Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e35302e302f32342d3234203d3e203532353936.roa
File:                     3137392e3139312e35302e302f32342d3234203d3e203532353936.roa (raw, json)
Hash identifier:          NimpijJ/c+xtQ2pzaSNupPvBzjlbjzklPFWJp1lQIz8=
Subject key identifier:   FD:8A:AD:3A:62:C1:5C:0D:A6:80:AE:24:45:C9:8E:34:FB:DB:4B:19
Certificate issuer:       /CN=F9D43943DC9C79F0864C8A5A95363AFDB6AE591B
Certificate serial:       59CA04392A863A809C5927378A16D157508A0812
Authority key identifier: F9:D4:39:43:DC:9C:79:F0:86:4C:8A:5A:95:36:3A:FD:B6:AE:59:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9D43943DC9C79F0864C8A5A95363AFDB6AE591B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e35302e302f32342d3234203d3e203532353936.roa
Signing time:             Mon 15 Sep 2025 14:41:21 +0000
ROA not before:           Mon 15 Sep 2025 14:36:21 +0000
ROA not after:            Mon 14 Sep 2026 14:41:21 +0000
asID:                     52596
IP address blocks:        179.191.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/F9D43943DC9C79F0864C8A5A95363AFDB6AE591B.crl
                          rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/F9D43943DC9C79F0864C8A5A95363AFDB6AE591B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9D43943DC9C79F0864C8A5A95363AFDB6AE591B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 14:54:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:ca:04:39:2a:86:3a:80:9c:59:27:37:8a:16:d1:57:50:8a:08:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9D43943DC9C79F0864C8A5A95363AFDB6AE591B
        Validity
            Not Before: Sep 15 14:36:21 2025 GMT
            Not After : Sep 14 14:41:21 2026 GMT
        Subject: CN=FD8AAD3A62C15C0DA680AE2445C98E34FBDB4B19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:05:49:7a:d1:ff:dc:f4:a0:8e:12:0d:51:98:
                    af:63:10:8b:f9:1a:c2:c2:64:37:aa:7a:dc:9a:d8:
                    a6:d9:83:96:2c:85:54:b4:9e:42:b2:03:64:c4:15:
                    cc:18:d2:2c:81:5c:05:70:72:9f:07:0f:0c:23:8b:
                    6e:ba:c2:c5:38:e1:2f:e0:d2:c3:8f:78:ba:46:03:
                    71:26:41:ba:c1:cc:bb:d7:38:58:17:cf:aa:78:cc:
                    54:e6:76:74:09:e6:ec:8e:92:67:d0:74:90:02:a1:
                    38:67:d6:79:f9:ba:91:3e:ff:6f:e6:ab:9c:b5:42:
                    2b:84:db:98:d1:45:04:19:89:de:22:cf:1b:6a:62:
                    6f:9b:aa:c1:a4:9a:da:a5:1d:31:81:0e:d2:24:c2:
                    59:51:be:15:83:fd:bf:f4:88:35:09:95:43:ab:d1:
                    60:d0:ee:e5:b0:4a:a8:4b:93:56:16:7d:b1:d0:cc:
                    a0:02:7e:e8:24:13:53:5e:c4:ac:4c:30:20:06:4f:
                    d3:22:b6:db:61:dd:e5:26:aa:bb:99:d4:8c:9d:05:
                    90:ca:24:a3:a1:5e:5b:fb:d7:9f:f1:ed:63:90:f7:
                    71:75:c1:12:72:ae:04:64:70:be:1e:38:a2:52:d3:
                    dd:30:29:fb:f6:b2:74:41:dc:55:52:5d:d6:12:65:
                    b6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:8A:AD:3A:62:C1:5C:0D:A6:80:AE:24:45:C9:8E:34:FB:DB:4B:19
            X509v3 Authority Key Identifier:
