Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e35342e302f32332d3233203d3e203532353936.roa
File:                     3137392e3139312e35342e302f32332d3233203d3e203532353936.roa (raw, json)
Hash identifier:          5rh46QJSQtbbNn7BDaOb11EzMWFKTt7wl4OBGZNX2gE=
Subject key identifier:   F7:C6:73:C6:93:88:0C:D4:3A:E1:C2:2C:7C:36:32:AC:BC:A3:77:20
Certificate issuer:       /CN=F9D43943DC9C79F0864C8A5A95363AFDB6AE591B
Certificate serial:       5B35C6DC88FB72F01034139092221479A7002866
Authority key identifier: F9:D4:39:43:DC:9C:79:F0:86:4C:8A:5A:95:36:3A:FD:B6:AE:59:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9D43943DC9C79F0864C8A5A95363AFDB6AE591B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e35342e302f32332d3233203d3e203532353936.roa
Signing time:             Mon 15 Sep 2025 14:41:21 +0000
ROA not before:           Mon 15 Sep 2025 14:36:21 +0000
ROA not after:            Mon 14 Sep 2026 14:41:21 +0000
asID:                     52596
IP address blocks:        179.191.54.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/F9D43943DC9C79F0864C8A5A95363AFDB6AE591B.crl
                          rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/F9D43943DC9C79F0864C8A5A95363AFDB6AE591B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9D43943DC9C79F0864C8A5A95363AFDB6AE591B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 05:11:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:35:c6:dc:88:fb:72:f0:10:34:13:90:92:22:14:79:a7:00:28:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9D43943DC9C79F0864C8A5A95363AFDB6AE591B
        Validity
            Not Before: Sep 15 14:36:21 2025 GMT
            Not After : Sep 14 14:41:21 2026 GMT
        Subject: CN=F7C673C693880CD43AE1C22C7C3632ACBCA37720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:50:8a:76:f4:e4:05:c6:d6:c4:17:d9:75:f1:
                    d6:3a:40:3b:cd:d4:c1:32:77:7a:a0:d5:07:36:a1:
                    e5:27:90:d9:74:84:89:9b:38:c2:c1:2e:d2:52:78:
                    3c:54:f3:6a:6e:0f:92:31:1d:83:fc:07:4d:b4:dc:
                    ba:9e:b8:f8:81:2d:46:d2:b7:ca:1f:00:51:f4:56:
                    2c:50:61:9d:d6:7d:72:d6:ab:b8:0d:02:49:0c:b2:
                    82:46:f2:97:e0:f4:8a:a6:54:04:cb:83:60:3c:63:
                    e2:f9:b6:60:b6:d7:2c:e5:b9:d5:7f:ca:87:14:67:
                    cc:ed:47:19:d1:0d:77:ea:25:4b:06:7b:a9:61:6a:
                    c8:13:d4:f3:8c:62:3b:13:05:f5:cb:20:d2:51:b9:
                    73:63:36:47:ea:d8:75:64:fb:0f:1f:e0:ef:48:8e:
                    4c:dd:bb:7a:ca:e1:f0:0c:b0:0f:41:d0:ef:c7:de:
                    aa:af:3a:ac:28:0c:07:59:07:b9:45:21:dc:c1:4e:
                    b9:81:f3:81:e6:05:2c:ca:55:37:ab:cf:ac:f2:86:
                    61:bc:0d:01:3b:b8:3d:87:92:ab:e7:25:b0:31:d6:
                    df:ca:a7:fe:ab:eb:7b:92:65:34:40:d2:16:2a:8e:
                    a7:b5:2c:1b:52:b1:c9:ee:21:df:55:d3:c0:f6:d5:
                    47:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:C6:73:C6:93:88:0C:D4:3A:E1:C2:2C:7C:36:32:AC:BC:A3:77:20
            X509v3 Authority Key Identifier:
                keyid:F9:D4:39:43:DC:9C:79:F0:86:4C:8A:5A:95:36:3A:FD:B6:AE:59:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/F9D43943DC9C79F0864C8A5A95363AFDB6AE591B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9D43943DC9C79F0864C8A5A95363AFDB6AE591B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e35342e302f32332d3233203d3e203532353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:aa:31:92:1c:31:06:13:8f:ea:c8:47:1a:bd:79:59:dd:3f:
         1a:bd:66:49:e4:97:00:0f:22:24:fb:9b:85:93:a0:8c:0f:07:
         03:5a:a3:db:09:9e:ce:01:2f:18:c6:64:81:55:d2:41:96:1c:
         4b:b9:07:d2:09:f9:1f:92:67:72:69:4c:69:84:21:57:3a:3e:
         8b:4e:a9:3f:37:93:9f:d3:e9:74:eb:be:ed:ed:77:2a:0b:10:
         2e:7c:18:45:d6:07:33:a4:88:a2:0a:b6:8c:02:87:ff:c1:dc:
         74:f2:5f:bc:c2:5d:6b:23:d7:ff:c5:60:38:80:f7:b8:ca:e1:
         b8:67:2d:7a:4c:b9:c0:7c:ec:21:f2:38:bd:3e:06:a6:95:b3:
         16:18:58:55:fb:f9:b1:d3:c6:25:5d:6f:69:3a:54:b2:56:48:
         7d:38:cf:01:5d:ee:83:e8:a9:35:b3:ed:e6:01:ad:c3:6b:3b:
         bd:38:97:ce:ca:78:f1:d6:c7:e4:82:83:8f:0a:ba:af:be:34:
         81:ed:33:16:b7:f9:4d:c3:c4:49:8d:1c:48:7a:d5:01:75:10:
         4b:d8:e1:41:d0:e5:3e:54:fa:af:6e:f4:f6:ed:69:4b:ef:fb:
         06:37:03:7b:49:51:00:04:f2:60:af:fa:5d:4f:3e:91:16:b3:
         c5:b4:16:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 08:08:36 2025 by rpki-client