Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/3137392e39372e35322e302f32342d3234203d3e203532393632.roa
File:                     3137392e39372e35322e302f32342d3234203d3e203532393632.roa (raw, json)
Hash identifier:          d7e5o5b+wZ1NVpgfbxBsSZ31ykdK/E6OtldqceaLs/M=
Subject key identifier:   2C:F9:B6:6F:45:04:56:6E:CB:AC:BA:4D:D3:59:48:EF:C0:45:9E:9A
Certificate issuer:       /CN=5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C
Certificate serial:       2068DEB25437BB01B4183600E06C74A3EDDF2BC6
Authority key identifier: 5A:EE:39:E0:3A:3D:AE:A5:B7:81:8D:FE:7D:26:45:BC:EC:E4:DD:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/3137392e39372e35322e302f32342d3234203d3e203532393632.roa
Signing time:             Tue 08 Jul 2025 22:33:24 +0000
ROA not before:           Tue 08 Jul 2025 22:28:24 +0000
ROA not after:            Tue 07 Jul 2026 22:33:24 +0000
asID:                     52962
IP address blocks:        179.97.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.crl
                          rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 10:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:68:de:b2:54:37:bb:01:b4:18:36:00:e0:6c:74:a3:ed:df:2b:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C
        Validity
            Not Before: Jul  8 22:28:24 2025 GMT
            Not After : Jul  7 22:33:24 2026 GMT
        Subject: CN=2CF9B66F4504566ECBACBA4DD35948EFC0459E9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:58:5a:19:58:80:dd:e6:a4:e6:4e:1c:f7:f1:
                    d6:62:8a:73:31:ad:48:db:3e:e9:a4:1d:1b:2e:67:
                    3b:8c:78:82:91:4d:93:3f:4a:38:1c:c0:a0:24:30:
                    4f:bd:20:d9:25:59:79:9e:d6:f9:8f:70:39:3c:0a:
                    0b:0f:15:b8:78:04:7d:eb:db:f6:96:1e:e8:20:55:
                    a3:6d:5a:bf:ae:e3:ee:e2:f8:fa:b5:20:94:32:29:
                    3d:32:3b:dc:f6:77:7c:27:1f:6e:cb:e9:f7:ce:82:
                    ae:7b:ca:70:7b:d3:27:9f:dd:16:c2:7f:3a:18:14:
                    b8:04:2a:13:2b:5a:7b:10:f2:ab:84:b6:83:c0:fd:
                    2e:38:51:80:e4:fe:d6:69:14:7b:c8:2a:9e:db:ad:
                    a6:ef:ad:21:4a:d2:46:68:74:12:fb:34:a5:88:f7:
                    88:31:4f:fc:b9:88:50:38:de:e7:df:2f:df:8f:fc:
                    21:83:59:22:f0:40:77:3a:df:fa:bd:d1:86:22:14:
                    3d:d6:2a:74:55:30:32:1b:e6:94:52:4c:42:02:b5:
                    af:4a:a2:47:1c:9c:a8:1f:b0:61:a4:98:f7:d2:f9:
                    be:21:8c:51:ff:08:3e:bc:e1:8d:11:68:d9:53:77:
                    12:6b:9e:4f:dc:f8:22:90:c9:9d:92:31:99:52:51:
                    3d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F9:B6:6F:45:04:56:6E:CB:AC:BA:4D:D3:59:48:EF:C0:45:9E:9A
            X509v3 Authority Key Identifier:
