Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e34382e302f32342d3234203d3e203532353936.roa
File:                     3137392e3139312e34382e302f32342d3234203d3e203532353936.roa (raw, json)
Hash identifier:          Av0DsakG9THEqSmbVH2Wb/3kpdcmdfjenwXi0TzMdiQ=
Subject key identifier:   32:7E:DE:76:58:ED:2B:12:9B:D2:20:32:57:78:5A:50:DC:F4:CA:79
Certificate issuer:       /CN=01AC8DA5ED5081878802B288269F263B6EA0F002
Certificate serial:       0C0C97C7114B82FD4DE2881A47D25367144DDDEF
Authority key identifier: 01:AC:8D:A5:ED:50:81:87:88:02:B2:88:26:9F:26:3B:6E:A0:F0:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01AC8DA5ED5081878802B288269F263B6EA0F002.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e34382e302f32342d3234203d3e203532353936.roa
Signing time:             Mon 07 Apr 2025 14:01:03 +0000
ROA not before:           Mon 07 Apr 2025 13:56:03 +0000
ROA not after:            Mon 06 Apr 2026 14:01:03 +0000
asID:                     52596
IP address blocks:        179.191.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/01AC8DA5ED5081878802B288269F263B6EA0F002.crl
                          rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/01AC8DA5ED5081878802B288269F263B6EA0F002.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01AC8DA5ED5081878802B288269F263B6EA0F002.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 11:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:0c:97:c7:11:4b:82:fd:4d:e2:88:1a:47:d2:53:67:14:4d:dd:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01AC8DA5ED5081878802B288269F263B6EA0F002
        Validity
            Not Before: Apr  7 13:56:03 2025 GMT
            Not After : Apr  6 14:01:03 2026 GMT
        Subject: CN=327EDE7658ED2B129BD2203257785A50DCF4CA79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a2:3f:17:78:84:d6:b2:8d:c1:91:2f:1d:ae:
                    d3:27:b2:77:a4:4c:cc:03:58:1a:2e:2d:16:b7:d9:
                    3a:42:ff:da:7e:13:57:89:00:28:3a:1a:42:f1:eb:
                    2f:02:95:1c:05:d1:b7:94:03:96:86:b2:a8:a1:ad:
                    29:04:a7:29:09:6d:f0:8d:f3:83:36:44:9f:3d:2f:
                    8e:28:14:d5:b2:bb:e5:68:ea:64:68:72:72:3c:8a:
                    99:08:f7:da:14:cf:7f:a0:d6:60:ac:d8:1d:18:f0:
                    95:7a:10:84:0b:e2:07:7f:8a:12:c4:f0:bb:80:cb:
                    7c:7e:bb:e2:32:a6:79:0c:97:90:ca:93:b1:ad:57:
                    92:3a:af:da:3c:44:5c:9c:d9:79:15:b7:f3:a1:3c:
                    3f:2f:d6:1f:10:8d:90:55:a9:25:50:5a:9f:3b:50:
                    99:96:7d:1e:36:6d:34:e0:39:7b:ef:75:30:96:04:
                    e7:44:7c:b7:ad:97:d1:4b:53:e3:5d:88:f2:bf:d1:
                    db:6b:67:2d:b6:61:51:ca:fd:a6:4b:98:1d:62:35:
                    f7:84:9f:1d:04:19:3d:fc:f3:80:ec:b2:5c:e2:11:
                    7b:b7:0d:0e:49:7c:79:99:97:83:d3:b1:d3:65:c1:
                    db:18:1b:56:fa:aa:89:a7:0b:a7:f4:a6:d9:db:e4:
                    d3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:7E:DE:76:58:ED:2B:12:9B:D2:20:32:57:78:5A:50:DC:F4:CA:79
            X509v3 Authority Key Identifier:
                keyid:01:AC:8D:A5:ED:50:81:87:88:02:B2:88:26:9F:26:3B:6E:A0:F0:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/01AC8DA5ED5081878802B288269F263B6EA0F002.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01AC8DA5ED5081878802B288269F263B6EA0F002.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e34382e302f32342d3234203d3e203532353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cd:99:53:3e:8c:1a:72:32:b6:63:d1:dc:37:43:bf:6c:de:7f:
         93:0e:c4:cb:be:17:12:c9:38:a9:79:85:63:ed:94:f7:df:e2:
         bb:6a:0f:70:3d:7b:3e:3b:c1:4d:8e:02:56:6a:09:c4:fb:b4:
         3a:83:e5:c9:b8:aa:dc:29:c3:38:b4:ca:a9:f7:61:04:14:e4:
         bb:da:50:f9:ea:95:08:2c:26:83:a9:66:29:82:84:a7:1e:fa:
         03:a2:40:46:cf:a6:31:64:e4:16:7b:3e:1b:82:37:9e:eb:be:
         54:7d:c7:12:ed:de:3b:04:ee:e7:f5:3b:bc:cf:aa:ed:a5:de:
         2e:85:26:f1:92:70:3f:8f:9e:f5:8b:3f:f9:85:0b:bc:10:f3:
         8c:90:18:7c:df:de:5b:af:f8:16:a4:71:a6:68:1a:7c:e1:49:
         8e:5d:39:7f:c6:ff:21:42:a1:48:94:b0:96:5d:8c:30:b9:28:
         62:a1:a5:ab:a7:2f:b5:65:6b:14:87:9c:a6:a4:8b:30:d7:08:
         d1:5b:47:94:76:02:48:9c:4e:4e:69:1d:2f:ff:2e:dd:9d:a0:
         8c:4c:b0:ae:9c:0b:48:d1:ef:da:91:24:11:e3:7b:f5:33:07:
         84:3f:53:83:f8:00:65:87:7c:03:1a:49:28:fc:9c:d0:17:11:
         48:0d:70:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:42:26 2025 by rpki-client