Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e34382e302f32332d3233203d3e203532353936.roa
File:                     3137392e3139312e34382e302f32332d3233203d3e203532353936.roa (raw, json)
Hash identifier:          90TIQZ6DY2o0rkHWDyqo2hXDU5Binx6sD2f4MfoxZ5U=
Subject key identifier:   A1:0E:74:38:1D:A6:22:C2:8C:76:9E:65:DF:1A:D2:34:05:37:8E:B0
Certificate issuer:       /CN=01AC8DA5ED5081878802B288269F263B6EA0F002
Certificate serial:       5DF4EFF0FF57E80B493A561497B083FCABDD4478
Authority key identifier: 01:AC:8D:A5:ED:50:81:87:88:02:B2:88:26:9F:26:3B:6E:A0:F0:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01AC8DA5ED5081878802B288269F263B6EA0F002.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e34382e302f32332d3233203d3e203532353936.roa
Signing time:             Mon 07 Apr 2025 14:00:57 +0000
ROA not before:           Mon 07 Apr 2025 13:55:57 +0000
ROA not after:            Mon 06 Apr 2026 14:00:57 +0000
asID:                     52596
IP address blocks:        179.191.48.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/01AC8DA5ED5081878802B288269F263B6EA0F002.crl
                          rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/01AC8DA5ED5081878802B288269F263B6EA0F002.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01AC8DA5ED5081878802B288269F263B6EA0F002.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 13:09:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:f4:ef:f0:ff:57:e8:0b:49:3a:56:14:97:b0:83:fc:ab:dd:44:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01AC8DA5ED5081878802B288269F263B6EA0F002
        Validity
            Not Before: Apr  7 13:55:57 2025 GMT
            Not After : Apr  6 14:00:57 2026 GMT
        Subject: CN=A10E74381DA622C28C769E65DF1AD23405378EB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5c:2e:3e:43:9c:4a:32:6b:a9:44:14:48:8e:
                    6a:06:c4:13:28:84:72:01:23:4d:c8:ba:ab:f7:7f:
                    57:d3:d0:2f:ad:b5:cf:a4:8c:70:f1:ac:8e:10:e6:
                    dc:37:c4:7e:6c:c6:21:b2:e1:50:d8:8e:9b:4c:0f:
                    47:46:30:de:96:db:80:6d:e7:3b:17:1f:0f:c1:59:
                    bd:4e:c2:d6:68:57:24:6c:dc:6b:7a:bb:bf:c0:8f:
                    5f:88:99:b0:f5:b4:f8:36:32:5a:55:66:08:f0:dd:
                    f9:8b:c9:17:7f:63:ce:84:7a:73:f3:3a:1c:6c:5c:
                    2e:dc:9a:55:6b:75:1f:2b:7b:4a:57:cf:2a:7a:ea:
                    80:f9:38:7f:c1:54:b5:0d:af:e4:9d:f0:4e:4a:41:
                    cd:f7:39:55:81:92:ed:26:a5:7c:36:e5:59:20:e9:
                    aa:58:16:e3:f8:96:73:b4:e9:ac:79:9f:df:2b:d6:
                    1e:d8:9e:95:5a:a7:5a:8f:68:90:ad:9c:49:1f:b1:
                    81:6e:df:da:37:96:8f:af:29:55:a9:8e:17:6c:3e:
                    ec:4b:5d:f0:2e:09:3c:57:79:cb:d6:a4:9e:95:28:
                    41:5f:00:87:55:84:0e:b7:c7:3b:12:04:62:fd:0c:
                    4c:44:95:04:64:9b:61:ae:fd:33:f0:67:f7:2c:32:
                    d8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:0E:74:38:1D:A6:22:C2:8C:76:9E:65:DF:1A:D2:34:05:37:8E:B0
            X509v3 Authority Key Identifier:
                keyid:01:AC:8D:A5:ED:50:81:87:88:02:B2:88:26:9F:26:3B:6E:A0:F0:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/01AC8DA5ED5081878802B288269F263B6EA0F002.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01AC8DA5ED5081878802B288269F263B6EA0F002.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e34382e302f32332d3233203d3e203532353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:50:87:a4:e1:bb:cc:32:f0:f9:d3:53:ce:a7:45:9d:36:9b:
         85:ab:36:00:8b:4f:93:cb:ac:a6:97:c7:72:e8:1c:a6:9c:08:
         eb:32:b0:f9:a2:3c:a2:e6:5c:79:c0:9f:ca:aa:ce:63:b8:4f:
         c1:b5:68:5d:e3:bb:d3:c0:b0:e6:ed:2d:41:c6:a3:64:4b:a4:
         63:71:32:b0:9b:50:bd:2d:ee:c9:a6:79:c8:39:89:46:37:1c:
         7f:a9:a8:e4:ef:33:21:9d:12:18:3b:5b:2a:6e:c8:6a:a6:e7:
         cd:54:33:9a:4d:ad:1b:3b:e5:01:2c:b4:e3:19:33:73:17:fe:
         8c:88:c5:1a:76:c1:17:44:ef:39:57:bb:88:9e:33:e2:a7:a9:
         32:ab:75:97:8d:15:93:81:6c:cd:81:ba:a7:a4:77:9d:0b:dd:
         4b:bd:16:d5:60:87:ee:9b:61:0f:69:00:d8:8f:19:7c:a3:36:
         34:c2:27:9f:5c:75:72:95:4b:b6:ba:ba:0c:88:b0:99:13:01:
         55:4c:b2:dc:a9:52:49:1b:7c:bc:d0:aa:f9:b4:10:6c:6d:00:
         f3:7a:39:df:ea:55:d2:ce:6b:cf:e9:5a:30:2c:ef:cf:ba:96:
         ee:74:bb:0b:d3:c1:aa:c5:cb:4c:a8:64:2f:3d:8b:7b:96:06:
         5d:b2:c2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:11:37 2025 by rpki-client