Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/3137392e39372e322e302f32332d3233203d3e20323632343730.roa
File:                     3137392e39372e322e302f32332d3233203d3e20323632343730.roa (raw, json)
Hash identifier:          BDr1sgMS3WaXA3NNfCPKrlm7fJVDClzH8TY+aLl6b3k=
Subject key identifier:   7B:BD:47:1E:B0:34:35:F5:FA:82:93:26:82:1A:7A:FD:BA:9A:99:5F
Certificate issuer:       /CN=970837BD94B7C2456C803FB74190973C3A36E88E
Certificate serial:       47334A6B7D79C2585F3698E0B04C7E5189444557
Authority key identifier: 97:08:37:BD:94:B7:C2:45:6C:80:3F:B7:41:90:97:3C:3A:36:E8:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970837BD94B7C2456C803FB74190973C3A36E88E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/3137392e39372e322e302f32332d3233203d3e20323632343730.roa
Signing time:             Sat 26 Jul 2025 10:36:10 +0000
ROA not before:           Sat 26 Jul 2025 10:31:10 +0000
ROA not after:            Sat 25 Jul 2026 10:36:10 +0000
asID:                     262470
IP address blocks:        179.97.2.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/970837BD94B7C2456C803FB74190973C3A36E88E.crl
                          rsync://rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/970837BD94B7C2456C803FB74190973C3A36E88E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970837BD94B7C2456C803FB74190973C3A36E88E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 21:43:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:33:4a:6b:7d:79:c2:58:5f:36:98:e0:b0:4c:7e:51:89:44:45:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=970837BD94B7C2456C803FB74190973C3A36E88E
        Validity
            Not Before: Jul 26 10:31:10 2025 GMT
            Not After : Jul 25 10:36:10 2026 GMT
        Subject: CN=7BBD471EB03435F5FA829326821A7AFDBA9A995F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:20:18:d7:c0:55:aa:bf:b2:c1:b7:e6:d4:78:
                    2a:e2:7f:67:09:f8:b9:12:16:15:8f:98:36:81:ee:
                    7d:61:02:07:f4:44:17:9f:37:a6:b6:a1:ee:0e:04:
                    ba:38:b5:5d:53:34:99:6b:25:50:88:2c:5a:fd:f7:
                    7d:13:a8:e8:b0:df:f8:ca:88:7c:be:c8:67:b9:ab:
                    b8:d1:d8:2e:35:44:ed:bf:9e:2e:0c:bd:1c:70:c5:
                    1c:6f:ff:0f:03:89:84:9e:57:6f:d2:cc:ae:7b:69:
                    4b:9e:0a:89:ef:f2:c1:04:0c:78:23:73:a5:73:31:
                    06:bb:7f:73:b2:65:06:8e:5f:bb:df:69:eb:0f:32:
                    31:06:a7:4d:ff:1b:cf:e7:5f:bf:70:34:c7:92:00:
                    c9:db:ae:8e:fe:49:8b:41:26:b5:09:a6:00:cc:d1:
                    f4:a9:3f:19:0e:cf:fe:0d:ea:08:df:71:8f:5d:3e:
                    a9:5a:03:11:09:53:d2:7a:25:90:fe:7d:c2:94:8c:
                    16:ca:b0:4b:75:fa:75:a1:b5:85:ae:2c:1d:3f:00:
                    a5:82:d5:9d:14:2f:57:86:62:a6:93:f4:2b:e8:3c:
                    95:0e:77:e2:00:e9:56:f8:0f:c2:2c:a7:40:14:92:
                    2b:53:9c:32:04:fb:6a:7e:6e:de:50:42:3a:de:aa:
                    51:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:BD:47:1E:B0:34:35:F5:FA:82:93:26:82:1A:7A:FD:BA:9A:99:5F
            X509v3 Authority Key Identifier:
                keyid:97:08:37:BD:94:B7:C2:45:6C:80:3F:B7:41:90:97:3C:3A:36:E8:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/970837BD94B7C2456C803FB74190973C3A36E88E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970837BD94B7C2456C803FB74190973C3A36E88E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/3137392e39372e322e302f32332d3233203d3e20323632343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:9d:d6:7d:a5:bb:5f:ba:3e:e1:d7:1b:99:e8:af:65:d8:22:
         8e:29:77:d1:9a:73:fd:31:fd:8b:7c:87:e0:83:bd:a5:c3:42:
         66:97:42:c6:d1:9f:4f:bc:0e:cf:76:47:0f:9d:09:26:d6:7d:
         1a:c3:b0:7a:11:6d:33:5c:cf:59:57:99:db:2d:fd:22:ec:be:
         c9:8e:0c:57:8e:6b:0f:62:cd:3f:d1:eb:2c:d1:f5:54:3d:96:
         6e:b6:45:b2:d6:02:3f:c0:ed:ac:c1:fb:26:fd:3d:e6:90:25:
         be:08:1f:8b:4e:db:aa:82:be:ee:9e:df:e1:cd:2c:74:3a:5b:
         fb:29:86:18:d2:04:c5:94:dc:09:ef:99:ff:bd:f3:ef:73:d0:
         47:fb:cb:1b:9f:a1:75:85:cd:d0:54:12:a8:cb:42:23:e5:40:
         a2:71:fa:9e:fd:66:69:47:90:59:89:a0:b4:19:49:5a:fc:55:
         21:f7:42:39:18:2f:2f:5c:3c:d3:09:81:f9:e5:66:ed:2f:65:
         4e:4e:78:c4:1b:c8:8e:b1:5c:c0:24:52:f5:11:77:5d:7c:3c:
         d7:75:33:e3:68:d3:84:2a:c3:61:d1:54:18:e7:a9:39:13:44:
         0d:2f:b2:0f:ed:5a:41:b6:18:9f:8e:1c:57:83:02:12:d8:3d:
         ab:e5:bf:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:07:22 2025 by rpki-client