Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e35302e302f32342d3234203d3e203532353936.roa
File:                     3137392e3139312e35302e302f32342d3234203d3e203532353936.roa (raw, json)
Hash identifier:          8PPEEd/KsHUB2yqdOH0V3UzkQK9lqif2Kld6vaCkZXU=
Subject key identifier:   0F:33:E9:41:F7:B1:46:5E:B9:C5:A4:46:CA:79:E8:5F:68:B1:80:0D
Certificate issuer:       /CN=01AC8DA5ED5081878802B288269F263B6EA0F002
Certificate serial:       0A188AAD75A3AB5234AC12C7F3E754CEAEFB1933
Authority key identifier: 01:AC:8D:A5:ED:50:81:87:88:02:B2:88:26:9F:26:3B:6E:A0:F0:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01AC8DA5ED5081878802B288269F263B6EA0F002.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e35302e302f32342d3234203d3e203532353936.roa
Signing time:             Mon 07 Apr 2025 14:00:58 +0000
ROA not before:           Mon 07 Apr 2025 13:55:58 +0000
ROA not after:            Mon 06 Apr 2026 14:00:58 +0000
asID:                     52596
IP address blocks:        179.191.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/01AC8DA5ED5081878802B288269F263B6EA0F002.crl
                          rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/01AC8DA5ED5081878802B288269F263B6EA0F002.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01AC8DA5ED5081878802B288269F263B6EA0F002.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:18:8a:ad:75:a3:ab:52:34:ac:12:c7:f3:e7:54:ce:ae:fb:19:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01AC8DA5ED5081878802B288269F263B6EA0F002
        Validity
            Not Before: Apr  7 13:55:58 2025 GMT
            Not After : Apr  6 14:00:58 2026 GMT
        Subject: CN=0F33E941F7B1465EB9C5A446CA79E85F68B1800D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:31:6f:7a:95:72:e5:e9:61:ee:bd:b4:de:cb:
                    8f:d1:76:5e:e1:c6:17:63:f1:ff:ab:4c:d9:f6:02:
                    99:60:f6:80:79:73:e1:00:3e:fc:90:48:70:94:f9:
                    ac:47:21:39:e4:7e:3c:59:fa:cf:1b:8b:c3:0e:e4:
                    19:5d:24:db:55:52:81:0b:36:9c:43:b5:21:ec:c9:
                    ec:f4:93:f0:de:6a:de:92:b0:4c:b3:fe:02:84:0a:
                    0d:ad:87:20:e7:96:65:75:20:87:ae:53:42:0d:a9:
                    c5:dc:cc:44:e3:8b:6a:b1:3d:35:63:cc:f5:80:27:
                    44:c8:f9:19:8c:f0:f8:af:0b:54:b1:ad:7b:c0:21:
                    7a:f4:d6:c3:70:0f:70:63:03:21:2d:95:b7:91:e1:
                    4c:ae:26:7d:e1:99:47:ea:d4:f0:9a:3c:ac:05:61:
                    55:4b:bb:d2:8e:f1:8b:a1:18:a8:ec:65:d2:29:74:
                    bb:56:9b:8e:aa:ef:ec:01:3c:d4:37:95:d4:3c:84:
                    20:0d:81:0a:e0:8c:3f:68:68:28:51:cb:5f:6a:8b:
                    0b:68:95:67:20:c8:13:82:1c:33:1c:3c:4b:87:65:
                    1e:4d:02:e9:62:a9:2b:ec:8d:fa:a6:2f:78:4c:61:
                    2d:8b:86:7d:e2:d3:5b:50:c6:5e:09:57:99:f5:a6:
                    3d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:33:E9:41:F7:B1:46:5E:B9:C5:A4:46:CA:79:E8:5F:68:B1:80:0D
            X509v3 Authority Key Identifier:
