Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/3137392e39372e35332e302f32342d3234203d3e203532393632.roa
File:                     3137392e39372e35332e302f32342d3234203d3e203532393632.roa (raw, json)
Hash identifier:          qnNVQQQhwrRVj61bNseCRn4y0Bt7K+ZpVFw8r9YXUyw=
Subject key identifier:   7D:73:9E:EA:C7:E2:CD:B1:C1:43:48:A8:7B:CB:00:76:89:DE:88:88
Certificate issuer:       /CN=5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C
Certificate serial:       2D4234BC4F36373AC0CFDED8BFCB8B4E8980A16C
Authority key identifier: 5A:EE:39:E0:3A:3D:AE:A5:B7:81:8D:FE:7D:26:45:BC:EC:E4:DD:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/3137392e39372e35332e302f32342d3234203d3e203532393632.roa
Signing time:             Tue 08 Jul 2025 22:33:35 +0000
ROA not before:           Tue 08 Jul 2025 22:28:35 +0000
ROA not after:            Tue 07 Jul 2026 22:33:35 +0000
asID:                     52962
IP address blocks:        179.97.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.crl
                          rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 10:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:42:34:bc:4f:36:37:3a:c0:cf:de:d8:bf:cb:8b:4e:89:80:a1:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C
        Validity
            Not Before: Jul  8 22:28:35 2025 GMT
            Not After : Jul  7 22:33:35 2026 GMT
        Subject: CN=7D739EEAC7E2CDB1C14348A87BCB007689DE8888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:66:7c:fc:e2:d5:5b:78:8e:68:a7:fb:45:27:
                    f1:b1:19:93:7e:46:d0:27:e8:4c:df:30:bd:08:09:
                    91:4d:e5:e3:dd:0c:5d:ef:2c:90:17:20:48:b7:74:
                    e3:4b:f0:c9:18:a1:06:19:83:f5:97:ee:27:82:79:
                    53:45:c0:b0:aa:58:11:fe:2c:04:21:98:9a:7d:9f:
                    a3:fa:c3:91:68:31:7d:45:aa:66:17:84:9b:67:e8:
                    35:da:01:ea:3e:81:79:36:da:3d:b1:1b:a9:6b:8e:
                    f7:c5:f3:fb:f6:54:0f:af:1f:1c:33:ea:e1:99:30:
                    4d:a3:67:b5:f2:27:bf:92:e3:4e:60:26:fd:5f:33:
                    54:8b:37:a6:23:be:ba:00:73:82:1f:bc:29:f3:af:
                    65:41:36:fe:71:f0:2b:0f:c6:a8:8e:99:09:b6:d2:
                    0d:e1:dc:5b:21:a1:bb:6d:26:cd:79:f5:e6:7b:8d:
                    03:24:92:78:47:a4:19:57:4c:1e:80:06:3b:64:d4:
                    0f:7d:7a:c9:4b:30:80:6b:f4:29:28:d0:10:90:96:
                    53:17:32:ed:d4:f5:e9:50:44:87:f0:aa:25:dd:ff:
                    da:d0:b8:8e:d3:61:88:46:32:57:92:98:ae:63:a2:
                    3b:f3:36:3d:fb:ea:27:fd:e6:90:7f:c0:75:ca:1d:
                    f1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:73:9E:EA:C7:E2:CD:B1:C1:43:48:A8:7B:CB:00:76:89:DE:88:88
            X509v3 Authority Key Identifier:
                keyid:5A:EE:39:E0:3A:3D:AE:A5:B7:81:8D:FE:7D:26:45:BC:EC:E4:DD:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/3137392e39372e35332e302f32342d3234203d3e203532393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:90:8a:4c:8c:e2:37:ac:c4:f7:77:82:fe:e1:a6:51:88:99:
         b6:ad:e3:25:dc:84:bd:64:b4:26:6f:3a:06:18:2f:88:0c:e6:
         49:93:67:7f:af:70:8e:29:82:22:c6:b2:61:e0:40:f7:df:1b:
         53:00:4d:57:86:e2:a3:5a:6a:ed:55:af:34:cf:7b:a1:01:3a:
         ad:fc:bb:3f:8f:1a:5c:28:92:48:ec:f6:3e:c7:da:91:09:ec:
         c1:da:18:08:e7:cb:8c:42:0e:4d:6d:c6:6c:8e:da:a3:0c:39:
         3a:a0:6c:57:e8:fa:2d:85:a8:51:71:84:42:1b:b7:a5:db:4d:
         b7:fe:c8:35:78:79:37:9f:4a:b6:cb:cd:a6:11:b3:29:31:95:
         4a:2e:12:3d:a8:f2:f6:e4:fa:cd:54:c2:d1:bb:c4:7b:ba:ee:
         1e:1f:7b:bc:4e:10:0b:3f:1a:7d:0d:ca:6e:16:a0:c6:e6:c6:
         51:4c:c3:78:ea:66:97:41:a6:d4:90:12:a5:61:8c:a7:39:52:
         dd:2c:d4:b4:90:fa:f4:7e:e4:38:3b:c1:e3:3c:9e:79:5e:00:
         c6:5e:84:b9:03:60:b7:90:cc:f1:91:15:36:99:0d:a8:7d:cf:
         35:72:20:c6:93:ae:29:28:b1:bd:8d:a0:73:bc:42:ed:1e:b1:
         1c:b4:c5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 19:44:12 2025 by rpki-client