Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/3137392e39372e35352e302f32342d3234203d3e203532393632.roa
File:                     3137392e39372e35352e302f32342d3234203d3e203532393632.roa (raw, json)
Hash identifier:          HFT+CFVO93hSgn4WPBU90jsmRUg/m1IimO5sN5CsmYs=
Subject key identifier:   CE:DE:FC:99:BF:A2:03:E9:9A:93:67:6F:EA:0C:7E:66:BF:30:F1:0B
Certificate issuer:       /CN=5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C
Certificate serial:       30FD5DCBB3415255564E48D20F6D65B5F536D421
Authority key identifier: 5A:EE:39:E0:3A:3D:AE:A5:B7:81:8D:FE:7D:26:45:BC:EC:E4:DD:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/3137392e39372e35352e302f32342d3234203d3e203532393632.roa
Signing time:             Tue 08 Jul 2025 22:33:54 +0000
ROA not before:           Tue 08 Jul 2025 22:28:54 +0000
ROA not after:            Tue 07 Jul 2026 22:33:54 +0000
asID:                     52962
IP address blocks:        179.97.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.crl
                          rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 10:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:fd:5d:cb:b3:41:52:55:56:4e:48:d2:0f:6d:65:b5:f5:36:d4:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C
        Validity
            Not Before: Jul  8 22:28:54 2025 GMT
            Not After : Jul  7 22:33:54 2026 GMT
        Subject: CN=CEDEFC99BFA203E99A93676FEA0C7E66BF30F10B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ae:b8:93:8e:44:20:c5:3d:b6:f2:4e:dd:02:
                    20:e9:c7:f5:8a:03:00:75:51:2d:bb:ef:bf:5c:36:
                    61:7d:b6:77:22:03:9f:d5:15:d4:c8:c6:44:99:05:
                    3a:ec:15:a0:14:52:5f:5d:cf:55:60:1a:57:e6:36:
                    75:3f:26:7b:57:a7:42:d9:57:3e:74:29:5f:97:65:
                    51:b5:ff:d9:fd:c5:46:0b:34:a6:8c:e9:72:6b:17:
                    ee:2d:b1:cd:8c:0d:97:09:c7:01:d1:8b:17:12:bf:
                    67:cb:05:31:68:8b:9b:c0:78:1c:df:dd:6f:7a:81:
                    0c:15:96:fc:93:f1:f6:a0:8c:7e:bc:31:a8:5a:3a:
                    f1:2a:dd:ac:7e:04:27:42:72:fc:39:f4:c6:19:bb:
                    a4:67:84:2f:9b:fc:4b:2a:cc:60:59:4e:dc:18:7b:
                    27:9a:1e:07:b0:02:38:ca:7a:d6:7c:d9:d4:f7:d8:
                    ab:94:bd:5c:8d:a9:81:e9:e2:ec:98:25:f6:68:84:
                    d8:41:a0:c2:38:85:da:24:d1:00:2b:f6:30:8a:c7:
                    ce:21:75:81:08:78:22:b8:85:ca:ff:d6:75:74:9a:
                    69:78:bc:d2:c0:7d:10:ff:bb:e2:fb:80:10:19:4f:
                    a5:f3:f2:41:65:83:a3:d2:d9:67:8b:fb:32:e7:2c:
                    59:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:DE:FC:99:BF:A2:03:E9:9A:93:67:6F:EA:0C:7E:66:BF:30:F1:0B
            X509v3 Authority Key Identifier:
                keyid:5A:EE:39:E0:3A:3D:AE:A5:B7:81:8D:FE:7D:26:45:BC:EC:E4:DD:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/3137392e39372e35352e302f32342d3234203d3e203532393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:4b:62:f9:a6:c5:f9:53:2f:e8:20:bc:47:ae:7b:20:56:74:
         82:c7:b0:78:cc:71:81:8a:0c:e2:7d:80:9b:9e:fe:87:a5:21:
         8e:34:b6:9c:cf:48:bd:c0:33:ea:7e:8c:ec:ef:fd:44:23:c8:
         e3:27:92:7d:61:af:23:25:81:f8:51:d7:75:da:88:0e:05:35:
         11:3c:29:34:74:15:83:e8:1b:c7:cf:c4:36:29:89:07:fe:03:
         59:a4:fe:38:a8:86:2f:00:62:da:0a:17:73:3f:26:88:32:1b:
         24:7b:5e:10:70:ea:55:2d:4b:9a:a0:9f:63:fe:81:e5:99:96:
         7e:47:d4:99:28:8f:06:02:49:c3:77:97:ad:5f:4b:62:d9:08:
         35:b7:ec:2c:c2:e9:b6:46:ef:4e:30:5d:1f:16:c7:c7:39:2e:
         cd:d2:98:2b:ff:cf:18:fd:ad:22:a7:d0:0b:da:67:02:1a:62:
         aa:79:98:9e:c1:40:65:e4:f9:d1:f5:d4:cd:f9:75:23:30:6e:
         a3:53:31:b9:31:59:64:46:c1:75:56:45:70:a4:94:85:9e:67:
         ba:57:31:c6:b5:f3:22:55:10:e4:d4:28:c3:b9:ac:e3:d4:75:
         3d:11:85:01:c6:32:c1:47:52:41:91:c6:70:dd:82:1e:ae:4a:
         07:26:72:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 19:41:04 2025 by rpki-client