Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/3137392e39372e342e302f32322d3232203d3e20323632343730.roa
File:                     3137392e39372e342e302f32322d3232203d3e20323632343730.roa (raw, json)
Hash identifier:          zvU/eJugd9x+Fjt/uW5iugMusbPfAcJtVyqCMRq4DGw=
Subject key identifier:   3F:11:BF:08:25:7E:C3:7E:AF:31:68:26:33:58:82:E9:35:80:D4:3E
Certificate issuer:       /CN=970837BD94B7C2456C803FB74190973C3A36E88E
Certificate serial:       61A2DDF4AC1656F5F156E2175BE78F18481841CB
Authority key identifier: 97:08:37:BD:94:B7:C2:45:6C:80:3F:B7:41:90:97:3C:3A:36:E8:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970837BD94B7C2456C803FB74190973C3A36E88E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/3137392e39372e342e302f32322d3232203d3e20323632343730.roa
Signing time:             Sat 26 Jul 2025 10:40:18 +0000
ROA not before:           Sat 26 Jul 2025 10:35:18 +0000
ROA not after:            Sat 25 Jul 2026 10:40:18 +0000
asID:                     262470
IP address blocks:        179.97.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/970837BD94B7C2456C803FB74190973C3A36E88E.crl
                          rsync://rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/970837BD94B7C2456C803FB74190973C3A36E88E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970837BD94B7C2456C803FB74190973C3A36E88E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 21:43:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:a2:dd:f4:ac:16:56:f5:f1:56:e2:17:5b:e7:8f:18:48:18:41:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=970837BD94B7C2456C803FB74190973C3A36E88E
        Validity
            Not Before: Jul 26 10:35:18 2025 GMT
            Not After : Jul 25 10:40:18 2026 GMT
        Subject: CN=3F11BF08257EC37EAF316826335882E93580D43E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:dd:6a:93:a1:98:bd:b0:83:f3:c4:e6:e3:35:
                    96:2d:3e:cc:9f:92:51:2a:4a:ec:15:b7:de:78:77:
                    58:f6:15:23:75:07:cf:7a:a8:c3:c8:62:0a:19:12:
                    c6:2a:05:16:42:9a:50:38:0e:b9:1e:90:b7:f0:60:
                    ab:c2:e4:e0:e2:2d:e0:b3:87:df:19:a3:12:99:55:
                    3d:2f:13:70:cb:55:67:11:70:5d:5b:49:71:60:04:
                    1c:19:b9:32:cf:95:ca:51:41:48:28:a6:44:6e:56:
                    67:03:c7:68:98:fa:22:18:ea:e9:4c:1d:84:31:8a:
                    04:9e:17:7e:af:6b:68:5f:e4:5a:2e:8f:52:61:53:
                    a2:71:43:a5:cb:6d:fb:ca:35:ae:c8:39:f0:d1:e3:
                    15:91:36:eb:9a:2e:a4:38:d6:08:26:e5:9e:00:7b:
                    5b:2d:31:6b:be:7f:ec:06:19:32:6b:d7:20:1b:b8:
                    dd:0e:4a:15:d9:96:31:48:1c:0b:a9:e3:3f:a0:24:
                    94:e3:ce:09:a3:29:0c:61:c9:2c:b2:04:68:d2:01:
                    74:6c:d4:92:db:84:33:2e:97:47:9c:2e:12:4f:e3:
                    87:82:1c:05:f0:05:e6:a2:0c:92:73:54:38:25:1f:
                    95:5f:c8:90:d4:14:78:af:f0:1f:87:5e:3b:d0:11:
                    51:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:11:BF:08:25:7E:C3:7E:AF:31:68:26:33:58:82:E9:35:80:D4:3E
            X509v3 Authority Key Identifier:
                keyid:97:08:37:BD:94:B7:C2:45:6C:80:3F:B7:41:90:97:3C:3A:36:E8:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/970837BD94B7C2456C803FB74190973C3A36E88E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970837BD94B7C2456C803FB74190973C3A36E88E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/3137392e39372e342e302f32322d3232203d3e20323632343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:82:61:bd:5a:d9:93:b7:e6:56:d7:bb:da:72:20:c0:8e:8c:
         e3:bf:72:41:81:21:b1:84:9c:d3:9b:8c:bc:25:c7:da:ce:dc:
         81:bd:81:e7:1f:69:fb:91:e9:87:38:be:ab:90:aa:65:37:c2:
         c8:a7:c3:1b:0e:e8:7a:cc:d8:55:fa:8e:3e:d6:b3:38:c6:2d:
         ec:09:99:42:bc:8d:a0:27:28:1e:a8:20:3d:a7:b2:19:e4:0a:
         53:c7:74:b6:3d:61:77:1a:0c:0d:05:18:12:68:12:1c:d6:8e:
         b0:16:df:7e:36:74:d7:c5:92:2a:2f:96:70:d9:4e:15:49:02:
         9b:d0:8c:6e:58:c4:b5:ef:e0:0b:36:0d:3d:f7:58:07:80:b3:
         03:4a:88:d6:31:cf:bd:1b:86:d1:4a:df:27:de:68:5c:32:d6:
         ef:b8:d5:31:c6:13:db:2a:1b:a6:eb:d7:af:2d:e6:ff:a5:b0:
         19:22:b1:79:f4:63:3f:dc:2b:09:f8:60:5c:20:c9:aa:bb:fc:
         f1:bc:69:d7:64:24:1b:ec:06:5a:37:cd:84:e6:c1:13:9d:ae:
         3b:e6:3a:7d:c4:50:d8:04:73:93:c0:ce:d2:c6:93:c6:d3:37:
         8b:5f:cd:56:1f:46:85:5d:79:03:7a:ce:52:c6:c3:71:ed:62:
         f9:d0:90:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:03:06 2025 by rpki-client