Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/3137392e39372e35392e302f32342d3234203d3e203532393632.roa
File:                     3137392e39372e35392e302f32342d3234203d3e203532393632.roa (raw, json)
Hash identifier:          j9SQIesgFJbT9Fe0Im6ADGLSyRhoCILg8aBZsGTWsCc=
Subject key identifier:   5E:5B:E4:BF:7E:B4:6B:59:34:AF:75:9E:FF:EF:9D:DD:B6:41:F0:2E
Certificate issuer:       /CN=5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C
Certificate serial:       2BD62FA0BA3C51791668270BAA72446A13C96FBA
Authority key identifier: 5A:EE:39:E0:3A:3D:AE:A5:B7:81:8D:FE:7D:26:45:BC:EC:E4:DD:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/3137392e39372e35392e302f32342d3234203d3e203532393632.roa
Signing time:             Tue 08 Jul 2025 22:34:37 +0000
ROA not before:           Tue 08 Jul 2025 22:29:37 +0000
ROA not after:            Tue 07 Jul 2026 22:34:37 +0000
asID:                     52962
IP address blocks:        179.97.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.crl
                          rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 08:26:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:d6:2f:a0:ba:3c:51:79:16:68:27:0b:aa:72:44:6a:13:c9:6f:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C
        Validity
            Not Before: Jul  8 22:29:37 2025 GMT
            Not After : Jul  7 22:34:37 2026 GMT
        Subject: CN=5E5BE4BF7EB46B5934AF759EFFEF9DDDB641F02E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:45:70:5d:cf:b6:b8:9b:f5:bf:32:ef:a2:c6:
                    a3:d4:08:c1:22:1e:ec:da:fe:02:54:ca:93:9a:26:
                    32:7f:97:a3:3a:57:2e:bc:fe:9d:af:93:d3:2b:cf:
                    b6:93:03:7b:ed:2e:80:7f:91:53:b9:b0:2d:65:3d:
                    05:3d:87:2d:ba:f1:b1:30:d7:b1:f7:8e:f1:8a:67:
                    3d:19:1c:46:ec:51:26:f5:bf:70:8d:3f:ac:3e:01:
                    bd:83:fd:19:80:52:34:83:ba:99:be:23:80:60:fa:
                    88:50:12:58:d6:32:99:a7:29:53:0b:4d:20:99:a5:
                    c1:ae:00:8e:b3:a5:85:12:0d:32:8d:4c:d6:39:78:
                    52:54:75:71:b8:b0:a6:64:cb:8e:ef:69:f7:34:c9:
                    c3:ec:f2:55:77:23:a7:95:aa:7b:76:20:c8:5f:b1:
                    5a:0a:83:16:7f:1a:e8:e3:b9:76:45:91:43:ad:2c:
                    42:8d:47:23:ca:01:40:a1:bd:5a:90:63:e3:c5:91:
                    4d:a0:53:a9:0c:9d:76:9b:2b:37:93:d5:6b:fb:73:
                    b9:e2:06:b8:05:b3:4c:f2:05:15:53:25:10:b7:23:
                    00:17:38:37:1a:6d:08:fb:80:4a:5b:67:d5:e8:ef:
                    df:b3:91:24:24:15:35:6b:f1:ab:e6:a8:8e:12:b0:
                    56:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:5B:E4:BF:7E:B4:6B:59:34:AF:75:9E:FF:EF:9D:DD:B6:41:F0:2E
            X509v3 Authority Key Identifier:
