Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/3137392e39372e36362e302f32332d3233203d3e20323632373937.roa
File:                     3137392e39372e36362e302f32332d3233203d3e20323632373937.roa (raw, json)
Hash identifier:          FDym7Ltjp3Q8mrj39Qbz8XAbjWmXVWy1wr1KO6cqxgE=
Subject key identifier:   05:90:AD:50:74:1C:79:32:A4:6B:95:8D:C2:08:47:FD:AA:57:57:BF
Certificate issuer:       /CN=A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B
Certificate serial:       5E1F88F7C32309156B46E3548203051AB14F6625
Authority key identifier: A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/3137392e39372e36362e302f32332d3233203d3e20323632373937.roa
Signing time:             Thu 23 Oct 2025 14:13:14 +0000
ROA not before:           Thu 23 Oct 2025 14:08:14 +0000
ROA not after:            Thu 22 Oct 2026 14:13:14 +0000
asID:                     262797
IP address blocks:        179.97.66.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.crl
                          rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 18:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:1f:88:f7:c3:23:09:15:6b:46:e3:54:82:03:05:1a:b1:4f:66:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B
        Validity
            Not Before: Oct 23 14:08:14 2025 GMT
            Not After : Oct 22 14:13:14 2026 GMT
        Subject: CN=0590AD50741C7932A46B958DC20847FDAA5757BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8a:c5:b7:3c:47:bf:9d:13:b2:8b:0f:be:9e:
                    e8:8a:63:b2:c6:4d:82:1f:d7:da:ae:7d:55:82:24:
                    7b:95:96:78:ed:06:7b:f4:9a:12:e2:e9:57:02:1d:
                    9c:2a:58:78:dc:e9:91:9b:e7:11:be:39:d8:98:6c:
                    0f:2f:ce:97:47:63:9a:41:27:01:0c:93:be:1e:c0:
                    4e:41:c0:bb:db:e3:c7:0d:1e:23:b1:a5:5d:75:a9:
                    27:8f:bb:0f:eb:16:f8:8c:06:07:6d:81:5e:39:86:
                    a3:40:a0:f1:5d:32:14:a2:3d:c8:8d:88:00:f1:f3:
                    74:b8:31:ec:64:99:ad:28:20:e9:bf:92:bc:d0:75:
                    7a:ac:9d:1e:6e:98:ae:a2:a0:2c:82:6c:e3:d1:69:
                    43:52:04:5b:24:6c:fd:d2:cc:b0:51:40:97:a9:b3:
                    08:26:41:65:ea:0a:0f:d6:c8:f3:e1:8a:75:b7:0a:
                    c7:74:b6:99:95:b2:b1:7f:df:30:a9:f6:ae:ba:33:
                    e1:01:24:25:47:47:4d:ce:1e:c0:ea:57:56:38:38:
                    28:76:4a:c8:ca:a1:4d:fd:03:f0:05:10:2d:1c:6a:
                    86:26:3d:86:25:11:8b:cd:f6:c8:85:e3:51:6a:7f:
                    ea:db:80:c9:79:28:9d:41:08:20:95:45:ac:12:b2:
                    fe:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:90:AD:50:74:1C:79:32:A4:6B:95:8D:C2:08:47:FD:AA:57:57:BF
            X509v3 Authority Key Identifier:
                keyid:A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/3137392e39372e36362e302f32332d3233203d3e20323632373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:4a:74:87:75:b7:9e:1d:a8:34:c7:4d:69:9c:b5:88:6c:60:
         25:3e:31:dd:d7:8f:7f:a5:64:40:87:1d:a2:9b:2c:62:ca:99:
         af:32:9a:a7:95:c4:a7:23:ca:72:95:f0:a4:61:23:53:98:fe:
         31:c2:f8:49:1e:5c:52:2b:51:60:06:c8:f5:68:e2:c4:d5:21:
         c1:b2:3d:7d:d5:e0:8d:a1:27:2a:d8:e2:89:6d:1d:89:77:46:
         8f:0d:1c:95:76:bb:be:71:1c:02:10:09:ab:07:a3:fe:47:39:
         fd:18:0b:e1:68:bf:bc:17:35:ee:45:fd:3e:d6:05:c4:f5:7b:
         77:c3:82:8f:8e:6f:a4:a1:9d:45:e2:4a:d2:cd:a0:b3:7c:f9:
         5a:f7:ea:18:33:c8:c6:52:7f:b6:c8:40:83:72:7a:f6:7a:15:
         02:4b:a3:c1:b0:57:96:ee:ea:f1:01:d4:04:35:89:89:1a:86:
         86:f6:ae:f1:29:b7:35:62:3c:71:00:5d:1b:fc:db:29:6e:f6:
         5b:2d:aa:86:f9:12:1b:a1:c0:c9:b1:c6:2c:48:f8:c0:91:32:
         bb:ca:71:95:33:f4:d2:3e:61:05:80:67:c8:c2:1c:44:e8:83:
         23:6f:20:6a:0a:a0:6b:4b:f2:36:b4:21:a5:11:81:04:0d:0f:
         b6:bd:99:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:37:10 2025 by rpki-client