Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e35342e302f32332d3233203d3e203532353936.roa
File:                     3137392e3139312e35342e302f32332d3233203d3e203532353936.roa (raw, json)
Hash identifier:          WZKEKiq3X6MpSRCPbddTsF1ZRbmRS9y8cpzJmm93/yI=
Subject key identifier:   99:B8:74:9B:FF:A4:75:98:F2:31:B4:A5:81:13:64:67:6A:D7:A5:18
Certificate issuer:       /CN=01AC8DA5ED5081878802B288269F263B6EA0F002
Certificate serial:       485D45D2C7670972F16FAD9DCA456BF04D417BAB
Authority key identifier: 01:AC:8D:A5:ED:50:81:87:88:02:B2:88:26:9F:26:3B:6E:A0:F0:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01AC8DA5ED5081878802B288269F263B6EA0F002.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e35342e302f32332d3233203d3e203532353936.roa
Signing time:             Mon 07 Apr 2025 14:00:55 +0000
ROA not before:           Mon 07 Apr 2025 13:55:55 +0000
ROA not after:            Mon 06 Apr 2026 14:00:55 +0000
asID:                     52596
IP address blocks:        179.191.54.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/01AC8DA5ED5081878802B288269F263B6EA0F002.crl
                          rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/01AC8DA5ED5081878802B288269F263B6EA0F002.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01AC8DA5ED5081878802B288269F263B6EA0F002.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 22:50:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:5d:45:d2:c7:67:09:72:f1:6f:ad:9d:ca:45:6b:f0:4d:41:7b:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01AC8DA5ED5081878802B288269F263B6EA0F002
        Validity
            Not Before: Apr  7 13:55:55 2025 GMT
            Not After : Apr  6 14:00:55 2026 GMT
        Subject: CN=99B8749BFFA47598F231B4A5811364676AD7A518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ca:2a:4a:48:c5:28:d1:b0:61:82:dd:ba:51:
                    3f:2c:28:b7:ca:03:82:1e:cc:8c:b6:13:ac:bc:da:
                    d7:77:6f:e9:ad:34:93:fd:63:94:e3:c3:e1:ba:3e:
                    ab:d6:7c:38:16:ef:a4:b7:51:e1:82:d3:1e:f7:76:
                    79:a3:00:29:54:8e:b0:d1:05:2e:da:46:c9:f2:74:
                    67:ea:6e:08:56:cf:20:21:f9:53:a9:64:39:90:d8:
                    08:47:c3:ee:61:41:97:08:fe:8f:88:cc:f6:da:8c:
                    31:24:4c:8f:cb:c7:e5:db:26:b9:91:82:26:b5:a7:
                    d5:1c:fb:8b:b2:c4:03:30:d5:81:cb:e6:c1:dc:d9:
                    07:cc:05:eb:63:a5:11:a5:4d:03:83:a9:37:36:da:
                    11:9f:41:45:65:ba:91:1a:0f:6a:58:b7:10:f8:46:
                    93:70:f7:b5:d6:2c:a8:fa:74:81:66:fa:7a:49:98:
                    b6:65:57:26:84:8e:df:e0:f9:8c:3a:97:1c:3e:aa:
                    3d:b2:d6:61:7c:03:d4:16:69:74:ea:a5:26:f7:a1:
                    77:a4:83:cf:82:4a:84:57:f6:61:69:57:ed:e3:47:
                    88:4a:02:2e:db:6d:28:17:b4:eb:81:d3:62:80:53:
                    2c:b0:51:a4:2a:82:a7:6c:c1:73:b1:40:2d:9c:32:
                    63:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B8:74:9B:FF:A4:75:98:F2:31:B4:A5:81:13:64:67:6A:D7:A5:18
            X509v3 Authority Key Identifier:
                keyid:01:AC:8D:A5:ED:50:81:87:88:02:B2:88:26:9F:26:3B:6E:A0:F0:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/01AC8DA5ED5081878802B288269F263B6EA0F002.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01AC8DA5ED5081878802B288269F263B6EA0F002.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e35342e302f32332d3233203d3e203532353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:ac:52:66:81:a2:42:13:79:b1:f1:e0:e3:88:4e:7e:9c:87:
         ee:4d:0c:02:b1:0e:d1:1f:6e:23:29:f9:44:47:8a:61:c5:ba:
         5a:f2:04:76:91:c0:b7:e4:ea:82:70:85:25:a1:dc:e9:9c:56:
         ac:d2:20:2e:2b:5d:94:7a:38:ea:59:83:2a:5a:5c:f7:93:af:
         09:72:d7:24:6f:bc:c8:7b:2b:04:41:67:f1:78:ba:c1:2c:69:
         d4:66:6c:c7:bf:3f:e8:68:28:cc:0f:bd:e0:8a:7c:c1:1b:30:
         39:97:9a:0e:72:19:4b:b8:9c:c2:0f:f7:8d:66:9b:18:08:63:
         db:90:5e:55:b1:26:c5:44:3e:bf:38:02:06:06:ad:d3:2f:c5:
         ab:ea:11:b9:be:a6:c1:2b:bd:1e:6a:fe:8a:a0:76:be:27:b8:
         6a:4d:64:2e:97:13:99:f4:ef:8b:b3:8b:51:87:15:6b:60:10:
         24:5d:c9:b8:0d:8c:d9:f5:f9:61:10:cf:16:f6:33:7a:5a:30:
         e1:c0:f0:54:6e:6f:7d:72:82:8e:26:be:51:4a:47:b3:04:b4:
         f6:9e:5a:22:ea:d4:6b:76:76:a0:03:d4:ad:9a:a1:6b:a1:8f:
         4d:83:00:21:18:88:1d:36:65:fd:a2:1e:49:a1:c8:be:3a:c9:
         c9:7d:68:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:15:22 2025 by rpki-client on console.sobornost.net