Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/3137392e39372e36352e302f32342d3234203d3e20323632373937.roa
File:                     3137392e39372e36352e302f32342d3234203d3e20323632373937.roa (raw, json)
Hash identifier:          TMJze/D7lgWApIkb6s8IrBMYL0vK3C/Fn94pZe90Le8=
Subject key identifier:   76:65:E9:7E:31:0A:BB:5C:4D:FC:DF:2C:E9:A8:5E:AC:72:95:96:CC
Certificate issuer:       /CN=A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B
Certificate serial:       0CC9244C5E861632DC71E7647F152CAE107BE4BB
Authority key identifier: A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/3137392e39372e36352e302f32342d3234203d3e20323632373937.roa
Signing time:             Thu 23 Oct 2025 14:13:20 +0000
ROA not before:           Thu 23 Oct 2025 14:08:20 +0000
ROA not after:            Thu 22 Oct 2026 14:13:20 +0000
asID:                     262797
IP address blocks:        179.97.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.crl
                          rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 18:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:c9:24:4c:5e:86:16:32:dc:71:e7:64:7f:15:2c:ae:10:7b:e4:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B
        Validity
            Not Before: Oct 23 14:08:20 2025 GMT
            Not After : Oct 22 14:13:20 2026 GMT
        Subject: CN=7665E97E310ABB5C4DFCDF2CE9A85EAC729596CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:61:6e:87:e8:2e:f4:c3:f2:dd:23:0f:8f:a5:
                    88:97:f9:bb:f8:78:6a:11:5b:43:db:ad:56:ea:fe:
                    a7:78:a3:3d:c2:d9:93:dc:1b:03:9f:be:09:f6:6d:
                    fd:e0:1d:a0:c8:9a:0a:55:12:b3:0e:d7:d3:13:7a:
                    4e:0b:a3:97:59:b6:8a:d1:cb:bf:33:93:7e:3b:fe:
                    2e:37:13:c1:f1:4e:c3:d0:6e:a9:dd:15:94:c2:2c:
                    3c:57:49:36:62:0c:81:d1:a1:6d:29:93:17:60:42:
                    c1:87:e3:44:3d:d7:fe:b8:76:26:35:23:ba:71:fb:
                    54:a3:3d:75:59:f1:4b:23:4b:07:15:b2:6a:d9:7f:
                    f1:ee:fb:5f:c4:c5:48:91:a5:c5:5a:b7:f1:45:c9:
                    d9:67:54:69:0d:68:3b:e5:48:70:28:2f:fa:4d:9b:
                    99:e1:5c:6e:db:e2:37:5a:a3:ba:fb:07:a2:46:0e:
                    d0:11:b3:e1:89:e1:22:94:8d:86:0e:03:ad:45:73:
                    42:e2:52:b1:29:84:4c:4d:57:4c:f8:e1:15:76:00:
                    e3:1f:34:1f:af:3a:b6:87:63:72:8a:a8:53:1e:b3:
                    f6:fa:89:ba:82:63:3f:6b:05:6e:04:ed:b0:34:4a:
                    4e:e2:cc:5c:48:aa:7e:7c:c8:6b:8a:b4:5a:df:5c:
                    bf:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:65:E9:7E:31:0A:BB:5C:4D:FC:DF:2C:E9:A8:5E:AC:72:95:96:CC
            X509v3 Authority Key Identifier:
                keyid:A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/3137392e39372e36352e302f32342d3234203d3e20323632373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:29:df:18:b1:36:a4:86:f8:a3:37:f5:03:21:9d:c5:e9:40:
         89:25:cb:bf:b6:43:32:b7:42:e4:d4:df:dc:a9:f6:64:57:54:
         74:e5:af:7e:df:d9:ba:50:6a:03:d5:ec:6d:38:39:b3:74:8e:
         cb:a8:c5:99:14:15:4e:34:9c:0f:d1:51:fc:89:7b:8d:28:7a:
         77:e9:04:de:c3:b7:20:12:a4:8b:40:bd:5c:0c:d4:0f:e1:aa:
         7e:68:43:99:1f:00:64:b7:8a:e3:a8:03:6f:9d:60:d2:a4:9d:
         b3:0a:a4:7e:82:86:86:c6:97:a2:33:92:ca:2e:c3:e8:52:0f:
         35:1e:25:5d:72:de:75:a3:e6:aa:1a:f4:01:6a:da:f2:11:f0:
         2a:06:87:08:2a:a2:5e:c1:f3:7e:55:96:86:39:78:da:a5:d1:
         2e:0f:22:ef:33:f7:a6:55:67:6b:32:aa:76:52:d3:93:2e:77:
         ed:f6:24:06:10:52:55:a2:1e:12:b1:40:17:27:1c:26:03:5c:
         92:ad:0f:a4:02:8b:38:8e:ad:a1:e9:62:30:39:fa:9a:e5:96:
         c9:1e:3a:b2:2a:fe:56:df:e9:8a:e1:de:a3:77:18:f9:f1:0e:
         cf:10:11:97:be:b1:21:60:fe:4f:fc:00:be:92:49:ef:06:05:
         72:66:03:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:38:51 2025 by rpki-client