Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/3137392e39372e302e302f32312d3234203d3e20323632343730.roa
File:                     3137392e39372e302e302f32312d3234203d3e20323632343730.roa (raw, json)
Hash identifier:          a/xGRTp6DmYMjcXbpmxus3RgHb3rcVaW+teWRh66I5s=
Subject key identifier:   BD:DF:CD:6F:7C:93:C2:CA:72:9A:67:3F:3F:42:C1:D6:4B:2F:7E:BD
Certificate issuer:       /CN=970837BD94B7C2456C803FB74190973C3A36E88E
Certificate serial:       52410983E3C5DE36A366B6D527E21C01109DFFD2
Authority key identifier: 97:08:37:BD:94:B7:C2:45:6C:80:3F:B7:41:90:97:3C:3A:36:E8:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970837BD94B7C2456C803FB74190973C3A36E88E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/3137392e39372e302e302f32312d3234203d3e20323632343730.roa
Signing time:             Fri 25 Jul 2025 15:26:28 +0000
ROA not before:           Fri 25 Jul 2025 15:21:28 +0000
ROA not after:            Fri 24 Jul 2026 15:26:28 +0000
asID:                     262470
IP address blocks:        179.97.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/970837BD94B7C2456C803FB74190973C3A36E88E.crl
                          rsync://rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/970837BD94B7C2456C803FB74190973C3A36E88E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970837BD94B7C2456C803FB74190973C3A36E88E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 21:43:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:41:09:83:e3:c5:de:36:a3:66:b6:d5:27:e2:1c:01:10:9d:ff:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=970837BD94B7C2456C803FB74190973C3A36E88E
        Validity
            Not Before: Jul 25 15:21:28 2025 GMT
            Not After : Jul 24 15:26:28 2026 GMT
        Subject: CN=BDDFCD6F7C93C2CA729A673F3F42C1D64B2F7EBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:50:b2:2f:b4:d6:36:84:d5:90:5a:33:55:e5:
                    a7:2f:c7:11:43:d5:57:93:5a:c8:5e:16:14:d1:2e:
                    36:30:78:3a:8a:66:f9:59:ad:bc:81:e3:d3:5f:59:
                    e9:ea:68:a7:34:b4:a8:eb:46:83:c3:7b:3a:61:c5:
                    71:40:f6:f3:97:cc:ce:2c:f1:ab:bc:10:07:e9:6e:
                    5e:3a:c3:f1:35:c8:f5:95:e6:17:35:f0:bb:b0:a7:
                    c6:cb:0f:cf:60:da:69:24:76:89:51:e9:ec:81:d1:
                    cf:fb:83:6a:96:ed:42:e4:49:66:33:b4:5c:ca:4c:
                    57:90:a6:66:65:dd:30:cd:a9:81:f4:66:22:9d:86:
                    5e:f8:7d:85:d3:ba:8d:9c:3c:8f:8b:e5:bb:bd:20:
                    d7:0b:8c:91:e8:94:14:10:22:04:4d:3a:f1:2d:67:
                    3e:89:4e:91:71:9f:65:cc:bb:12:71:71:ea:a3:e8:
                    16:db:d5:38:95:6d:d2:7b:ed:cb:a3:f5:7b:c4:5e:
                    40:43:c7:3b:f8:b8:7e:42:6c:ef:6a:75:5c:f1:da:
                    68:de:79:de:f4:bb:8a:0b:96:8e:1c:5f:49:0e:c6:
                    28:28:05:df:77:5a:46:f2:f6:c4:b0:10:86:31:6f:
                    84:74:3e:bb:6b:33:54:91:37:d5:01:2b:b5:7b:14:
                    6a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:DF:CD:6F:7C:93:C2:CA:72:9A:67:3F:3F:42:C1:D6:4B:2F:7E:BD
            X509v3 Authority Key Identifier:
                keyid:97:08:37:BD:94:B7:C2:45:6C:80:3F:B7:41:90:97:3C:3A:36:E8:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/970837BD94B7C2456C803FB74190973C3A36E88E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970837BD94B7C2456C803FB74190973C3A36E88E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/3137392e39372e302e302f32312d3234203d3e20323632343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         75:9d:f3:80:cc:74:d6:ab:36:66:ac:93:d0:ec:e4:fe:44:9e:
         0d:2e:eb:e0:7a:49:8a:fa:e8:13:6a:22:f9:cf:f1:6f:06:ee:
         23:f1:98:57:77:2a:0d:61:76:88:44:ca:83:c4:14:a1:a0:e0:
         70:22:fb:c3:90:ba:36:ae:b6:c0:89:79:cd:d0:c4:0f:5a:2f:
         53:18:1f:16:5f:f9:ac:3c:f8:f8:a4:af:1c:b9:5d:70:36:ff:
         78:cf:d0:ab:c5:03:66:9b:8f:fa:bb:05:9d:fd:1d:2b:04:08:
         5b:37:d3:13:0d:6e:bd:18:5d:3d:73:83:86:9e:10:ec:e7:43:
         2d:b0:53:65:ab:96:c2:2a:1d:55:6b:4d:1e:4d:ff:34:3e:b8:
         b9:d6:df:69:60:75:45:c8:ab:c5:bd:27:49:db:0e:b3:b5:ed:
         dc:24:00:c3:bf:99:20:ce:8f:40:bf:8e:22:33:9f:9c:b8:ba:
         6d:14:0a:a8:a9:08:36:a3:07:16:0d:3e:56:16:86:48:5f:17:
         ac:6d:94:2b:22:fc:a0:af:6d:2f:23:c0:e6:5d:48:0d:9b:97:
         0f:71:fb:d3:85:d4:05:f7:f2:ce:8d:9a:89:20:42:40:65:73:
         3d:af:66:1a:a7:2f:ab:24:ea:c7:f1:bf:f7:8a:30:2c:85:5b:
         96:ee:80:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:45:39 2025 by rpki-client