Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/3137392e39372e35382e302f32342d3234203d3e203532393632.roa
File:                     3137392e39372e35382e302f32342d3234203d3e203532393632.roa (raw, json)
Hash identifier:          vRJs5yQM6ZgE851oB0z6pQo171yGQDsdU7FFNu5Aju8=
Subject key identifier:   02:50:E0:4B:1D:99:A4:04:13:C4:7C:3B:3A:CF:24:4D:6C:95:B9:E3
Certificate issuer:       /CN=5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C
Certificate serial:       0D71BCA1603934C0CC89E4B88FACADA720A28987
Authority key identifier: 5A:EE:39:E0:3A:3D:AE:A5:B7:81:8D:FE:7D:26:45:BC:EC:E4:DD:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/3137392e39372e35382e302f32342d3234203d3e203532393632.roa
Signing time:             Tue 08 Jul 2025 22:34:29 +0000
ROA not before:           Tue 08 Jul 2025 22:29:29 +0000
ROA not after:            Tue 07 Jul 2026 22:34:29 +0000
asID:                     52962
IP address blocks:        179.97.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.crl
                          rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 08:26:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:71:bc:a1:60:39:34:c0:cc:89:e4:b8:8f:ac:ad:a7:20:a2:89:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C
        Validity
            Not Before: Jul  8 22:29:29 2025 GMT
            Not After : Jul  7 22:34:29 2026 GMT
        Subject: CN=0250E04B1D99A40413C47C3B3ACF244D6C95B9E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:78:8b:31:19:ff:cc:4f:3c:e5:77:6f:6e:13:
                    67:8f:3a:29:aa:fb:2f:64:ae:40:82:e0:50:8c:5c:
                    78:97:95:e6:e4:80:1c:10:cb:af:74:28:27:e5:81:
                    02:0e:a6:16:67:2a:6c:1a:26:8b:4d:c5:5b:15:96:
                    1e:61:3b:2d:6b:9b:a8:44:52:06:b6:6d:10:17:d3:
                    8b:35:fe:96:d6:06:7d:ff:58:03:1a:b9:8e:0f:b9:
                    af:a3:9c:57:dc:15:a5:51:14:9d:34:f5:2e:51:99:
                    ad:9b:d9:1b:66:10:3b:c5:ed:e1:82:a4:6e:10:57:
                    89:bb:59:c9:b1:8a:2b:50:a0:2d:86:0c:31:7e:ab:
                    bd:8a:99:5f:70:b2:14:ea:a0:a3:d7:d2:71:9f:ad:
                    7f:dd:b7:cb:81:3f:b1:01:f2:ec:af:ab:bf:84:1f:
                    69:a2:22:57:af:e4:c1:3f:20:4e:e0:3c:39:46:38:
                    15:24:25:54:0f:13:a6:ee:a9:24:b8:e1:24:fb:04:
                    24:19:d5:ff:35:76:ef:0f:ce:86:2f:97:72:cd:70:
                    97:06:f9:75:10:8a:b4:36:b0:a2:70:08:0d:e2:2f:
                    03:3f:91:a4:a7:d4:26:2b:82:1a:ce:1e:87:f0:b3:
                    a8:8d:d7:96:e2:c0:46:b6:75:76:cc:a0:f3:1b:6d:
                    17:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:50:E0:4B:1D:99:A4:04:13:C4:7C:3B:3A:CF:24:4D:6C:95:B9:E3
            X509v3 Authority Key Identifier:
                keyid:5A:EE:39:E0:3A:3D:AE:A5:B7:81:8D:FE:7D:26:45:BC:EC:E4:DD:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/3137392e39372e35382e302f32342d3234203d3e203532393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:46:ad:22:1c:a1:80:75:b9:e0:88:92:f2:ff:fd:94:23:ec:
         36:e0:b2:6f:7f:ed:32:12:56:81:2d:0e:02:51:ba:a0:7a:03:
         ed:af:c7:88:b4:2e:b1:43:fe:d8:34:55:9f:cc:85:a7:69:52:
         12:b4:05:89:de:dc:26:17:83:a4:01:aa:c8:6b:34:c8:71:6e:
         fc:f7:e6:30:8c:0a:ce:38:d1:e0:32:b9:f9:74:30:0f:f8:33:
         42:6a:e2:44:3e:ea:e2:31:07:39:d5:34:ed:7b:b2:14:ee:48:
         af:aa:60:b5:8d:60:f6:d0:be:b2:b5:26:fd:02:e9:e4:84:78:
         f1:7e:e8:fe:3b:2e:00:47:3f:7b:cc:7d:80:e2:57:96:98:70:
         ca:17:70:59:2d:f3:ef:79:bb:b6:ad:ca:bd:ac:37:8d:c1:15:
         65:86:05:21:64:d7:f2:e7:b0:47:53:06:d2:ac:87:6e:15:73:
         71:7b:45:64:e5:69:06:fe:73:fd:45:13:41:2c:4f:4d:ac:0e:
         87:90:e6:01:d3:9b:7c:dc:29:d8:a4:68:81:a0:9b:6c:cd:21:
         c4:f7:c7:23:40:5c:53:4b:b6:70:b8:d7:5c:43:8d:b6:1c:65:
         cd:e7:f0:88:63:bc:10:32:98:52:9b:3e:51:00:b9:4a:ee:69:
         f3:b2:00:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:47:17 2025 by rpki-client