Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e35312e302f32342d3234203d3e203532353936.roa
File:                     3137392e3139312e35312e302f32342d3234203d3e203532353936.roa (raw, json)
Hash identifier:          etl6yALs0Fj12b0P5p5hBHz384iSCZbKRAhSXtJhJ3c=
Subject key identifier:   76:B6:C8:CA:0A:BC:7D:04:78:C6:95:22:94:51:94:92:D2:06:94:AE
Certificate issuer:       /CN=01AC8DA5ED5081878802B288269F263B6EA0F002
Certificate serial:       2174D20EF8C9F482A27A45EE7DCE67B4452A7CAF
Authority key identifier: 01:AC:8D:A5:ED:50:81:87:88:02:B2:88:26:9F:26:3B:6E:A0:F0:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01AC8DA5ED5081878802B288269F263B6EA0F002.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e35312e302f32342d3234203d3e203532353936.roa
Signing time:             Mon 07 Apr 2025 14:00:59 +0000
ROA not before:           Mon 07 Apr 2025 13:55:59 +0000
ROA not after:            Mon 06 Apr 2026 14:00:59 +0000
asID:                     52596
IP address blocks:        179.191.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/01AC8DA5ED5081878802B288269F263B6EA0F002.crl
                          rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/01AC8DA5ED5081878802B288269F263B6EA0F002.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01AC8DA5ED5081878802B288269F263B6EA0F002.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:74:d2:0e:f8:c9:f4:82:a2:7a:45:ee:7d:ce:67:b4:45:2a:7c:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01AC8DA5ED5081878802B288269F263B6EA0F002
        Validity
            Not Before: Apr  7 13:55:59 2025 GMT
            Not After : Apr  6 14:00:59 2026 GMT
        Subject: CN=76B6C8CA0ABC7D0478C6952294519492D20694AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:41:33:25:f2:2c:de:b7:77:1f:98:9b:75:45:
                    23:b1:2d:fa:fe:fa:bd:34:ee:d4:bc:7b:50:68:47:
                    4b:5a:52:a4:83:20:9e:22:92:c8:81:9d:0f:c2:4a:
                    f5:68:10:e4:cb:f5:71:18:e3:0b:68:2f:8a:1d:c5:
                    81:bc:29:aa:a9:f8:1e:73:b0:60:0d:aa:66:24:45:
                    bf:af:c9:f6:a8:da:f3:a0:69:59:1d:40:cb:cf:00:
                    fd:b9:14:de:08:8b:fe:d2:d6:41:98:95:dc:32:16:
                    f0:c3:d8:95:08:f5:74:03:6f:9c:2f:99:05:38:62:
                    9a:d7:e5:94:61:ad:7c:f7:25:67:5a:b1:6e:0e:e8:
                    64:5a:a0:48:92:8a:80:9b:f8:68:05:41:a2:91:a3:
                    09:62:43:96:1b:8b:5c:06:f8:1e:9e:86:3e:07:65:
                    86:7c:ce:1d:be:67:3e:9a:3f:8c:4a:c5:50:e5:b1:
                    67:af:a3:a8:85:a1:d7:46:5d:01:47:0e:51:89:0f:
                    ad:69:19:e8:24:fd:58:80:1d:1a:3a:25:5e:b4:9a:
                    72:8a:a9:65:e1:a5:44:3f:de:24:1f:6a:4d:81:33:
                    de:e1:42:d0:a3:9e:51:b5:a8:43:8c:d9:62:c6:4d:
                    e8:b5:3e:be:02:94:33:25:8c:46:79:94:55:0c:43:
                    9f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B6:C8:CA:0A:BC:7D:04:78:C6:95:22:94:51:94:92:D2:06:94:AE
            X509v3 Authority Key Identifier:
                keyid:01:AC:8D:A5:ED:50:81:87:88:02:B2:88:26:9F:26:3B:6E:A0:F0:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/01AC8DA5ED5081878802B288269F263B6EA0F002.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01AC8DA5ED5081878802B288269F263B6EA0F002.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e35312e302f32342d3234203d3e203532353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:33:45:46:01:08:4d:44:e9:97:e7:96:6d:2a:46:8e:d5:c4:
         a0:72:cb:67:c3:87:59:42:27:54:8f:0f:23:e8:48:10:8a:74:
         19:c5:dc:d7:1c:8c:1f:93:88:96:20:fe:ab:62:0e:0f:3b:a0:
         bf:3b:eb:62:c7:d4:93:69:b3:bb:3b:9b:e3:76:b5:83:08:19:
         8b:97:dd:4f:8b:0f:56:ec:22:fc:07:d8:41:37:2d:f0:1b:ec:
         ed:d7:07:47:c2:3d:6f:1b:ec:db:ab:f0:c4:c0:f2:eb:6a:05:
         ce:50:ca:f9:61:e0:84:3e:6c:5c:df:66:62:00:1f:49:9a:1d:
         d4:d8:3a:e2:bb:2a:d7:ea:e7:8f:56:4f:aa:16:27:01:84:20:
         94:b9:5a:7a:18:1c:af:10:98:eb:1b:8f:c1:41:c7:1c:13:8f:
         58:1b:01:09:11:99:2c:11:a2:b6:11:59:66:fa:1e:48:bb:b1:
         3f:de:7e:d4:a9:0f:17:44:52:3f:84:ab:35:a1:b2:99:9c:1d:
         bf:cf:9e:6c:f9:72:55:a0:a7:1c:83:29:28:3e:19:c2:62:76:
         7f:0d:95:56:27:48:9d:2b:fe:e2:d5:82:59:81:79:63:f8:72:
         a0:e2:9d:23:9f:51:56:93:37:ca:66:40:76:47:fa:60:19:dc:
         ba:f5:8a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:26:54 2025 by rpki-client on console.sobornost.net