Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e34382e302f32322d3232203d3e203532353936.roa
File:                     3137392e3139312e34382e302f32322d3232203d3e203532353936.roa (raw, json)
Hash identifier:          ZqPFSyIXmvx33np0+z3mshJ8uBkW/MFnJkq20dv7QiY=
Subject key identifier:   4F:A8:15:07:9A:D3:08:04:4E:AA:1A:4A:C9:15:DA:74:AE:95:CE:83
Certificate issuer:       /CN=08009882BCEB89729EAAF17F47C01E6AE508E3A0
Certificate serial:       52F10895622939285DD0BEC308585EF6F7B7D869
Authority key identifier: 08:00:98:82:BC:EB:89:72:9E:AA:F1:7F:47:C0:1E:6A:E5:08:E3:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08009882BCEB89729EAAF17F47C01E6AE508E3A0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e34382e302f32322d3232203d3e203532353936.roa
Signing time:             Thu 20 Jun 2024 19:30:15 +0000
ROA not before:           Thu 20 Jun 2024 19:25:15 +0000
ROA not after:            Thu 19 Jun 2025 19:30:15 +0000
asID:                     52596
IP address blocks:        179.191.48.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/08009882BCEB89729EAAF17F47C01E6AE508E3A0.crl
                          rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/08009882BCEB89729EAAF17F47C01E6AE508E3A0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08009882BCEB89729EAAF17F47C01E6AE508E3A0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 03:49:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:f1:08:95:62:29:39:28:5d:d0:be:c3:08:58:5e:f6:f7:b7:d8:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08009882BCEB89729EAAF17F47C01E6AE508E3A0
        Validity
            Not Before: Jun 20 19:25:15 2024 GMT
            Not After : Jun 19 19:30:15 2025 GMT
        Subject: CN=4FA815079AD308044EAA1A4AC915DA74AE95CE83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7d:d9:b6:a9:bc:78:0d:7e:8f:a7:68:1a:5a:
                    40:d4:23:70:0a:bd:17:5a:ba:e1:98:51:91:be:50:
                    c6:47:42:a9:70:22:de:da:b7:b0:0a:59:73:18:2a:
                    9a:8b:f1:b9:3c:38:ab:fe:f5:6e:eb:00:63:76:90:
                    45:1f:91:a7:7c:6b:c2:91:9d:42:45:35:08:0c:62:
                    42:68:78:9c:d9:a6:a9:51:4a:53:ad:a0:7c:04:28:
                    b8:55:81:28:bc:1d:a5:f0:21:18:ab:94:d9:70:5e:
                    d0:94:b4:a1:93:8f:94:cc:79:a2:12:4e:0d:9c:85:
                    70:57:c8:99:59:83:0d:87:64:35:61:22:58:42:60:
                    2a:58:23:9a:fb:f1:db:3d:de:79:95:6d:9b:d7:b0:
                    9a:24:9e:9f:4a:50:bc:1e:1a:a6:4a:6d:70:b6:1d:
                    1e:22:0b:4b:5f:3b:df:4c:1e:65:e9:64:16:42:bf:
                    d9:7a:a5:86:92:ed:db:ca:f9:99:6b:c6:7a:0a:68:
                    4c:ec:b0:d4:7a:82:0b:c2:9f:7b:3b:13:7e:e7:c1:
                    b6:e6:b6:36:95:f6:e5:fb:10:9c:fd:1d:15:b2:2f:
                    d1:18:59:96:78:31:ca:ba:6f:bb:28:2e:f3:37:64:
                    ff:57:8f:3f:5e:04:6b:ee:ed:10:f9:d7:44:60:eb:
                    16:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A8:15:07:9A:D3:08:04:4E:AA:1A:4A:C9:15:DA:74:AE:95:CE:83
            X509v3 Authority Key Identifier:
                keyid:08:00:98:82:BC:EB:89:72:9E:AA:F1:7F:47:C0:1E:6A:E5:08:E3:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/08009882BCEB89729EAAF17F47C01E6AE508E3A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08009882BCEB89729EAAF17F47C01E6AE508E3A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e34382e302f32322d3232203d3e203532353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:1c:06:17:09:b3:62:dd:48:62:f1:fe:2d:72:1c:61:f8:39:
         61:9b:94:82:da:cf:72:07:fd:1d:82:f2:51:26:c0:92:3e:13:
         3e:5b:9a:c0:4e:39:39:c9:b8:8f:ed:ad:9c:ce:12:17:15:ab:
         10:81:eb:b1:e5:12:a4:cd:a6:b2:0e:62:ab:bf:68:3b:7b:0d:
         46:7b:01:12:4f:fb:b1:72:42:09:f7:4c:20:03:96:ed:53:85:
         ca:76:cc:0a:7a:60:c8:02:b2:51:9f:d4:67:65:ef:85:ba:05:
         63:8a:66:d1:4b:ee:35:d9:b8:7b:c5:6e:46:97:b1:7b:eb:4c:
         75:1d:aa:4a:db:2a:c3:c3:5c:0b:e0:ba:09:3d:ba:15:eb:77:
         12:88:b4:d5:d2:8a:87:ed:a8:c3:59:7d:77:30:15:3a:37:c7:
         76:7c:5a:43:1f:fb:49:b2:38:76:c9:c2:14:25:32:37:77:57:
         16:5a:94:4d:03:a0:eb:33:4c:b4:6a:76:30:d1:99:62:9c:5d:
         0e:0e:b5:0a:2c:62:f7:22:ad:30:93:11:2b:e4:a9:9f:05:61:
         7d:34:7e:44:42:35:5b:64:b5:8d:62:86:8d:59:de:ad:96:0c:
         b5:33:e4:aa:be:fc:47:e9:9a:f4:f8:cb:fd:aa:67:3a:a6:23:
         a0:93:11:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 06:49:01 2024 by rpki-client on console-fra.rpki-client.org