Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/3137392e39372e37302e302f32332d3233203d3e20323632373937.roa
File:                     3137392e39372e37302e302f32332d3233203d3e20323632373937.roa (raw, json)
Hash identifier:          Hetbuj2rwkkeBXdouhzJ0CVbFBiyyOp8E0TCAYzodug=
Subject key identifier:   8F:58:22:13:89:00:A8:8A:52:ED:94:44:64:AF:0E:7D:F6:52:3C:18
Certificate issuer:       /CN=A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B
Certificate serial:       1709B81EC28B93A62401426C338E81F00C57FA67
Authority key identifier: A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/3137392e39372e37302e302f32332d3233203d3e20323632373937.roa
Signing time:             Thu 23 Oct 2025 14:13:15 +0000
ROA not before:           Thu 23 Oct 2025 14:08:15 +0000
ROA not after:            Thu 22 Oct 2026 14:13:15 +0000
asID:                     262797
IP address blocks:        179.97.70.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.crl
                          rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 18:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:09:b8:1e:c2:8b:93:a6:24:01:42:6c:33:8e:81:f0:0c:57:fa:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B
        Validity
            Not Before: Oct 23 14:08:15 2025 GMT
            Not After : Oct 22 14:13:15 2026 GMT
        Subject: CN=8F5822138900A88A52ED944464AF0E7DF6523C18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1e:2d:d3:54:ce:7a:fc:6c:b1:a1:a7:83:f8:
                    bb:a0:f1:a4:6b:63:af:34:d9:fc:d9:68:12:91:02:
                    e6:3c:96:61:4e:7e:d9:ba:08:d3:75:a6:5a:5e:4b:
                    78:3e:a9:31:cb:5d:bb:4d:c7:4e:55:87:b6:eb:76:
                    8e:2a:c5:47:82:09:b4:31:33:32:1c:5e:56:d3:c1:
                    dc:62:af:f7:b4:fe:14:62:e6:ae:4b:ce:7c:ee:27:
                    f4:b7:57:da:03:27:37:f0:25:c5:30:a7:08:62:d9:
                    c0:3c:f8:07:e6:d4:78:db:0e:81:6d:34:de:75:be:
                    aa:29:e7:df:e1:b9:17:65:52:09:7d:28:8e:05:a2:
                    a7:80:02:9d:a6:8f:e4:e8:12:48:f5:41:c7:97:0a:
                    cb:e3:c2:ab:e4:12:01:7f:95:44:2f:8a:6c:50:39:
                    30:13:26:50:eb:48:a5:f2:08:e6:80:c6:8e:a3:25:
                    64:7e:4f:66:55:2c:ad:29:96:de:63:38:ef:b6:40:
                    11:95:da:38:4c:75:41:76:1d:a5:ec:69:0f:f7:17:
                    87:e3:07:77:f0:d9:ef:b0:e1:df:e9:74:40:a1:4f:
                    f7:db:c3:30:f5:3d:19:db:fb:c8:88:2f:d5:2e:fa:
                    75:46:a7:8d:eb:d2:13:4c:65:db:87:5f:c5:08:4d:
                    96:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:58:22:13:89:00:A8:8A:52:ED:94:44:64:AF:0E:7D:F6:52:3C:18
            X509v3 Authority Key Identifier:
                keyid:A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/3137392e39372e37302e302f32332d3233203d3e20323632373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:93:dc:3f:ba:7b:bf:92:d5:86:10:5c:12:33:d5:fe:ef:66:
         64:cb:fc:bc:99:e7:b4:74:2a:97:dc:e0:69:ba:05:2d:a8:2f:
         92:be:51:57:13:e1:ef:44:01:6e:fe:fb:34:39:d0:3d:55:7a:
         89:08:94:7a:19:03:4e:d6:a6:42:98:a7:69:58:71:3e:9a:10:
         72:d1:53:91:c5:45:20:96:85:4a:db:7d:a0:a2:2b:f0:eb:c6:
         af:80:1e:d2:2f:fd:fe:24:41:55:c6:1b:41:ed:69:2b:24:ce:
         d5:98:21:d8:39:54:89:50:ff:ed:55:95:5d:fc:1a:3b:90:53:
         22:71:95:43:4a:e2:db:d6:d2:ed:f2:8b:02:ae:1a:ab:e9:d3:
         c6:8e:6a:a4:99:da:91:a7:f3:43:84:11:cf:da:56:10:21:d1:
         17:d2:eb:b2:5d:1f:3e:2a:2e:09:42:26:4b:59:7b:fb:b4:f3:
         05:e9:dc:a7:cd:b3:21:34:1b:a3:53:71:7e:f2:ef:23:80:48:
         c7:2c:e1:b4:6e:7b:30:13:1d:7d:f3:92:07:a9:82:9c:70:f9:
         ae:49:91:e0:fa:ce:b9:3f:7b:7a:f6:a6:fc:47:04:e7:f6:96:
         7a:cc:7c:3c:36:8f:0b:b0:cf:71:7a:46:6f:07:99:0f:c7:4e:
         0a:ac:41:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:35:34 2025 by rpki-client