                keyid:F9:D4:39:43:DC:9C:79:F0:86:4C:8A:5A:95:36:3A:FD:B6:AE:59:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/F9D43943DC9C79F0864C8A5A95363AFDB6AE591B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9D43943DC9C79F0864C8A5A95363AFDB6AE591B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e35302e302f32342d3234203d3e203532353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:25:d1:f3:4b:4d:4b:fc:1d:23:6a:de:b3:cb:da:5f:c2:4e:
         56:a0:56:9a:6c:0a:e8:da:be:4a:59:d8:8c:92:a3:46:9e:22:
         ac:92:4c:c3:79:01:6c:50:99:49:5a:65:71:c7:f8:5b:b9:cb:
         3b:32:1a:6d:ef:b6:b7:b4:e7:f3:33:4d:78:14:85:2e:4a:0b:
         58:e5:ed:29:0b:23:b2:5f:c6:e6:a4:76:80:2d:91:03:13:67:
         02:53:c4:31:5e:35:58:91:41:57:66:61:81:4e:6d:71:58:3e:
         c5:e5:93:da:94:57:3f:d4:d6:91:df:df:88:ce:8a:57:3a:36:
         d2:0a:ad:54:61:a4:f9:4d:3b:48:21:b6:4e:3f:2c:13:da:53:
         e5:25:0b:e7:bf:98:e5:06:e9:41:cb:0a:5a:3e:5f:ae:25:3f:
         7c:42:07:21:1b:c8:66:16:1f:3f:44:dc:e9:b4:4a:32:8b:bd:
         5a:92:d0:12:3b:85:1a:e7:21:af:fa:93:4b:e0:41:15:17:84:
         bf:c8:81:69:dc:5f:a3:de:6c:38:54:87:b4:be:a4:09:a8:d2:
         a5:59:ee:7f:ff:b1:c4:74:66:be:80:27:d8:73:89:26:16:3a:
         e0:cd:ed:0e:c7:4e:f0:39:c8:ab:cd:58:8c:8f:4f:7e:8e:c8:
         33:83:da:3f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUWcoEOSqGOoCcWSc3ihbRV1CKCBIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjlENDM5NDNEQzlDNzlGMDg2NEM4QTVBOTUzNjNBRkRC
NkFFNTkxQjAeFw0yNTA5MTUxNDM2MjFaFw0yNjA5MTQxNDQxMjFaMDMxMTAvBgNV
BAMTKEZEOEFBRDNBNjJDMTVDMERBNjgwQUUyNDQ1Qzk4RTM0RkJEQjRCMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuBUl60f/c9KCOEg1RmK9jEIv5
GsLCZDeqetya2KbZg5YshVS0nkKyA2TEFcwY0iyBXAVwcp8HDwwji266wsU44S/g
0sOPeLpGA3EmQbrBzLvXOFgXz6p4zFTmdnQJ5uyOkmfQdJACoThn1nn5upE+/2/m
q5y1QiuE25jRRQQZid4izxtqYm+bqsGkmtqlHTGBDtIkwllRvhWD/b/0iDUJlUOr
0WDQ7uWwSqhLk1YWfbHQzKACfugkE1NexKxMMCAGT9Mittth3eUmqruZ1IydBZDK
JKOhXlv715/x7WOQ93F1wRJyrgRkcL4eOKJS090wKfv2snRB3FVSXdYSZbapAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU/YqtOmLBXA2mgK4kRcmONPvbSxkwHwYDVR0j
BBgwFoAU+dQ5Q9ycefCGTIpalTY6/bauWRswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmliTllac1NnTXEyd3pFeGh5ZXNRVEJ0aEVhSE5ISmE0OG1lb0ZwVWJm
V3gvMC9GOUQ0Mzk0M0RDOUM3OUYwODY0QzhBNUE5NTM2M0FGREI2QUU1OTFCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y5RDQzOTQzREM5Qzc5RjA4
NjRDOEE1QTk1MzYzQUZEQjZBRTU5MUIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZpYk5ZWnNTZ01xMnd6RXhoeWVzUVRCdGhFYUhOSEphNDhtZW9GcFViZld4LzAv
MzEzNzM5MmUzMTM5MzEyZTM1MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzUzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAs78yMA0GCSqGSIb3DQEBCwUAA4IBAQCHJdHzS01L
/B0jat6zy9pfwk5WoFaabAro2r5KWdiMkqNGniKskkzDeQFsUJlJWmVxx/hbucs7
Mhpt77a3tOfzM014FIUuSgtY5e0pCyOyX8bmpHaALZEDE2cCU8QxXjVYkUFXZmGB
Tm1xWD7F5ZPalFc/1NaR39+IzopXOjbSCq1UYaT5TTtIIbZOPywT2lPlJQvnv5jl
BulBywpaPl+uJT98QgchG8hmFh8/RNzptEoyi71aktASO4Ua5yGv+pNL4EEVF4S/
yIFp3F+j3mw4VIe0vqQJqNKlWe5//7HEdGa+gCfYc4kmFjrgze0Ox07wOcirzViM
j09+jsgzg9o/
-----END CERTIFICATE-----
Generated at Fri Sep 19 01:29:59 2025 by rpki-client