYxRDJFRTgyQ0JFOTBDMjBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E2MkNEQTRBRTRCNUNBRDcz
QjA2OENGNjFEMkVFODJDQkU5MEMyMEIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NZcFBzQnRFdGE5Skw4UzJTZ29Ubno5djJ5NEM1NkZIODliV2dWQkZUTlBTLzIv
MzEzNzM5MmUzOTM3MmUzNjM0MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzIzNjMy
MzczOTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDs2FAMA0GCSqGSIb3DQEBCwUAA4IBAQCHrjRl1OeF
d6txlXhu8T8QyTYYTAZnwk0VEd9Td80fnZ5I6jKJDVcQWuHu4jVDZC8956CcY6Af
POmm+H9PdNCFNOQQtlE4dXfVjOyuvuHFb9HUW7KHQw1wZt2hzoxZ0MAQ+4VG86Ds
UNgruBIvMMu8wzhwb0DmJp/xjldWQGykR3X3h6y9DZMinS83q3Tgg0dVoDGftIRc
I41cHd+bfpVZBcRkbB/MSBnJxHKqIyRvlbaY5e6rudLiXy3XFedTwLpEcj9sWxMD
Yqd7qZFeiYeIgqCkoPsqobeGcbRw4DTquqWnpeSKM9OswLr2SwKx7apoVXk1ja9V
yyhBLOlyABRc
-----END CERTIFICATE-----
Generated at Tue Nov 4 01:37:19 2025 by rpki-client