Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/3137392e39372e35302e302f32342d3234203d3e203532393632.roa
File:                     3137392e39372e35302e302f32342d3234203d3e203532393632.roa (raw, json)
Hash identifier:          NyAfDVp7UebyUMuEkbbd3JpFbgatstCg++vt6yyUGSc=
Subject key identifier:   15:0C:49:85:07:C1:25:5F:E1:FC:DF:7C:C8:C1:00:6A:B5:5D:41:93
Certificate issuer:       /CN=5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C
Certificate serial:       265EC7FA2EC7BCDEE9B6B702F8D1C9046EC54C52
Authority key identifier: 5A:EE:39:E0:3A:3D:AE:A5:B7:81:8D:FE:7D:26:45:BC:EC:E4:DD:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/3137392e39372e35302e302f32342d3234203d3e203532393632.roa
Signing time:             Tue 08 Jul 2025 22:33:01 +0000
ROA not before:           Tue 08 Jul 2025 22:28:01 +0000
ROA not after:            Tue 07 Jul 2026 22:33:01 +0000
asID:                     52962
IP address blocks:        179.97.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.crl
                          rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 08:26:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:5e:c7:fa:2e:c7:bc:de:e9:b6:b7:02:f8:d1:c9:04:6e:c5:4c:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C
        Validity
            Not Before: Jul  8 22:28:01 2025 GMT
            Not After : Jul  7 22:33:01 2026 GMT
        Subject: CN=150C498507C1255FE1FCDF7CC8C1006AB55D4193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d5:29:ec:e5:00:89:b2:ea:0e:42:4a:d6:93:
                    d8:0f:56:e8:c1:6a:c1:eb:3a:d2:d1:26:91:67:70:
                    69:fe:50:5b:af:0e:0b:5b:35:c3:29:e1:ba:71:20:
                    20:83:3d:23:4c:d9:ea:71:b2:83:fe:3a:b6:36:cc:
                    29:8e:04:cf:9c:38:42:47:ce:3d:25:f8:a9:b7:bd:
                    ee:1c:54:f4:16:e0:a1:3e:ab:10:ab:b9:8f:d8:3b:
                    13:65:6b:09:f8:00:04:fd:6a:ae:12:99:a9:7f:9b:
                    fd:e2:05:21:d4:ad:ae:71:b1:8f:c9:26:85:2d:73:
                    77:95:06:a0:3a:61:e5:3b:30:28:4f:71:b3:91:c7:
                    92:21:cc:d3:68:61:af:3f:7a:eb:b3:b4:ae:8d:2f:
                    23:3a:da:46:f6:1e:f5:94:bc:7c:6d:10:24:7e:d2:
                    4b:59:8d:13:3b:a5:98:3b:25:58:6e:5d:80:95:61:
                    8f:e7:df:31:8d:87:c3:1f:79:a1:b0:9f:f8:eb:69:
                    6d:11:7b:82:99:2c:2e:c4:9f:4a:c4:56:5e:b6:60:
                    99:c8:c7:2b:ac:da:b7:5e:da:57:7b:86:96:bd:71:
                    a6:c9:b5:ac:a9:d7:1e:ce:4a:9e:f5:8c:da:20:02:
                    18:bd:ae:3d:87:fe:75:19:eb:28:31:39:2c:f2:51:
                    72:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:0C:49:85:07:C1:25:5F:E1:FC:DF:7C:C8:C1:00:6A:B5:5D:41:93
            X509v3 Authority Key Identifier:
                keyid:5A:EE:39:E0:3A:3D:AE:A5:B7:81:8D:FE:7D:26:45:BC:EC:E4:DD:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/3137392e39372e35302e302f32342d3234203d3e203532393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:0d:86:c1:40:71:8c:05:05:37:98:f6:10:a5:b2:8c:f3:a3:
         63:d9:b9:85:77:e6:0b:2f:44:a9:ac:74:4d:7f:ec:01:2c:12:
         db:1b:8a:14:b7:04:fc:19:3a:89:b6:48:d5:1a:fa:b2:8e:89:
         12:59:8d:26:80:a9:58:0f:da:77:3c:54:4a:a8:d2:a5:98:ce:
         2b:c4:23:93:0e:36:08:7d:a9:83:76:e9:75:86:e0:75:f0:df:
         47:d9:27:78:21:5c:a9:a5:e7:0e:a3:30:d8:86:61:f9:5e:15:
         fc:9b:a8:71:0c:3d:5c:b6:8f:fd:b5:a1:df:6e:c5:f2:0a:4b:
         39:ec:a1:33:2c:81:e1:9e:86:c5:86:47:79:48:a5:7e:ce:08:
         b6:7a:fd:79:27:a6:9a:a2:cb:19:4e:21:41:4c:af:3a:ce:5b:
         6a:34:b5:ca:31:87:66:6e:19:6e:ce:2e:7d:ac:8e:73:a1:68:
         ac:93:72:e9:e8:b9:4f:05:87:a1:9d:a7:38:53:08:b5:31:50:
         00:ed:97:e0:9f:3a:90:e4:06:85:4e:13:c5:48:a1:a8:ce:83:
         f2:eb:7d:c8:f9:b5:9d:3d:2b:70:5a:21:3e:d8:3c:5b:75:0b:
         a3:c2:c8:37:dc:fb:50:24:46:27:8a:7d:46:16:0b:e8:3f:a2:
         68:bb:3e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:48:45 2025 by rpki-client