Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/3137392e39372e34382e302f32342d3234203d3e203532393632.roa
File:                     3137392e39372e34382e302f32342d3234203d3e203532393632.roa (raw, json)
Hash identifier:          SGrvi6negrHR0PKHXqJxAhsgj3KivJ94paFMNk+8O3g=
Subject key identifier:   40:D4:2F:3E:08:14:87:7D:66:31:7C:0C:56:0F:9F:98:CD:0A:C7:5A
Certificate issuer:       /CN=5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C
Certificate serial:       0B906FA0AFFEECE549E0ED1A471D5CB1FA7844FF
Authority key identifier: 5A:EE:39:E0:3A:3D:AE:A5:B7:81:8D:FE:7D:26:45:BC:EC:E4:DD:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/3137392e39372e34382e302f32342d3234203d3e203532393632.roa
Signing time:             Tue 08 Jul 2025 22:32:01 +0000
ROA not before:           Tue 08 Jul 2025 22:27:01 +0000
ROA not after:            Tue 07 Jul 2026 22:32:01 +0000
asID:                     52962
IP address blocks:        179.97.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.crl
                          rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 10:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:90:6f:a0:af:fe:ec:e5:49:e0:ed:1a:47:1d:5c:b1:fa:78:44:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C
        Validity
            Not Before: Jul  8 22:27:01 2025 GMT
            Not After : Jul  7 22:32:01 2026 GMT
        Subject: CN=40D42F3E0814877D66317C0C560F9F98CD0AC75A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2b:42:e2:20:82:a8:f6:b2:2a:ff:1c:14:bc:
                    f3:1f:7c:c6:04:a5:da:10:02:78:08:d2:4f:1d:87:
                    c1:b5:fe:39:eb:2e:3c:e7:59:ad:b1:6e:e3:dc:45:
                    35:1e:1e:72:1f:e2:91:3c:64:cc:03:ed:1c:c9:f0:
                    37:4c:01:84:65:08:ff:58:67:ef:23:46:d5:bd:4a:
                    e7:a5:af:94:4d:e6:ea:ad:20:d5:25:75:2d:8b:ae:
                    b8:01:f5:09:c1:bb:dc:0a:44:a4:4f:ea:fc:1e:a7:
                    ae:dc:5e:fd:e1:56:20:3e:12:a3:0f:98:8d:ab:34:
                    15:22:9e:e4:ea:0f:ca:da:fa:2c:ce:4c:0f:24:db:
                    f2:60:ce:c1:fe:4d:16:4e:d8:b4:f2:a7:53:7c:10:
                    cc:b1:5a:cf:4d:3b:0c:ca:dd:0a:b3:39:ec:27:fd:
                    4b:9a:ea:be:ee:e7:2b:d5:3e:6a:b0:22:3b:12:aa:
                    aa:98:f6:2a:da:9d:d8:97:b2:5e:12:bf:b1:36:23:
                    03:61:d1:61:81:d5:81:e3:41:13:2f:eb:de:6a:7c:
                    04:10:df:3c:04:2b:03:35:2b:d3:70:9e:85:28:7c:
                    2c:20:39:ee:30:ac:e8:43:8b:c2:3d:c3:71:e4:ae:
                    59:62:44:4a:47:e8:9a:a8:0b:71:3c:c2:ff:2a:b3:
                    71:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D4:2F:3E:08:14:87:7D:66:31:7C:0C:56:0F:9F:98:CD:0A:C7:5A
            X509v3 Authority Key Identifier:
