Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e34382e302f32312d3231203d3e203532353936.roa
File:                     3137392e3139312e34382e302f32312d3231203d3e203532353936.roa (raw, json)
Hash identifier:          9FFjlrrmpjSY3BZ51QKZdtkrZwvy5lLcZicWxzoNIGc=
Subject key identifier:   2F:D1:35:79:F3:A4:0B:25:68:37:CB:F3:1C:50:96:AB:66:C9:17:3E
Certificate issuer:       /CN=01AC8DA5ED5081878802B288269F263B6EA0F002
Certificate serial:       433CBF5562C2506426FA86714688690DF180D265
Authority key identifier: 01:AC:8D:A5:ED:50:81:87:88:02:B2:88:26:9F:26:3B:6E:A0:F0:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01AC8DA5ED5081878802B288269F263B6EA0F002.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e34382e302f32312d3231203d3e203532353936.roa
Signing time:             Mon 07 Apr 2025 14:01:01 +0000
ROA not before:           Mon 07 Apr 2025 13:56:01 +0000
ROA not after:            Mon 06 Apr 2026 14:01:01 +0000
asID:                     52596
IP address blocks:        179.191.48.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/01AC8DA5ED5081878802B288269F263B6EA0F002.crl
                          rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/01AC8DA5ED5081878802B288269F263B6EA0F002.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01AC8DA5ED5081878802B288269F263B6EA0F002.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 11:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:3c:bf:55:62:c2:50:64:26:fa:86:71:46:88:69:0d:f1:80:d2:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01AC8DA5ED5081878802B288269F263B6EA0F002
        Validity
            Not Before: Apr  7 13:56:01 2025 GMT
            Not After : Apr  6 14:01:01 2026 GMT
        Subject: CN=2FD13579F3A40B256837CBF31C5096AB66C9173E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:96:4d:47:fc:2b:d6:72:7f:5a:a9:a0:cb:cd:
                    d4:0a:82:56:4f:0a:f4:3e:23:90:bb:ff:17:9f:6e:
                    35:99:c0:35:a0:ca:a1:5f:27:1c:b4:9c:94:f5:56:
                    2c:77:98:4b:12:3f:4c:2c:90:99:42:b1:66:bf:a0:
                    2a:85:3d:d4:4f:e2:ae:43:25:1d:04:09:f5:83:81:
                    31:84:63:68:f0:b6:59:76:2b:a4:1d:eb:d4:85:2e:
                    93:10:c5:b1:b2:e6:a6:c8:63:49:3d:1c:2c:50:82:
                    32:1a:29:3e:b1:24:1f:77:9f:60:1c:e7:75:0a:d6:
                    d9:64:12:6e:04:7e:12:66:b7:18:dc:36:41:91:28:
                    27:24:d7:6e:4e:a6:b7:cb:fd:58:1c:8d:e9:94:64:
                    cc:3e:1f:1a:69:f3:40:7f:3d:1b:71:b3:54:65:51:
                    15:56:6a:8d:5e:12:e8:27:52:06:3b:8e:e5:af:4e:
                    e5:41:66:0a:1a:c7:e3:0b:a0:a0:06:63:55:37:79:
                    b7:86:09:69:27:26:4e:bb:94:78:4f:b6:fe:a1:8f:
                    82:ab:c1:30:2d:5b:bf:90:60:b5:49:6e:2f:9d:05:
                    b7:37:56:5a:07:e0:5c:92:f3:a8:6d:28:8b:c5:b4:
                    e2:b6:c6:af:18:a0:46:e9:ae:03:70:23:5b:81:87:
                    00:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D1:35:79:F3:A4:0B:25:68:37:CB:F3:1C:50:96:AB:66:C9:17:3E
            X509v3 Authority Key Identifier:
                keyid:01:AC:8D:A5:ED:50:81:87:88:02:B2:88:26:9F:26:3B:6E:A0:F0:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/01AC8DA5ED5081878802B288269F263B6EA0F002.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01AC8DA5ED5081878802B288269F263B6EA0F002.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e34382e302f32312d3231203d3e203532353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ac:1a:14:d5:77:be:ad:c5:22:9e:20:c7:29:e8:5e:e5:6e:9a:
         a1:fd:36:d1:24:8f:ac:52:d7:52:dc:ac:d1:40:1a:f3:52:c4:
         4c:3e:42:b8:d4:9c:d0:69:c1:60:4f:c1:a1:d6:f9:1a:fd:b1:
         42:b2:1e:7e:81:fb:63:90:5f:3d:66:42:9d:07:48:02:84:96:
         e9:ec:ae:eb:1a:fe:2a:b3:1f:13:44:2b:18:89:c3:ec:32:9b:
         72:6c:79:cc:51:a6:0f:0d:e3:4d:58:cd:da:59:92:16:8e:36:
         e8:58:31:72:92:ca:2b:d9:94:4d:46:1e:43:59:1a:5d:56:d4:
         89:59:55:a8:87:ec:0e:f4:e9:35:7a:c1:67:af:c3:91:51:85:
         18:48:54:17:6b:e5:5b:11:8e:d7:01:96:3a:90:99:54:0b:e9:
         08:3b:01:44:b6:ab:68:ae:34:51:8a:d4:8a:44:f7:99:b1:5c:
         24:8e:64:3a:6f:aa:93:a4:e7:94:d5:9f:7b:98:0b:11:2c:98:
         9d:42:2d:7e:1e:77:04:b3:62:42:3a:96:b2:65:ed:25:9b:69:
         a0:2b:9f:65:bf:a3:b0:1d:b2:1a:d0:a1:d6:d3:45:85:cc:f1:
         70:45:b2:c5:4d:4d:db:6e:13:1d:b6:01:dc:e4:b9:02:83:a6:
         5d:0d:ce:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:39:42 2025 by rpki-client