Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e35322e302f32332d3233203d3e203532353936.roa
File:                     3137392e3139312e35322e302f32332d3233203d3e203532353936.roa (raw, json)
Hash identifier:          MLrYf2Z2Ux+mzJenM9eozpl3xZFdl/5lHHKcqxaObss=
Subject key identifier:   CA:79:4C:8D:15:FF:67:BC:12:5D:FD:29:4F:F7:40:74:E7:BF:0A:A2
Certificate issuer:       /CN=358D3526283BAF81BF394FD5D51A9A7C6A6D5E01
Certificate serial:       78A653A3F6A40A5084EED43B8679D254D1AF9DAF
Authority key identifier: 35:8D:35:26:28:3B:AF:81:BF:39:4F:D5:D5:1A:9A:7C:6A:6D:5E:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/358D3526283BAF81BF394FD5D51A9A7C6A6D5E01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e35322e302f32332d3233203d3e203532353936.roa
Signing time:             Mon 03 Feb 2025 20:16:44 +0000
ROA not before:           Mon 03 Feb 2025 20:11:44 +0000
ROA not after:            Mon 02 Feb 2026 20:16:44 +0000
asID:                     52596
IP address blocks:        179.191.52.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/358D3526283BAF81BF394FD5D51A9A7C6A6D5E01.crl
                          rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/358D3526283BAF81BF394FD5D51A9A7C6A6D5E01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/358D3526283BAF81BF394FD5D51A9A7C6A6D5E01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 18:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:a6:53:a3:f6:a4:0a:50:84:ee:d4:3b:86:79:d2:54:d1:af:9d:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=358D3526283BAF81BF394FD5D51A9A7C6A6D5E01
        Validity
            Not Before: Feb  3 20:11:44 2025 GMT
            Not After : Feb  2 20:16:44 2026 GMT
        Subject: CN=CA794C8D15FF67BC125DFD294FF74074E7BF0AA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f5:3f:85:36:42:8d:0f:19:74:ff:89:b3:d7:
                    f1:1b:52:9e:e3:74:5e:0e:d5:b3:4e:e8:95:65:b3:
                    7c:ca:a2:26:13:96:43:d2:52:72:7a:cb:cb:c9:0b:
                    42:d8:7c:e8:fe:e7:dc:17:0e:11:40:2c:93:24:3e:
                    19:ad:f1:bc:ec:d5:52:5c:96:a3:36:62:d0:d5:5e:
                    24:67:fd:c3:60:1e:13:70:eb:a3:20:c5:d3:48:16:
                    34:c4:11:89:71:12:8f:4d:ca:b8:bb:fe:2d:d7:0e:
                    a4:35:fb:ef:80:11:8a:1b:be:70:ef:d2:14:ed:f1:
                    69:ad:f5:10:f0:e7:02:3f:8e:4c:f7:0f:d3:93:9b:
                    78:6c:42:78:9f:3d:e9:91:59:76:52:75:6b:d3:27:
                    b1:2a:27:9a:79:79:02:d7:48:2a:8c:42:c8:cb:2f:
                    c9:c4:e1:3e:d8:b7:e7:17:96:79:50:40:3c:5f:a8:
                    cd:71:3c:87:b4:b8:5d:81:73:e5:fa:be:2b:4d:c6:
                    89:f4:71:c9:29:55:b1:db:06:22:92:e7:5b:eb:84:
                    49:33:f7:48:6b:c8:de:45:3a:bf:75:da:11:b5:64:
                    b2:07:34:93:88:83:0a:25:37:90:0d:a2:4f:16:5a:
                    0e:0c:61:bd:54:02:0b:4e:1e:46:e6:1a:87:8c:07:
                    8d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:79:4C:8D:15:FF:67:BC:12:5D:FD:29:4F:F7:40:74:E7:BF:0A:A2
            X509v3 Authority Key Identifier:
                keyid:35:8D:35:26:28:3B:AF:81:BF:39:4F:D5:D5:1A:9A:7C:6A:6D:5E:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/358D3526283BAF81BF394FD5D51A9A7C6A6D5E01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/358D3526283BAF81BF394FD5D51A9A7C6A6D5E01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e35322e302f32332d3233203d3e203532353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:75:09:7c:c4:a8:da:43:a6:58:c6:af:11:51:3e:c0:03:c4:
         21:ea:26:f8:a2:e2:3e:d0:e7:1c:c5:a6:d3:3b:11:84:54:7f:
         00:82:4d:c4:f2:50:d2:52:64:7b:ac:13:67:1b:2f:e0:95:d0:
         9a:c9:c9:23:ef:4c:70:17:b7:22:68:4d:dc:b9:19:fa:f8:9b:
         4b:30:54:95:8b:68:d1:85:35:fd:16:b8:40:ba:58:7b:8c:2a:
         e1:ea:a4:8c:f9:ee:90:a2:42:8b:72:ad:6e:0d:13:4c:05:ae:
         ae:c4:49:39:fe:d1:c6:77:5f:9c:dd:38:a3:34:b1:f3:d5:57:
         c5:03:50:7a:9c:3b:1e:a6:1e:fc:e3:db:e2:a7:93:22:b1:fa:
         d0:92:ad:91:63:e0:2b:18:b6:9d:9b:8b:8a:55:ca:35:c7:90:
         4a:f1:ec:b1:f2:ff:b5:6b:98:e8:95:a1:d5:4c:79:22:3f:3c:
         b1:80:53:7c:9e:cd:40:c7:a7:ed:53:92:f5:11:60:9a:fd:b9:
         29:1a:ff:bb:29:2a:fb:4b:15:a8:43:07:4a:2f:77:c2:c3:c3:
         2b:22:f2:23:f8:cb:a2:97:9c:9e:f5:49:64:6e:a6:70:30:1b:
         67:bf:08:a1:08:82:19:a8:46:6a:45:46:7c:04:e5:ea:b4:32:
         83:1e:46:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:40 2025 by rpki-client