Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/3137392e39372e35372e302f32342d3234203d3e203532393632.roa
File:                     3137392e39372e35372e302f32342d3234203d3e203532393632.roa (raw, json)
Hash identifier:          cn4r3+qaJ7WVOLPS5bFOuBwaqSs2LcKKFfidnbEtPT0=
Subject key identifier:   AA:A9:2D:5E:61:A0:DC:11:B3:A3:4F:46:39:CD:B5:43:FA:EF:95:BC
Certificate issuer:       /CN=5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C
Certificate serial:       075656B1ADDCA59566C53D4B716A70616566D41D
Authority key identifier: 5A:EE:39:E0:3A:3D:AE:A5:B7:81:8D:FE:7D:26:45:BC:EC:E4:DD:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/3137392e39372e35372e302f32342d3234203d3e203532393632.roa
Signing time:             Tue 09 Jun 2026 22:45:58 +0000
ROA not before:           Tue 09 Jun 2026 22:40:58 +0000
ROA not after:            Tue 08 Jun 2027 22:45:58 +0000
asID:                     52962
IP address blocks:        179.97.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.crl
                          rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 19:48:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:56:56:b1:ad:dc:a5:95:66:c5:3d:4b:71:6a:70:61:65:66:d4:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C
        Validity
            Not Before: Jun  9 22:40:58 2026 GMT
            Not After : Jun  8 22:45:58 2027 GMT
        Subject: CN=AAA92D5E61A0DC11B3A34F4639CDB543FAEF95BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:de:5c:52:c4:34:51:03:74:c1:3a:12:eb:10:
                    15:e3:aa:5b:9b:4a:8f:80:a6:d2:d5:51:ec:fb:21:
                    3b:3b:04:e3:4d:0f:d7:01:36:92:40:76:22:75:20:
                    7b:8b:1f:b2:e1:5c:24:83:2e:6b:74:10:f2:4d:86:
                    65:a7:0f:50:fd:e4:3c:84:fd:57:a9:4b:46:a4:c5:
                    b3:dd:fb:47:fe:87:06:82:a1:29:e5:00:8c:70:eb:
                    5c:a9:25:9d:39:18:18:fd:f0:c1:ca:21:b4:53:0c:
                    14:13:e1:04:af:58:3c:d8:c4:5c:01:ec:da:4f:90:
                    a9:98:45:da:fc:da:e4:8f:bd:b7:23:d0:83:35:a3:
                    5f:20:49:5b:9f:5a:70:43:e8:77:69:09:d5:11:e3:
                    07:42:af:b8:0a:cd:df:23:30:2b:54:61:70:d2:c9:
                    68:b6:e0:d2:16:88:fd:68:bd:9f:d0:a7:e1:a2:0d:
                    aa:3c:ad:16:7e:b8:d6:7b:aa:39:94:81:e6:a7:44:
                    10:2d:0f:fd:5c:00:aa:ae:0d:3c:95:73:ba:5a:53:
                    ac:6f:ab:32:b0:b9:28:a8:7c:e0:2d:7e:4a:d1:e6:
                    f6:33:b2:64:d7:d1:2c:f5:13:c2:1c:2a:ee:ce:c3:
                    8d:29:73:53:a7:5d:71:b1:90:ed:82:99:eb:21:32:
                    f5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A9:2D:5E:61:A0:DC:11:B3:A3:4F:46:39:CD:B5:43:FA:EF:95:BC
            X509v3 Authority Key Identifier:
                keyid:5A:EE:39:E0:3A:3D:AE:A5:B7:81:8D:FE:7D:26:45:BC:EC:E4:DD:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/3137392e39372e35372e302f32342d3234203d3e203532393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.97.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:19:c5:91:0f:79:a2:ad:b0:4e:8a:4a:57:c8:95:a5:b0:52:
         c4:3e:0e:15:e1:f4:38:c5:1c:79:c7:21:11:41:6b:67:60:b9:
         c8:76:37:e4:d1:e4:2d:5a:42:d0:65:b7:d4:72:f7:14:cf:b9:
         76:82:13:29:4f:b8:2c:02:bb:fa:ff:35:8c:3a:fd:f0:d1:f9:
         b0:90:8d:f1:79:a4:81:77:51:14:4f:77:01:49:9d:08:20:8e:
         d3:9f:bf:b6:e0:63:ed:03:8d:1b:f6:db:3e:08:5d:3a:8f:c9:
         ce:eb:17:0e:33:1f:b6:33:d8:8f:0d:c0:07:dd:75:c3:6b:dd:
         1e:4c:8b:16:9e:f9:c3:d1:a9:60:1e:d4:e1:ed:c4:36:b1:b0:
         4b:63:3e:7e:18:bf:1a:20:72:24:aa:d8:c3:29:ed:e4:41:38:
         95:3d:73:bc:cb:43:cd:47:39:15:42:3d:03:e1:c0:24:24:bd:
         3b:31:9e:9c:dd:81:c3:14:48:99:f0:a5:48:0f:6b:bb:40:d7:
         95:57:10:81:27:8c:35:e0:78:55:ce:9e:b5:e9:f4:68:01:65:
         1d:ab:db:41:4a:5c:45:53:25:26:2f:cd:31:16:30:10:7e:4b:
         9b:d6:36:65:d9:1a:17:e2:0f:2b:96:73:1d:f6:72:06:4c:32:
         08:84:14:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:23:13 2026 by rpki-client