                keyid:5A:EE:39:E0:3A:3D:AE:A5:B7:81:8D:FE:7D:26:45:BC:EC:E4:DD:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/3137392e39372e35322e302f32342d3234203d3e203532393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:21:7b:01:41:3e:47:a6:7b:81:56:37:d2:76:75:ab:6c:56:
         e8:f4:51:2d:5e:98:4a:72:00:24:41:a5:1e:ec:b5:3c:b5:62:
         5e:0e:c7:53:d0:50:ab:ff:09:f1:5b:de:c1:27:4a:ab:48:6d:
         d8:50:05:f8:5f:cb:78:5e:8d:6a:27:63:30:8f:16:f6:8e:91:
         1d:27:67:71:9f:72:0f:7d:f5:6a:be:bb:bd:4e:2f:d1:48:4d:
         7b:92:27:e2:d6:33:45:30:a2:1c:03:2c:ca:ff:2f:cb:04:b6:
         32:94:ca:66:59:2b:0e:8d:1b:24:c7:3f:46:d6:41:70:e9:89:
         35:a9:b6:b4:00:d2:76:9b:c6:5a:6b:df:a4:b5:71:96:b4:3b:
         82:c2:66:ad:0b:bf:56:82:89:eb:e1:bd:2a:d1:f1:21:6b:e5:
         99:33:0b:47:04:1c:da:0e:7d:56:99:4d:4f:0f:10:28:26:78:
         c7:c4:56:46:6f:0c:05:47:1d:43:29:0a:8a:be:55:ed:cc:b0:
         a9:15:c7:17:39:09:8e:f4:38:73:11:cc:91:e8:eb:5f:97:68:
         a6:6c:fc:ff:80:06:29:6e:24:ed:98:91:42:31:57:51:27:50:
         72:ce:86:49:58:33:41:69:9d:1b:b8:4f:5d:70:58:1a:02:cc:
         ea:e0:5b:f4
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUIGjeslQ3uwG0GDYA4Gx0o+3fK8YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUFFRTM5RTAzQTNEQUVBNUI3ODE4REZFN0QyNjQ1QkNF
Q0U0REQxQzAeFw0yNTA3MDgyMjI4MjRaFw0yNjA3MDcyMjMzMjRaMDMxMTAvBgNV
BAMTKDJDRjlCNjZGNDUwNDU2NkVDQkFDQkE0REQzNTk0OEVGQzA0NTlFOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1WFoZWIDd5qTmThz38dZiinMx
rUjbPumkHRsuZzuMeIKRTZM/SjgcwKAkME+9INklWXme1vmPcDk8CgsPFbh4BH3r
2/aWHuggVaNtWr+u4+7i+Pq1IJQyKT0yO9z2d3wnH27L6ffOgq57ynB70yef3RbC
fzoYFLgEKhMrWnsQ8quEtoPA/S44UYDk/tZpFHvIKp7brabvrSFK0kZodBL7NKWI
94gxT/y5iFA43uffL9+P/CGDWSLwQHc63/q90YYiFD3WKnRVMDIb5pRSTEICta9K
okccnKgfsGGkmPfS+b4hjFH/CD684Y0RaNlTdxJrnk/c+CKQyZ2SMZlSUT2LAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQULPm2b0UEVm7LrLpN01lI78BFnpowHwYDVR0j
BBgwFoAUWu454Do9rqW3gY3+fSZFvOzk3RwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjF3alZvUFVlUndldURBV2tmZ3o0TkhGZTQ1ejFIRXdmcWlEQWdSRUpE
aFIvMC81QUVFMzlFMDNBM0RBRUE1Qjc4MThERkU3RDI2NDVCQ0VDRTRERDFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBRUUzOUUwM0EzREFFQTVC
NzgxOERGRTdEMjY0NUJDRUNFNEREMUMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Yxd2pWb1BVZVJ3ZXVEQVdrZmd6NE5IRmU0NXoxSEV3ZnFpREFnUkVKRGhSLzAv
MzEzNzM5MmUzOTM3MmUzNTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjM5
MzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALNhNDANBgkqhkiG9w0BAQsFAAOCAQEAEyF7AUE+R6Z7
gVY30nZ1q2xW6PRRLV6YSnIAJEGlHuy1PLViXg7HU9BQq/8J8VvewSdKq0ht2FAF
+F/LeF6NaidjMI8W9o6RHSdncZ9yD331ar67vU4v0UhNe5In4tYzRTCiHAMsyv8v
ywS2MpTKZlkrDo0bJMc/RtZBcOmJNam2tADSdpvGWmvfpLVxlrQ7gsJmrQu/VoKJ
6+G9KtHxIWvlmTMLRwQc2g59VplNTw8QKCZ4x8RWRm8MBUcdQykKir5V7cywqRXH
FzkJjvQ4cxHMkejrX5dopmz8/4AGKW4k7ZiRQjFXUSdQcs6GSVgzQWmdG7hPXXBY
GgLM6uBb9A==
-----END CERTIFICATE-----
Generated at Wed Aug 20 19:41:07 2025 by rpki-client