                keyid:01:AC:8D:A5:ED:50:81:87:88:02:B2:88:26:9F:26:3B:6E:A0:F0:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/01AC8DA5ED5081878802B288269F263B6EA0F002.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01AC8DA5ED5081878802B288269F263B6EA0F002.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e35302e302f32342d3234203d3e203532353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:82:9c:98:43:ad:cf:d8:cf:15:f9:8c:26:c7:bd:ad:34:26:
         1a:20:3a:a2:de:38:87:da:e9:2e:e0:2b:ad:07:a5:a2:63:3a:
         a5:e4:a1:10:63:43:c3:e9:d7:25:63:43:07:d0:45:7c:83:c2:
         34:5b:d8:b8:1d:91:ad:d9:a2:8e:8c:05:d6:43:2a:4e:01:7b:
         f5:f1:5d:64:a6:3a:67:d1:3b:b9:9b:f8:7d:28:dc:08:c2:64:
         af:c9:9d:fc:e9:2b:fe:85:93:cf:43:51:6c:07:4a:d2:6e:1f:
         d8:c9:34:83:8a:f1:95:d7:d6:34:05:ca:7a:8b:8c:0b:3a:70:
         0b:c8:e0:ad:cb:55:b9:05:dd:38:fe:1f:c5:70:5c:4b:cd:5d:
         2d:5f:81:f6:e0:ad:ea:37:13:04:4c:4e:bf:21:08:d7:ea:c5:
         a8:41:25:74:17:b1:77:b8:18:56:8f:a6:3b:d0:c7:a3:50:4f:
         0d:34:83:05:9b:ed:69:ff:c1:be:61:8b:ae:57:93:9b:9c:a8:
         6e:b7:c2:c4:62:40:7b:8b:91:df:ab:a6:92:fd:80:ee:4e:c9:
         57:4e:ab:6c:70:ce:10:95:cb:7d:e3:d7:ab:29:07:31:95:50:
         87:b2:91:ef:de:38:ba:b1:4a:2c:20:17:61:c0:a5:3e:00:bb:
         e5:48:9d:06
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUChiKrXWjq1I0rBLH8+dUzq77GTMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFBQzhEQTVFRDUwODE4Nzg4MDJCMjg4MjY5RjI2M0I2
RUEwRjAwMjAeFw0yNTA0MDcxMzU1NThaFw0yNjA0MDYxNDAwNThaMDMxMTAvBgNV
BAMTKDBGMzNFOTQxRjdCMTQ2NUVCOUM1QTQ0NkNBNzlFODVGNjhCMTgwMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1MW96lXLl6WHuvbTey4/Rdl7h
xhdj8f+rTNn2Aplg9oB5c+EAPvyQSHCU+axHITnkfjxZ+s8bi8MO5BldJNtVUoEL
NpxDtSHsyez0k/Deat6SsEyz/gKECg2thyDnlmV1IIeuU0INqcXczETji2qxPTVj
zPWAJ0TI+RmM8PivC1SxrXvAIXr01sNwD3BjAyEtlbeR4UyuJn3hmUfq1PCaPKwF
YVVLu9KO8YuhGKjsZdIpdLtWm46q7+wBPNQ3ldQ8hCANgQrgjD9oaChRy19qiwto
lWcgyBOCHDMcPEuHZR5NAuliqSvsjfqmL3hMYS2Lhn3i01tQxl4JV5n1pj23AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUDzPpQfexRl65xaRGynnoX2ixgA0wHwYDVR0j
BBgwFoAUAayNpe1QgYeIArKIJp8mO26g8AIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmliTllac1NnTXEyd3pFeGh5ZXNRVEJ0aEVhSE5ISmE0OG1lb0ZwVWJm
V3gvMC8wMUFDOERBNUVENTA4MTg3ODgwMkIyODgyNjlGMjYzQjZFQTBGMDAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAxQUM4REE1RUQ1MDgxODc4
ODAyQjI4ODI2OUYyNjNCNkVBMEYwMDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZpYk5ZWnNTZ01xMnd6RXhoeWVzUVRCdGhFYUhOSEphNDhtZW9GcFViZld4LzAv
MzEzNzM5MmUzMTM5MzEyZTM1MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzUzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAs78yMA0GCSqGSIb3DQEBCwUAA4IBAQB7gpyYQ63P
2M8V+Ywmx72tNCYaIDqi3jiH2uku4CutB6WiYzql5KEQY0PD6dclY0MH0EV8g8I0
W9i4HZGt2aKOjAXWQypOAXv18V1kpjpn0Tu5m/h9KNwIwmSvyZ386Sv+hZPPQ1Fs
B0rSbh/YyTSDivGV19Y0Bcp6i4wLOnALyOCty1W5Bd04/h/FcFxLzV0tX4H24K3q
NxMETE6/IQjX6sWoQSV0F7F3uBhWj6Y70MejUE8NNIMFm+1p/8G+YYuuV5ObnKhu
t8LEYkB7i5Hfq6aS/YDuTslXTqtscM4Qlct949erKQcxlVCHspHv3ji6sUosIBdh
wKU+ALvlSJ0G
-----END CERTIFICATE-----
Generated at Sun Apr 27 10:26:54 2025 by rpki-client on console.sobornost.net