Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/3137392e39372e35312e302f32342d3234203d3e203532393632.roa
File:                     3137392e39372e35312e302f32342d3234203d3e203532393632.roa (raw, json)
Hash identifier:          Zm241UfUfg7TYKTFj00eBPzKSIzbvr/rcUhnL5Y1Q14=
Subject key identifier:   AC:90:21:2C:D3:B1:14:39:4F:73:E8:A0:ED:E8:78:C3:A4:7B:B6:61
Certificate issuer:       /CN=5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C
Certificate serial:       4300ED67FD9840962B7BF57D479D71ED22750C28
Authority key identifier: 5A:EE:39:E0:3A:3D:AE:A5:B7:81:8D:FE:7D:26:45:BC:EC:E4:DD:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/3137392e39372e35312e302f32342d3234203d3e203532393632.roa
Signing time:             Tue 09 Jun 2026 22:45:58 +0000
ROA not before:           Tue 09 Jun 2026 22:40:58 +0000
ROA not after:            Tue 08 Jun 2027 22:45:58 +0000
asID:                     52962
IP address blocks:        179.97.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.crl
                          rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 19:48:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:00:ed:67:fd:98:40:96:2b:7b:f5:7d:47:9d:71:ed:22:75:0c:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C
        Validity
            Not Before: Jun  9 22:40:58 2026 GMT
            Not After : Jun  8 22:45:58 2027 GMT
        Subject: CN=AC90212CD3B114394F73E8A0EDE878C3A47BB661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9c:6e:f0:a9:71:fc:d8:34:b6:3c:e6:68:4b:
                    e8:a8:62:bf:60:c6:61:f9:79:cb:4b:30:04:f3:c7:
                    a2:93:df:18:3d:f1:1c:70:65:39:55:48:3c:53:98:
                    6a:b0:49:b1:4e:d2:92:ca:cc:7c:31:f4:81:56:c8:
                    62:37:0f:f0:93:b6:5f:f3:20:dc:a6:38:5e:13:75:
                    6d:c1:30:18:42:8e:cf:95:4d:69:36:8a:ff:a1:a4:
                    de:6f:c6:15:9e:44:7f:81:14:cb:cb:dd:bd:ba:da:
                    7c:f7:9e:4b:e0:91:1c:96:6f:86:81:0f:75:95:36:
                    c6:5a:9c:f0:34:e8:07:71:58:ea:2f:f8:9e:48:d5:
                    d3:a1:5e:84:86:7d:fc:73:d9:9b:52:57:98:e1:b8:
                    d1:d8:0e:4a:a7:ee:39:a2:10:cc:2f:a9:2d:b5:64:
                    6e:ea:a1:d0:aa:7a:5d:8c:0b:eb:da:4f:4f:66:1d:
                    5d:1d:95:23:2e:24:67:73:b6:a5:39:c2:97:94:4c:
                    32:c5:1d:1f:a1:1e:af:26:da:4e:6c:b1:09:cf:0d:
                    9a:67:9f:4a:c4:68:df:09:a8:ef:ad:69:91:0d:e0:
                    ce:8d:21:6d:c9:9a:9a:73:97:34:cb:43:53:9b:c2:
                    a6:f5:43:94:4c:ec:a1:50:ec:ed:e5:6f:47:fa:c4:
                    9c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:90:21:2C:D3:B1:14:39:4F:73:E8:A0:ED:E8:78:C3:A4:7B:B6:61
            X509v3 Authority Key Identifier:
                keyid:5A:EE:39:E0:3A:3D:AE:A5:B7:81:8D:FE:7D:26:45:BC:EC:E4:DD:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/3137392e39372e35312e302f32342d3234203d3e203532393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:68:81:5a:c1:bd:68:b4:2a:fd:e9:7e:7f:af:92:72:4a:5a:
         67:e3:9e:9b:8d:5b:48:43:b6:6c:66:de:be:cc:79:60:b5:c3:
         94:34:c0:55:98:b8:32:c1:44:8f:e4:8c:2e:82:db:fe:24:37:
         32:ff:04:56:65:95:e8:17:8d:26:f4:dc:54:ae:b4:79:61:b4:
         aa:28:cb:b3:30:79:49:fd:88:40:d1:e1:d1:99:46:8c:92:09:
         19:90:39:28:55:41:2c:22:23:ea:cd:b2:df:b0:59:24:01:7f:
         c6:b1:45:0a:7f:38:f2:22:ba:04:7a:5b:fd:fa:71:79:17:7a:
         b8:ac:ae:8e:9e:f7:97:4b:a3:c1:cb:df:a6:f0:05:28:f6:42:
         87:cb:3d:32:2a:c2:5b:19:0e:fa:fd:cb:d0:18:af:08:4e:68:
         8d:52:09:17:34:0f:16:52:a8:3e:fb:40:4d:09:99:18:5b:65:
         8b:37:6a:38:ee:ca:1d:f0:4d:d2:9d:26:06:27:57:87:4c:04:
         73:19:f4:9e:9f:2e:1c:37:b7:c2:04:78:63:d3:b4:f0:3d:d8:
         0c:a3:8b:74:3a:b3:8a:d7:67:bf:76:9e:37:56:06:55:c9:cd:
         7e:11:73:6c:21:6a:35:5f:98:80:e5:3a:be:0b:9d:fd:b4:8c:
         6c:99:d1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:31:32 2026 by rpki-client