Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e35302e302f32332d3233203d3e203532353936.roa
File:                     3137392e3139312e35302e302f32332d3233203d3e203532353936.roa (raw, json)
Hash identifier:          zDW5OGDlrCd4HvPXjcZLCvDYmemgcKwXa7Y9IeiZ9dY=
Subject key identifier:   D1:2D:FE:24:9D:D6:01:65:FA:F8:DB:41:BC:FE:79:3C:AA:8C:9F:3B
Certificate issuer:       /CN=358D3526283BAF81BF394FD5D51A9A7C6A6D5E01
Certificate serial:       2C1B4F522B71A5CA26A9FECE8584FE57AB05EED1
Authority key identifier: 35:8D:35:26:28:3B:AF:81:BF:39:4F:D5:D5:1A:9A:7C:6A:6D:5E:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/358D3526283BAF81BF394FD5D51A9A7C6A6D5E01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e35302e302f32332d3233203d3e203532353936.roa
Signing time:             Mon 03 Feb 2025 20:16:41 +0000
ROA not before:           Mon 03 Feb 2025 20:11:41 +0000
ROA not after:            Mon 02 Feb 2026 20:16:41 +0000
asID:                     52596
IP address blocks:        179.191.50.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/358D3526283BAF81BF394FD5D51A9A7C6A6D5E01.crl
                          rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/358D3526283BAF81BF394FD5D51A9A7C6A6D5E01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/358D3526283BAF81BF394FD5D51A9A7C6A6D5E01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 18:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:1b:4f:52:2b:71:a5:ca:26:a9:fe:ce:85:84:fe:57:ab:05:ee:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=358D3526283BAF81BF394FD5D51A9A7C6A6D5E01
        Validity
            Not Before: Feb  3 20:11:41 2025 GMT
            Not After : Feb  2 20:16:41 2026 GMT
        Subject: CN=D12DFE249DD60165FAF8DB41BCFE793CAA8C9F3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:74:15:b9:84:33:da:8b:d7:c3:d5:4a:9e:ff:
                    78:7f:38:48:d7:03:2a:71:be:4a:56:be:d8:80:24:
                    6b:e0:48:37:35:9d:88:a3:b3:ec:62:dc:70:64:0e:
                    b1:d6:64:c2:26:59:e2:a5:94:26:3d:c8:ea:f6:ef:
                    30:03:6e:a7:70:78:90:e0:d2:b0:bb:16:69:6f:7c:
                    f6:25:e6:b3:16:5f:fe:a8:8d:fb:d8:25:4c:75:03:
                    93:7f:e0:cf:ea:6c:1e:29:f5:16:a8:5d:bb:75:37:
                    92:91:ff:21:04:b6:37:6e:60:5e:6c:61:fb:7a:5f:
                    d0:60:87:81:db:08:b1:b4:14:c0:7f:94:2d:70:f2:
                    75:2d:05:77:76:be:45:16:04:05:7c:b8:93:2c:77:
                    c1:1f:c9:50:d4:c2:82:9b:0e:31:f2:97:b8:8a:60:
                    95:36:cc:ac:53:54:25:a6:e0:d6:c4:59:f9:69:22:
                    bd:5f:62:3f:0e:e4:b3:fe:dd:22:16:56:1d:bc:7d:
                    a4:1f:67:f1:51:56:c2:fe:96:c4:1c:d7:69:68:69:
                    ef:6c:d6:8d:da:73:8d:07:95:50:2a:2c:73:12:b4:
                    22:cf:41:57:39:43:18:81:2d:c0:05:81:77:46:92:
                    66:bf:90:78:bf:ad:1b:51:9b:25:97:33:b1:fa:15:
                    b6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:2D:FE:24:9D:D6:01:65:FA:F8:DB:41:BC:FE:79:3C:AA:8C:9F:3B
            X509v3 Authority Key Identifier:
                keyid:35:8D:35:26:28:3B:AF:81:BF:39:4F:D5:D5:1A:9A:7C:6A:6D:5E:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/358D3526283BAF81BF394FD5D51A9A7C6A6D5E01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/358D3526283BAF81BF394FD5D51A9A7C6A6D5E01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e35302e302f32332d3233203d3e203532353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:73:96:4a:78:7e:7f:29:da:2f:2e:09:c3:5a:ad:a5:5c:ac:
         b8:c8:63:22:4b:1c:73:dc:4e:d3:8a:81:fd:6c:b5:79:1a:dd:
         21:dc:21:fd:d5:af:5a:82:0a:f0:39:0b:85:84:a2:57:59:3c:
         de:19:66:ba:be:63:b3:db:44:cf:e0:c0:fd:04:8a:55:73:57:
         e1:7b:f2:3f:66:a6:8e:6d:8c:3b:ab:64:44:46:d0:28:fd:95:
         c6:fc:9f:8b:99:7a:18:5d:39:11:a8:d5:60:24:e1:5d:95:7d:
         17:18:73:8e:44:9b:31:c9:cf:68:4e:92:53:fb:58:d3:34:0c:
         df:bd:e0:2d:7c:56:63:d6:c3:d9:81:66:e8:cf:30:0d:39:21:
         a4:44:1d:13:ea:56:06:4d:65:51:63:16:c6:a3:3c:e0:89:c5:
         ba:2c:8f:28:8b:b7:07:17:22:6d:0f:a7:cc:ff:b9:08:6f:49:
         09:1a:c9:08:0d:e2:a3:59:f5:29:ea:b4:c9:74:64:cb:c3:9f:
         a9:de:0d:dc:95:22:f2:60:0c:2f:15:8d:4f:ef:d7:fd:6f:2e:
         f7:1d:9f:80:41:56:66:d7:37:f4:c1:f9:ac:d8:e8:5c:b5:9b:
         77:37:a3:ce:e6:d5:59:33:5b:36:b9:72:54:24:9c:d9:8f:14:
         2c:31:e1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:41 2025 by rpki-client