                keyid:5A:EE:39:E0:3A:3D:AE:A5:B7:81:8D:FE:7D:26:45:BC:EC:E4:DD:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/3137392e39372e34382e302f32342d3234203d3e203532393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:1b:b8:ce:fe:1b:b1:77:c5:48:e9:8b:0d:a3:f5:c1:98:7f:
         c7:d6:0e:31:3b:80:1c:40:07:ad:50:d9:57:91:ab:e1:54:39:
         08:2f:86:eb:f2:5e:83:1f:f3:e2:49:93:cd:1c:53:ba:27:ea:
         03:f3:78:d6:fd:ba:d0:ff:22:a6:fb:1e:c4:75:c6:f1:a9:ff:
         30:02:33:07:b2:76:6e:72:e7:79:9c:12:d6:f9:fa:e3:c8:6a:
         61:62:d3:6f:40:9b:ca:b8:1e:48:88:63:05:f3:15:ad:94:4e:
         c0:7e:4b:4d:aa:fa:ef:ec:0e:d6:5b:9e:a5:a9:92:d0:67:28:
         73:a6:d9:d2:74:3f:a5:83:df:15:4a:a6:57:d8:1e:5d:8a:ce:
         31:53:63:4c:3e:25:71:1b:ae:f1:f8:84:25:45:05:87:b9:35:
         90:8d:09:81:0b:1a:ce:4f:6d:b8:8a:a6:fe:d8:15:5e:17:96:
         48:07:bc:c7:92:5a:84:f3:4f:41:bf:d0:46:7f:d5:cf:07:60:
         c8:57:d9:f7:f4:54:d9:0f:1a:1a:51:ee:03:6a:7f:f2:83:31:
         6f:19:54:e6:10:4f:60:cc:0f:b4:f6:9b:fc:18:cc:de:02:27:
         e6:11:57:de:c0:06:3f:c4:2f:b8:6b:48:1f:bb:85:be:1b:9f:
         eb:49:f3:8c
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUC5BvoK/+7OVJ4O0aRx1csfp4RP8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUFFRTM5RTAzQTNEQUVBNUI3ODE4REZFN0QyNjQ1QkNF
Q0U0REQxQzAeFw0yNTA3MDgyMjI3MDFaFw0yNjA3MDcyMjMyMDFaMDMxMTAvBgNV
BAMTKDQwRDQyRjNFMDgxNDg3N0Q2NjMxN0MwQzU2MEY5Rjk4Q0QwQUM3NUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1K0LiIIKo9rIq/xwUvPMffMYE
pdoQAngI0k8dh8G1/jnrLjznWa2xbuPcRTUeHnIf4pE8ZMwD7RzJ8DdMAYRlCP9Y
Z+8jRtW9Suelr5RN5uqtINUldS2LrrgB9QnBu9wKRKRP6vwep67cXv3hViA+EqMP
mI2rNBUinuTqD8ra+izOTA8k2/JgzsH+TRZO2LTyp1N8EMyxWs9NOwzK3QqzOewn
/Uua6r7u5yvVPmqwIjsSqqqY9irandiXsl4Sv7E2IwNh0WGB1YHjQRMv695qfAQQ
3zwEKwM1K9NwnoUofCwgOe4wrOhDi8I9w3HkrlliREpH6JqoC3E8wv8qs3E7AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUQNQvPggUh31mMXwMVg+fmM0Kx1owHwYDVR0j
BBgwFoAUWu454Do9rqW3gY3+fSZFvOzk3RwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjF3alZvUFVlUndldURBV2tmZ3o0TkhGZTQ1ejFIRXdmcWlEQWdSRUpE
aFIvMC81QUVFMzlFMDNBM0RBRUE1Qjc4MThERkU3RDI2NDVCQ0VDRTRERDFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBRUUzOUUwM0EzREFFQTVC
NzgxOERGRTdEMjY0NUJDRUNFNEREMUMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Yxd2pWb1BVZVJ3ZXVEQVdrZmd6NE5IRmU0NXoxSEV3ZnFpREFnUkVKRGhSLzAv
MzEzNzM5MmUzOTM3MmUzNDM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjM5
MzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALNhMDANBgkqhkiG9w0BAQsFAAOCAQEApBu4zv4bsXfF
SOmLDaP1wZh/x9YOMTuAHEAHrVDZV5Gr4VQ5CC+G6/Jegx/z4kmTzRxTuifqA/N4
1v260P8ipvsexHXG8an/MAIzB7J2bnLneZwS1vn648hqYWLTb0CbyrgeSIhjBfMV
rZROwH5LTar67+wO1luepamS0Gcoc6bZ0nQ/pYPfFUqmV9geXYrOMVNjTD4lcRuu
8fiEJUUFh7k1kI0JgQsazk9tuIqm/tgVXheWSAe8x5JahPNPQb/QRn/VzwdgyFfZ
9/RU2Q8aGlHuA2p/8oMxbxlU5hBPYMwPtPab/BjM3gIn5hFX3sAGP8QvuGtIH7uF
vhuf60nzjA==
-----END CERTIFICATE-----
Generated at Wed Aug 20 19:44:10 2025 by rpki-client