Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/3137392e39372e34382e302f32342d3234203d3e203532393632.roa
File:                     3137392e39372e34382e302f32342d3234203d3e203532393632.roa (raw, json)
Hash identifier:          vnJ3i1Ugsu5WzxDKgB8u+WFilHH3gqU6NFZe5OsLFh8=
Subject key identifier:   8C:16:8F:8E:A4:0B:A2:33:29:FE:F6:E0:BA:93:3B:3A:85:2A:3D:12
Certificate issuer:       /CN=5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C
Certificate serial:       738C276844A809138A12ACA25959C312561274A8
Authority key identifier: 5A:EE:39:E0:3A:3D:AE:A5:B7:81:8D:FE:7D:26:45:BC:EC:E4:DD:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/3137392e39372e34382e302f32342d3234203d3e203532393632.roa
Signing time:             Tue 09 Jun 2026 22:45:59 +0000
ROA not before:           Tue 09 Jun 2026 22:40:59 +0000
ROA not after:            Tue 08 Jun 2027 22:45:59 +0000
asID:                     52962
IP address blocks:        179.97.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.crl
                          rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 19:48:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:8c:27:68:44:a8:09:13:8a:12:ac:a2:59:59:c3:12:56:12:74:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C
        Validity
            Not Before: Jun  9 22:40:59 2026 GMT
            Not After : Jun  8 22:45:59 2027 GMT
        Subject: CN=8C168F8EA40BA23329FEF6E0BA933B3A852A3D12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:df:ff:37:4d:99:19:4a:23:2b:6b:6a:f1:f9:
                    b2:c7:f7:f1:5d:6d:f3:fb:03:c2:18:5c:c2:68:5a:
                    a1:82:22:54:9a:d5:f2:58:75:d7:54:a0:8d:89:a7:
                    12:c8:2a:f0:57:bc:95:ba:f4:c6:da:ff:84:95:9c:
                    dd:0a:1b:ad:a8:43:2d:f9:9f:8f:d6:69:41:14:f7:
                    29:26:12:13:6f:1a:53:dc:af:b9:73:72:1d:f1:c1:
                    ca:ab:3b:3b:df:4b:c2:ac:4f:e3:80:89:34:f9:df:
                    6a:77:9c:d9:7e:2e:86:00:95:e1:74:0e:4c:1d:36:
                    69:aa:93:36:b5:66:b6:e9:c4:85:a1:50:41:7b:53:
                    e6:ba:76:69:fd:7f:e3:96:ae:d2:4a:7c:96:77:29:
                    97:a6:20:e9:8e:88:01:5a:8e:5a:31:8a:bc:42:5f:
                    fb:04:69:fa:58:8d:b9:1d:fc:58:d1:d2:a3:f5:a6:
                    6b:ad:39:5b:1c:83:7c:4a:f4:66:16:83:f3:50:20:
                    bf:8f:d9:ba:b2:e2:41:15:86:99:22:87:1b:5e:54:
                    17:68:11:7f:17:80:f7:69:77:f5:5c:bb:b9:bb:45:
                    fc:a1:db:53:85:0a:d8:27:e3:6a:40:cc:f9:19:67:
                    bc:37:35:46:b0:d8:d8:0b:0d:b0:fc:1e:77:30:5f:
                    8c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:16:8F:8E:A4:0B:A2:33:29:FE:F6:E0:BA:93:3B:3A:85:2A:3D:12
            X509v3 Authority Key Identifier:
                keyid:5A:EE:39:E0:3A:3D:AE:A5:B7:81:8D:FE:7D:26:45:BC:EC:E4:DD:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/3137392e39372e34382e302f32342d3234203d3e203532393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:51:b2:aa:1a:c3:09:1e:21:e4:c6:bb:3f:9a:72:f1:bc:0d:
         bc:af:86:93:3d:ed:7b:3f:64:19:43:60:67:df:35:2c:da:bf:
         af:ee:e7:99:33:3c:d3:c5:16:67:f6:53:97:e3:90:af:77:8b:
         de:1d:94:41:2c:16:90:7d:a8:3a:55:2c:59:97:1b:75:7e:d4:
         2f:a4:b0:25:18:c3:a2:0a:ff:37:d7:30:a1:57:20:8e:80:27:
         ed:97:e5:f1:d1:5f:99:cf:a2:18:ad:c2:55:48:c4:be:5a:c0:
         c1:9a:18:df:a9:41:b2:81:b4:31:8f:e6:e7:5a:cd:44:30:56:
         ee:c1:5f:44:17:05:80:d3:5e:12:f9:f3:f5:8b:86:43:f4:41:
         93:65:29:6e:63:56:4b:b9:11:62:64:ed:2a:3e:9b:78:99:ea:
         df:da:76:1a:21:fd:10:43:34:34:59:a8:8e:53:c3:90:ff:46:
         51:14:7c:a0:24:f1:a0:5c:4a:ea:9f:e0:b8:5e:81:99:09:ee:
         09:41:52:e4:0c:b5:fc:2b:0c:e7:72:7e:eb:a4:c8:3e:74:d5:
         09:69:39:46:f8:33:6d:d5:49:d0:64:94:9e:2a:6b:8c:2c:9d:
         a6:1b:af:85:55:fa:46:c4:b4:7d:05:79:2c:f4:11:d1:dd:49:
         ff:d3:0e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:31:12 2026 by rpki-client