Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e34382e302f32342d3234203d3e203532353936.roa
File:                     3137392e3139312e34382e302f32342d3234203d3e203532353936.roa (raw, json)
Hash identifier:          JQdexyR7NOqkdu4z3TqI5tBeH3LlcjgofqyfRHcQaUk=
Subject key identifier:   38:15:95:C8:CB:E9:15:F7:77:4B:7C:64:AE:B7:BB:D5:9E:00:88:0A
Certificate issuer:       /CN=358D3526283BAF81BF394FD5D51A9A7C6A6D5E01
Certificate serial:       3067521577FBD89B663B747A4CAB9F716C536B0B
Authority key identifier: 35:8D:35:26:28:3B:AF:81:BF:39:4F:D5:D5:1A:9A:7C:6A:6D:5E:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/358D3526283BAF81BF394FD5D51A9A7C6A6D5E01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e34382e302f32342d3234203d3e203532353936.roa
Signing time:             Mon 03 Feb 2025 20:16:38 +0000
ROA not before:           Mon 03 Feb 2025 20:11:38 +0000
ROA not after:            Mon 02 Feb 2026 20:16:38 +0000
asID:                     52596
IP address blocks:        179.191.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/358D3526283BAF81BF394FD5D51A9A7C6A6D5E01.crl
                          rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/358D3526283BAF81BF394FD5D51A9A7C6A6D5E01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/358D3526283BAF81BF394FD5D51A9A7C6A6D5E01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 18:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:67:52:15:77:fb:d8:9b:66:3b:74:7a:4c:ab:9f:71:6c:53:6b:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=358D3526283BAF81BF394FD5D51A9A7C6A6D5E01
        Validity
            Not Before: Feb  3 20:11:38 2025 GMT
            Not After : Feb  2 20:16:38 2026 GMT
        Subject: CN=381595C8CBE915F7774B7C64AEB7BBD59E00880A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f9:e2:14:59:53:f6:91:3a:19:2f:63:68:3b:
                    ac:e6:22:73:96:d3:52:16:ae:04:aa:06:12:17:43:
                    f2:fd:cf:11:d5:10:bd:7f:a9:9c:d7:84:58:22:06:
                    8e:0d:5e:45:38:8e:8d:92:71:4c:d3:0f:24:e4:7a:
                    c4:4a:2d:a6:75:2e:5b:31:a2:e3:20:3c:8f:f4:70:
                    07:13:91:cc:d4:31:34:79:83:bc:58:2b:a3:2f:61:
                    bf:b7:1e:a7:1b:fd:ee:c3:d2:b8:76:87:8d:77:f1:
                    36:bc:31:c6:19:b9:53:0b:07:a0:bd:a7:3a:72:e0:
                    2c:c3:33:61:60:8e:39:d8:6a:08:87:3a:0b:12:a5:
                    f9:c7:2d:29:c1:40:b1:34:7f:a4:49:42:c3:76:9b:
                    6b:bb:15:47:db:a0:29:f8:0b:5f:f7:8d:9f:79:3c:
                    de:e2:43:1f:d8:58:43:f1:e6:2a:bf:5d:a8:4e:14:
                    e9:9a:b9:7b:c5:94:e8:40:2f:d0:da:8b:54:84:48:
                    00:86:d9:0f:9e:d5:10:ee:59:99:2c:f2:3b:69:d2:
                    3d:94:a1:fc:c2:cd:6b:1c:fe:91:ec:a1:33:61:21:
                    bb:1a:8f:33:be:40:d6:60:2f:d4:e9:ec:9e:ff:03:
                    b4:fd:54:ba:71:94:fd:e1:3a:3e:54:fc:f7:7b:c3:
                    85:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:15:95:C8:CB:E9:15:F7:77:4B:7C:64:AE:B7:BB:D5:9E:00:88:0A
            X509v3 Authority Key Identifier:
                keyid:35:8D:35:26:28:3B:AF:81:BF:39:4F:D5:D5:1A:9A:7C:6A:6D:5E:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/358D3526283BAF81BF394FD5D51A9A7C6A6D5E01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/358D3526283BAF81BF394FD5D51A9A7C6A6D5E01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e34382e302f32342d3234203d3e203532353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:75:23:b8:86:a5:5c:9a:ef:11:85:77:cf:8c:ad:20:14:ae:
         67:1a:04:2c:45:87:09:9b:b8:01:a4:33:05:28:de:cc:0a:c3:
         cc:c1:47:d4:82:5f:c8:1b:d8:e4:dc:e8:be:e2:e7:28:a5:22:
         06:89:66:34:39:ee:38:bb:94:a9:db:3c:3a:c9:43:fc:c9:d2:
         a3:08:70:52:a5:88:ea:e4:3a:5e:b6:94:7d:da:ac:ce:fb:24:
         21:91:51:c4:da:d3:ae:de:02:e8:b3:f1:85:68:c2:da:a5:c9:
         24:ff:61:c0:5a:f1:01:9c:1f:8a:0c:8c:72:de:bd:5e:38:58:
         b8:05:5a:9c:5f:ec:4f:90:0f:1c:bc:e2:d3:50:65:d0:aa:b5:
         de:80:f4:55:94:50:2d:50:6a:8a:86:1b:1c:b5:b1:73:a9:e3:
         bc:a7:06:9b:b8:d9:17:23:ff:cc:f5:42:52:59:9f:9e:25:ff:
         2d:33:c7:3d:e3:92:4c:ba:37:01:71:88:27:43:47:ac:64:1d:
         8f:07:ae:34:f2:e6:6c:05:1c:c9:ba:08:0b:95:76:0d:6d:1b:
         1d:27:0c:63:27:a5:fb:c7:c9:de:4d:4c:c7:98:ea:be:3c:b8:
         6e:70:81:c1:cd:65:5c:71:e3:b4:34:ce:6e:01:8e:02:2b:1e:
         c1:d3:1e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:40 2025 by rpki-client