Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e35322e302f32342d3234203d3e203532353936.roa
File:                     3137392e3139312e35322e302f32342d3234203d3e203532353936.roa (raw, json)
Hash identifier:          yeUTPNWbVuwpG4rK/40z9QeuG8iDCww6CBKa8zyi9zc=
Subject key identifier:   F5:8C:B7:C9:8A:DF:3B:14:EB:E1:F5:0F:E2:45:85:FA:D7:90:64:E9
Certificate issuer:       /CN=01AC8DA5ED5081878802B288269F263B6EA0F002
Certificate serial:       6741F24CD680156067147D085543C99081147045
Authority key identifier: 01:AC:8D:A5:ED:50:81:87:88:02:B2:88:26:9F:26:3B:6E:A0:F0:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01AC8DA5ED5081878802B288269F263B6EA0F002.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e35322e302f32342d3234203d3e203532353936.roa
Signing time:             Mon 07 Apr 2025 14:01:00 +0000
ROA not before:           Mon 07 Apr 2025 13:56:00 +0000
ROA not after:            Mon 06 Apr 2026 14:01:00 +0000
asID:                     52596
IP address blocks:        179.191.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/01AC8DA5ED5081878802B288269F263B6EA0F002.crl
                          rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/01AC8DA5ED5081878802B288269F263B6EA0F002.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01AC8DA5ED5081878802B288269F263B6EA0F002.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 14:26:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:41:f2:4c:d6:80:15:60:67:14:7d:08:55:43:c9:90:81:14:70:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01AC8DA5ED5081878802B288269F263B6EA0F002
        Validity
            Not Before: Apr  7 13:56:00 2025 GMT
            Not After : Apr  6 14:01:00 2026 GMT
        Subject: CN=F58CB7C98ADF3B14EBE1F50FE24585FAD79064E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a7:34:d2:21:b2:67:d3:67:01:40:98:e9:07:
                    bd:05:b8:ce:12:c9:88:57:9d:43:15:27:cd:0b:94:
                    7f:8b:88:7d:4f:b6:1c:b4:2b:c0:80:ed:6c:ca:0f:
                    cd:b5:6f:5b:21:49:9c:24:a5:cb:c9:19:54:4c:a7:
                    f9:02:c1:a2:38:fa:c4:99:24:fc:c8:7d:46:8b:bf:
                    39:98:35:06:ea:eb:00:c3:f7:00:d5:0d:78:95:4f:
                    8d:9e:f9:fe:04:59:c8:fd:1e:2e:87:74:b2:bd:12:
                    3f:ac:77:7d:93:f8:0c:fe:42:75:56:99:dc:f0:ef:
                    a2:1c:70:c9:0f:0d:ac:5a:42:61:7a:8b:e8:a7:07:
                    92:fe:40:b0:0b:60:76:1d:83:4a:45:5b:99:be:ea:
                    b0:a6:c6:3c:25:36:b7:eb:58:53:f9:e1:95:bb:38:
                    cf:e8:b1:11:32:f2:1d:73:9e:02:b0:b8:a6:f7:a1:
                    fc:d8:90:60:4c:0f:7d:6a:89:a5:c4:1d:50:ed:92:
                    76:90:5e:7f:fd:cb:e6:8e:8a:d0:7c:75:65:d9:37:
                    d7:97:56:60:c1:dc:d3:a5:33:24:5f:7f:21:37:9a:
                    fa:f9:2b:71:40:b5:14:cf:ce:46:4b:5a:f1:ce:68:
                    e0:37:2a:8d:0f:61:ac:ce:68:81:2e:42:5e:3b:d6:
                    35:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:8C:B7:C9:8A:DF:3B:14:EB:E1:F5:0F:E2:45:85:FA:D7:90:64:E9
            X509v3 Authority Key Identifier:
                keyid:01:AC:8D:A5:ED:50:81:87:88:02:B2:88:26:9F:26:3B:6E:A0:F0:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/01AC8DA5ED5081878802B288269F263B6EA0F002.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01AC8DA5ED5081878802B288269F263B6EA0F002.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e35322e302f32342d3234203d3e203532353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:05:2b:22:38:ae:ac:6a:ed:6f:8b:d3:6a:33:1c:ed:83:f3:
         b8:4d:a9:6d:2b:ea:5b:52:4d:94:05:5b:48:83:06:3e:53:41:
         5a:77:7a:1d:8d:bb:57:90:82:1a:04:ad:ab:96:8c:18:c8:64:
         94:1a:49:1c:07:a3:a9:77:4f:cc:9c:95:bf:74:7c:3c:28:3b:
         ae:6c:57:05:bb:cd:b7:f3:88:56:b0:ad:00:d6:e2:92:be:e3:
         13:91:9e:92:5f:85:d1:53:64:05:49:07:37:16:db:30:a2:b8:
         8a:43:cc:96:53:47:8a:b1:bd:11:61:fb:46:30:01:14:ba:40:
         c3:1b:bc:59:eb:b8:cd:7e:93:d8:be:df:3d:8e:9d:c0:4a:64:
         ad:e3:e3:1b:ff:6f:7f:ab:c7:c4:38:14:4d:3e:c9:54:00:9a:
         79:71:44:7b:f1:c1:15:db:b3:d6:0f:75:56:4e:71:8f:27:89:
         49:fe:ef:f3:3f:74:39:ed:ca:42:d5:3a:e0:6b:bc:4b:68:da:
         c4:1c:a1:a2:b1:32:e2:80:ce:ba:8f:d5:78:f7:46:6b:5b:6f:
         84:a3:13:8b:2a:60:9c:62:b7:c0:41:4c:5e:f6:9a:da:da:72:
         11:a6:b0:54:e7:9a:44:07:62:df:88:5c:21:5d:d8:35:33:3e:
         9f:d0:b7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:51:47 2025 by rpki-client