                keyid:5A:EE:39:E0:3A:3D:AE:A5:B7:81:8D:FE:7D:26:45:BC:EC:E4:DD:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/3137392e39372e35392e302f32342d3234203d3e203532393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:7d:66:8c:0b:ea:13:86:82:30:2c:e2:c3:e1:20:00:af:14:
         b2:e5:0d:54:ee:6f:82:8e:19:48:a9:d2:ab:e5:a1:17:66:4f:
         21:be:6c:2e:e1:72:05:87:89:a1:6f:3b:64:fe:c0:e5:6a:bc:
         67:d8:93:ce:1b:4d:6d:b4:50:bb:cb:0d:bf:47:30:1d:84:5b:
         04:4a:c6:ea:92:b1:61:72:28:b4:d4:41:54:aa:55:21:9c:70:
         36:0e:53:72:ca:c5:9b:59:7d:7a:bb:21:b3:ba:8a:bc:a4:7e:
         d8:9c:c4:5d:d1:97:b7:c2:14:07:a9:82:4c:40:ca:d8:e9:21:
         0d:05:11:39:c9:e4:c7:91:e8:5a:0d:0b:f5:44:d6:7e:f8:c4:
         cb:13:7f:8d:6e:18:84:71:a5:39:53:41:7d:83:91:60:ac:71:
         20:87:89:78:fe:f8:8f:78:af:2e:f0:70:d3:87:d4:0d:94:d8:
         63:b2:16:d1:e2:c7:12:d1:b3:67:bc:47:e8:8a:ee:d4:03:0e:
         cb:d8:b1:a1:88:9c:09:d2:35:07:0b:3a:2a:a2:fa:04:13:1d:
         f7:ae:d5:7c:b7:bb:26:c6:20:15:1b:7f:58:39:98:a9:af:a4:
         17:4c:8b:64:3e:09:6a:8d:91:c5:04:d3:16:55:18:cb:38:0f:
         2a:8f:9a:49
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUK9YvoLo8UXkWaCcLqnJEahPJb7owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUFFRTM5RTAzQTNEQUVBNUI3ODE4REZFN0QyNjQ1QkNF
Q0U0REQxQzAeFw0yNTA3MDgyMjI5MzdaFw0yNjA3MDcyMjM0MzdaMDMxMTAvBgNV
BAMTKDVFNUJFNEJGN0VCNDZCNTkzNEFGNzU5RUZGRUY5REREQjY0MUYwMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7RXBdz7a4m/W/Mu+ixqPUCMEi
Huza/gJUypOaJjJ/l6M6Vy68/p2vk9Mrz7aTA3vtLoB/kVO5sC1lPQU9hy268bEw
17H3jvGKZz0ZHEbsUSb1v3CNP6w+Ab2D/RmAUjSDupm+I4Bg+ohQEljWMpmnKVML
TSCZpcGuAI6zpYUSDTKNTNY5eFJUdXG4sKZky47vafc0ycPs8lV3I6eVqnt2IMhf
sVoKgxZ/GujjuXZFkUOtLEKNRyPKAUChvVqQY+PFkU2gU6kMnXabKzeT1Wv7c7ni
BrgFs0zyBRVTJRC3IwAXODcabQj7gEpbZ9Xo79+zkSQkFTVr8avmqI4SsFZzAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUXlvkv360a1k0r3We/++d3bZB8C4wHwYDVR0j
BBgwFoAUWu454Do9rqW3gY3+fSZFvOzk3RwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjF3alZvUFVlUndldURBV2tmZ3o0TkhGZTQ1ejFIRXdmcWlEQWdSRUpE
aFIvMC81QUVFMzlFMDNBM0RBRUE1Qjc4MThERkU3RDI2NDVCQ0VDRTRERDFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBRUUzOUUwM0EzREFFQTVC
NzgxOERGRTdEMjY0NUJDRUNFNEREMUMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Yxd2pWb1BVZVJ3ZXVEQVdrZmd6NE5IRmU0NXoxSEV3ZnFpREFnUkVKRGhSLzAv
MzEzNzM5MmUzOTM3MmUzNTM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjM5
MzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALNhOzANBgkqhkiG9w0BAQsFAAOCAQEAB31mjAvqE4aC
MCziw+EgAK8UsuUNVO5vgo4ZSKnSq+WhF2ZPIb5sLuFyBYeJoW87ZP7A5Wq8Z9iT
zhtNbbRQu8sNv0cwHYRbBErG6pKxYXIotNRBVKpVIZxwNg5TcsrFm1l9ershs7qK
vKR+2JzEXdGXt8IUB6mCTEDK2OkhDQUROcnkx5HoWg0L9UTWfvjEyxN/jW4YhHGl
OVNBfYORYKxxIIeJeP74j3ivLvBw04fUDZTYY7IW0eLHEtGzZ7xH6Iru1AMOy9ix
oYicCdI1Bws6KqL6BBMd967VfLe7JsYgFRt/WDmYqa+kF0yLZD4Jao2RxQTTFlUY
yzgPKo+aSQ==
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:47:28 2025 by rpki-client