Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e35322e302f32322d3232203d3e203532353936.roa
File:                     3137392e3139312e35322e302f32322d3232203d3e203532353936.roa (raw, json)
Hash identifier:          VWFu1IE/d/xPYxzlUOLLjzuxpgwTp84eXuNN3BcLq3w=
Subject key identifier:   2B:96:CD:79:21:C0:8B:79:82:66:FF:A5:07:22:F7:1B:9A:7A:BF:EA
Certificate issuer:       /CN=01AC8DA5ED5081878802B288269F263B6EA0F002
Certificate serial:       09179B4A500410AAD4111FB29D727B172F7D897F
Authority key identifier: 01:AC:8D:A5:ED:50:81:87:88:02:B2:88:26:9F:26:3B:6E:A0:F0:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01AC8DA5ED5081878802B288269F263B6EA0F002.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e35322e302f32322d3232203d3e203532353936.roa
Signing time:             Mon 07 Apr 2025 14:00:57 +0000
ROA not before:           Mon 07 Apr 2025 13:55:57 +0000
ROA not after:            Mon 06 Apr 2026 14:00:57 +0000
asID:                     52596
IP address blocks:        179.191.52.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/01AC8DA5ED5081878802B288269F263B6EA0F002.crl
                          rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/01AC8DA5ED5081878802B288269F263B6EA0F002.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01AC8DA5ED5081878802B288269F263B6EA0F002.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 22:50:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:17:9b:4a:50:04:10:aa:d4:11:1f:b2:9d:72:7b:17:2f:7d:89:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01AC8DA5ED5081878802B288269F263B6EA0F002
        Validity
            Not Before: Apr  7 13:55:57 2025 GMT
            Not After : Apr  6 14:00:57 2026 GMT
        Subject: CN=2B96CD7921C08B798266FFA50722F71B9A7ABFEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2f:70:d8:8e:7a:6d:b5:c3:7c:c9:2b:36:0f:
                    0e:1b:7a:1b:7e:a6:83:03:d5:eb:56:d0:fd:d7:97:
                    d0:b1:31:aa:5d:9b:5e:8f:8a:f7:d1:09:73:94:2d:
                    fa:ca:d7:65:cc:2a:1c:58:e7:e9:fe:68:e4:3e:50:
                    94:23:a6:12:c6:a7:3c:be:1a:f7:4f:e6:bf:3c:41:
                    69:65:28:e8:3e:df:a6:d5:20:64:9e:42:89:06:ec:
                    dc:c0:e7:38:a7:06:21:d3:67:87:5d:29:99:2f:39:
                    e6:b6:8d:7f:a4:05:92:90:3a:11:6c:d5:ef:9a:55:
                    37:28:3f:80:1f:3d:58:c3:1e:b0:ee:6a:0e:e2:a7:
                    f5:2e:75:75:36:1c:f9:ba:6f:41:ea:a3:f5:cf:55:
                    0f:36:8c:12:61:a0:66:a3:a8:0f:b8:3c:b7:72:5f:
                    f1:c5:21:b0:a3:44:cf:37:1c:fd:8d:07:48:fd:9c:
                    ce:ac:24:c5:bf:15:bd:34:0f:08:48:f8:70:29:00:
                    aa:30:10:9d:17:48:86:01:75:62:bf:0a:5b:d8:5d:
                    65:02:1c:79:15:a9:e2:81:b5:6b:88:54:3b:7d:c1:
                    6d:75:5a:d3:42:eb:33:a5:5c:5c:c3:2d:0d:93:8b:
                    4a:24:67:cb:d9:8c:21:47:b4:ba:ce:b4:1a:21:48:
                    07:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:96:CD:79:21:C0:8B:79:82:66:FF:A5:07:22:F7:1B:9A:7A:BF:EA
            X509v3 Authority Key Identifier:
                keyid:01:AC:8D:A5:ED:50:81:87:88:02:B2:88:26:9F:26:3B:6E:A0:F0:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/01AC8DA5ED5081878802B288269F263B6EA0F002.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01AC8DA5ED5081878802B288269F263B6EA0F002.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e35322e302f32322d3232203d3e203532353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:79:dd:54:45:cf:d5:0a:e2:03:d4:e3:0c:7e:96:a2:b2:5d:
         1a:f9:7d:96:07:b2:9b:20:5f:b5:0e:24:ce:c5:e3:83:92:45:
         9f:d7:51:f9:35:e1:2d:82:a8:ce:96:ac:79:64:dc:b2:8f:42:
         2c:26:44:4c:3c:65:17:27:4b:c2:e7:81:30:8a:5f:3f:24:13:
         ca:07:2b:4e:3c:d0:37:be:e0:de:24:a8:c8:ce:25:3d:5e:09:
         88:9a:94:2d:b6:18:77:55:23:65:f9:70:95:31:7c:61:e5:df:
         60:9d:ea:02:8d:a0:87:ff:4d:b5:5e:14:56:c5:a5:43:32:ba:
         6c:21:c6:bb:b3:b6:5a:db:8c:4a:ed:4c:f3:92:44:40:57:e5:
         36:9e:fe:51:bf:80:b4:24:d4:46:c4:f1:87:70:d6:2e:27:28:
         83:74:5f:c3:bd:13:68:06:af:e9:ca:aa:b1:c3:37:1b:41:f0:
         0c:4a:52:e6:e7:83:e0:c3:db:c0:63:d8:8e:1d:94:4e:70:bb:
         e8:bd:15:b7:7d:53:3e:d4:9a:68:81:77:0e:ad:22:d4:2f:2d:
         7e:95:61:4c:cb:73:30:d8:e2:33:b7:ff:d2:fb:9c:d7:01:87:
         e2:b8:77:9e:d0:cf:ba:89:b5:6a:27:68:42:7d:96:ee:a9:e5:
         ce:1b:fe:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:15:22 2025 by rpki-client on console.sobornost.net