Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e34382e302f32312d3231203d3e203532353936.roa
File:                     3137392e3139312e34382e302f32312d3231203d3e203532353936.roa (raw, json)
Hash identifier:          KS6GlfiKmusKqjb8o/E/a8zi1zLu7FIjmfl6HO+Vkjg=
Subject key identifier:   93:AC:8F:0A:91:93:C1:34:22:D1:75:63:2A:37:3A:49:99:FB:55:51
Certificate issuer:       /CN=358D3526283BAF81BF394FD5D51A9A7C6A6D5E01
Certificate serial:       6C7E391529751AC8DED71CF90D8C5C81CB25F86E
Authority key identifier: 35:8D:35:26:28:3B:AF:81:BF:39:4F:D5:D5:1A:9A:7C:6A:6D:5E:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/358D3526283BAF81BF394FD5D51A9A7C6A6D5E01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e34382e302f32312d3231203d3e203532353936.roa
Signing time:             Mon 03 Feb 2025 20:16:37 +0000
ROA not before:           Mon 03 Feb 2025 20:11:37 +0000
ROA not after:            Mon 02 Feb 2026 20:16:37 +0000
asID:                     52596
IP address blocks:        179.191.48.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/358D3526283BAF81BF394FD5D51A9A7C6A6D5E01.crl
                          rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/358D3526283BAF81BF394FD5D51A9A7C6A6D5E01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/358D3526283BAF81BF394FD5D51A9A7C6A6D5E01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 18:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:7e:39:15:29:75:1a:c8:de:d7:1c:f9:0d:8c:5c:81:cb:25:f8:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=358D3526283BAF81BF394FD5D51A9A7C6A6D5E01
        Validity
            Not Before: Feb  3 20:11:37 2025 GMT
            Not After : Feb  2 20:16:37 2026 GMT
        Subject: CN=93AC8F0A9193C13422D175632A373A4999FB5551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6a:2b:da:3d:0d:99:5b:e7:31:ce:01:30:3d:
                    96:d4:f1:f8:13:33:22:6c:3a:3e:85:19:ec:2e:ec:
                    9f:13:8a:5e:e7:fd:47:61:56:aa:92:29:4b:81:96:
                    90:1d:52:70:e8:55:89:df:2b:0b:9b:5e:21:56:80:
                    36:c5:f4:da:5d:6f:2a:c3:70:25:24:a8:a6:de:92:
                    5b:fe:30:15:68:3b:4f:3d:f0:ba:ce:ef:ad:8d:93:
                    bd:a2:1d:41:7a:74:66:31:53:55:62:ab:6e:19:ad:
                    e1:7a:90:ba:ad:f2:84:5a:1d:51:c3:26:b7:93:96:
                    ee:41:7a:56:b8:ef:47:4a:68:67:1c:51:af:35:5d:
                    9e:4f:47:50:bf:6b:41:de:fe:10:c5:aa:75:d8:c6:
                    d6:f0:d4:7a:df:e2:14:44:8f:ce:35:94:df:c8:17:
                    42:ab:2f:42:e1:f5:06:ad:0e:4d:6b:56:0a:df:c5:
                    59:df:11:ae:46:9f:d2:1d:05:d7:cf:78:eb:be:bf:
                    34:44:7c:7f:13:5a:aa:f5:94:5a:3e:9c:e9:a4:4f:
                    b3:1d:3a:36:45:f5:3e:d9:87:e0:3c:76:0d:fe:68:
                    b4:5f:34:f1:cf:7b:5a:b3:a0:11:aa:97:2e:dd:0e:
                    c6:b7:ce:c2:61:3b:12:e3:13:ac:91:92:9e:59:ff:
                    9b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:AC:8F:0A:91:93:C1:34:22:D1:75:63:2A:37:3A:49:99:FB:55:51
            X509v3 Authority Key Identifier:
                keyid:35:8D:35:26:28:3B:AF:81:BF:39:4F:D5:D5:1A:9A:7C:6A:6D:5E:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/358D3526283BAF81BF394FD5D51A9A7C6A6D5E01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/358D3526283BAF81BF394FD5D51A9A7C6A6D5E01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e34382e302f32312d3231203d3e203532353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0d:28:82:f7:37:bb:cf:04:cb:c4:a9:83:c4:a8:5b:31:1a:5a:
         68:98:3e:00:cc:72:2b:01:d5:e6:2e:03:91:2b:02:e9:82:a6:
         a1:4e:8d:7c:da:f2:64:19:d4:06:ae:fc:b4:72:8a:09:43:33:
         0a:c0:eb:68:47:93:05:71:1b:aa:f2:7d:ca:c9:39:6b:b2:88:
         da:b7:aa:b2:53:fa:8e:ae:65:72:2c:94:f1:bb:40:56:8c:a5:
         c6:b6:4d:d6:17:4b:45:e5:30:1a:c7:97:d2:26:3d:90:98:b3:
         09:e8:46:bd:f1:62:66:f2:48:16:37:0f:bf:3b:37:4d:0a:12:
         25:df:0b:c6:7b:83:29:59:1c:f5:a1:98:74:3d:62:cb:d2:19:
         a7:8f:25:5c:e7:7d:d9:9f:11:8d:94:98:09:8e:a9:a7:e8:9d:
         b5:2d:17:79:11:dc:73:1a:7c:c7:92:f7:a1:51:82:93:41:cc:
         e0:9c:ba:ce:cf:34:56:bc:23:37:e4:2a:bf:24:6a:4d:7e:3d:
         75:87:51:7d:19:f3:4d:c2:f5:09:8b:80:8c:1a:b6:ef:f9:3a:
         f8:4d:b0:64:a1:a4:e5:18:75:5f:b9:fa:13:eb:70:2c:6b:aa:
         56:95:5e:ce:cc:38:62:c8:e6:fc:87:1e:8d:c8:90:09:18:fd:
         48:21:69:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:44 2025 by rpki-client