Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/3137392e39372e32342e302f32312d3332203d3e20323633343131.roa
File:                     3137392e39372e32342e302f32312d3332203d3e20323633343131.roa (raw, json)
Hash identifier:          s/FISBQija6V7AjZgY9FBSFcPMzOtTNWRMQ6o5F21Jc=
Subject key identifier:   47:E8:C3:77:BF:75:84:97:E2:5D:E7:DA:9F:40:0B:80:E2:B9:DD:E7
Certificate issuer:       /CN=8F945FDB7E33F09E21C0E77D30BB4D60AA405A6F
Certificate serial:       1786DD623E5A17D6E9E0BAEBEA471B4ECCBC0555
Authority key identifier: 8F:94:5F:DB:7E:33:F0:9E:21:C0:E7:7D:30:BB:4D:60:AA:40:5A:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F945FDB7E33F09E21C0E77D30BB4D60AA405A6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/3137392e39372e32342e302f32312d3332203d3e20323633343131.roa
Signing time:             Mon 27 Oct 2025 19:27:38 +0000
ROA not before:           Mon 27 Oct 2025 19:22:38 +0000
ROA not after:            Mon 26 Oct 2026 19:27:38 +0000
asID:                     263411
IP address blocks:        179.97.24.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/8F945FDB7E33F09E21C0E77D30BB4D60AA405A6F.crl
                          rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/8F945FDB7E33F09E21C0E77D30BB4D60AA405A6F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F945FDB7E33F09E21C0E77D30BB4D60AA405A6F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 11:43:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:86:dd:62:3e:5a:17:d6:e9:e0:ba:eb:ea:47:1b:4e:cc:bc:05:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F945FDB7E33F09E21C0E77D30BB4D60AA405A6F
        Validity
            Not Before: Oct 27 19:22:38 2025 GMT
            Not After : Oct 26 19:27:38 2026 GMT
        Subject: CN=47E8C377BF758497E25DE7DA9F400B80E2B9DDE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:3c:0b:14:18:ca:74:40:9d:c5:d7:44:4d:60:
                    fc:9f:90:d9:da:af:6d:cd:36:92:bf:04:34:91:c2:
                    03:23:36:f3:6d:10:ab:4d:f8:3a:d8:a5:37:a0:db:
                    2a:0a:d0:ac:f6:52:77:13:cc:11:af:45:c8:71:ce:
                    f9:d9:29:0c:9e:0e:9f:f9:00:67:3a:6b:7a:8e:51:
                    d1:21:92:36:8c:16:e1:55:d6:44:0c:c2:0c:18:71:
                    ba:4e:92:e4:48:a2:60:06:a0:b5:52:3a:cb:b2:5d:
                    d5:3c:8a:b5:2f:8b:ae:ba:c5:6b:18:7a:2b:ae:c5:
                    35:d6:0b:87:0e:fb:cc:09:80:5b:93:ba:48:17:55:
                    92:ae:90:9b:3a:20:48:98:59:21:d3:70:f7:c8:21:
                    85:0c:82:12:29:eb:5e:29:93:cb:e8:22:ba:d3:87:
                    47:45:cb:68:8c:f5:2e:bc:bc:e9:1b:62:c4:da:aa:
                    79:76:bd:a6:54:51:f5:15:1a:8d:84:4c:e0:71:d6:
                    2f:9f:1e:bc:85:6d:4b:9c:46:86:d8:2e:b2:6a:a7:
                    7b:d9:a5:93:d3:2d:88:34:7e:34:e2:1c:c9:59:1c:
                    a9:65:82:cb:71:d7:6e:76:36:5e:74:b9:8f:8d:3d:
                    ad:f1:5f:fa:90:ec:e9:7f:71:7e:7c:27:62:78:03:
                    21:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E8:C3:77:BF:75:84:97:E2:5D:E7:DA:9F:40:0B:80:E2:B9:DD:E7
            X509v3 Authority Key Identifier:
                keyid:8F:94:5F:DB:7E:33:F0:9E:21:C0:E7:7D:30:BB:4D:60:AA:40:5A:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/8F945FDB7E33F09E21C0E77D30BB4D60AA405A6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F945FDB7E33F09E21C0E77D30BB4D60AA405A6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/3137392e39372e32342e302f32312d3332203d3e20323633343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         88:a3:9c:03:51:a9:96:ac:c6:fd:32:28:41:d0:30:f3:11:d6:
         79:62:29:4f:37:28:4a:db:59:95:0d:8e:6e:a5:5d:35:6f:37:
         a4:7c:17:ae:e5:5a:ce:e1:c8:08:66:9f:84:1c:65:99:db:3a:
         74:a3:fa:e5:ed:73:02:2e:13:3b:94:39:b1:af:12:98:6c:6a:
         49:46:b6:5f:cb:1d:db:7d:9c:44:d2:7b:30:07:2a:fa:42:88:
         fc:17:69:99:d3:ae:e1:04:aa:9a:ab:e2:94:31:c9:97:c0:d3:
         c1:3b:ba:09:c9:e0:45:ab:d5:18:b0:6f:22:2d:93:74:db:0e:
         56:ff:85:84:67:f8:8c:2f:bd:fe:7e:76:c1:da:8e:26:dd:90:
         fd:df:75:59:0c:e6:1b:bd:d1:eb:e6:dd:6b:81:bd:0c:f5:9a:
         92:c6:50:12:4b:0e:a0:5b:cc:d9:6a:69:b6:56:dd:80:86:f5:
         bd:4d:88:c6:5b:a0:7a:fc:a3:16:97:56:cd:2a:ad:50:0f:52:
         2f:ee:49:28:07:bc:d9:ad:65:0d:e7:2c:73:85:23:00:36:95:
         26:1b:9f:e8:14:c6:ad:bf:9e:7f:a8:14:a6:03:2d:84:3e:66:
         fb:99:e2:3b:5a:e6:fd:da:db:2a:69:a9:5b:32:e5:54:48:da:
         6a:99:20:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:28:22 2025 by rpki-client