Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137372e3138302e302e302f31342d3234203d3e203238353733.roa
File:                     3137372e3138302e302e302f31342d3234203d3e203238353733.roa (raw, json)
Hash identifier:          MY81tghTYkTURVLiHlMfH5x3guU42aJi+bCNIFydJLs=
Subject key identifier:   87:FF:AB:41:47:6F:31:38:99:56:1E:A0:2B:62:17:4A:4C:D5:04:B2
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       2798D1491A4B995AA996E05A295CBA2446D2A8EB
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137372e3138302e302e302f31342d3234203d3e203238353733.roa
Signing time:             Wed 03 Apr 2024 18:31:46 +0000
ROA not before:           Wed 03 Apr 2024 18:26:46 +0000
ROA not after:            Wed 02 Apr 2025 18:31:46 +0000
asID:                     28573
IP address blocks:        177.180.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:98:d1:49:1a:4b:99:5a:a9:96:e0:5a:29:5c:ba:24:46:d2:a8:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Apr  3 18:26:46 2024 GMT
            Not After : Apr  2 18:31:46 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:73:97:88:e6:9b:3d:47:ae:1e:7d:c6:0a:bb:
                    4b:43:e2:24:64:0a:fd:46:31:94:9c:82:71:24:45:
                    3a:e8:0e:12:91:1d:ab:d2:ea:6b:dd:60:07:b3:01:
                    11:fa:e7:ac:cf:d2:cb:74:b6:c8:f7:01:76:92:a0:
                    e0:31:a2:2f:93:31:19:ab:a0:13:14:fd:32:81:f0:
                    99:bc:c1:57:e9:ae:33:6a:fd:21:ad:cf:65:0a:09:
                    17:e7:0d:df:e5:b2:36:30:5d:78:72:ca:4e:bd:b7:
                    74:50:41:d0:41:4c:34:3c:96:3d:3b:1d:f9:ee:f1:
                    d2:03:9d:5d:ca:59:b4:62:9f:13:89:a4:bf:78:d2:
                    6b:98:dc:3f:95:b6:eb:17:ac:76:f8:c6:98:6a:de:
                    27:0e:e2:e2:fc:70:f1:3c:ce:57:7d:af:e1:36:9d:
                    68:a8:46:c1:3a:a9:7f:9f:00:97:b6:9c:c1:9c:d9:
                    9b:60:f8:39:63:79:c9:88:1b:aa:b5:3c:57:d0:47:
                    3c:78:56:fc:15:21:55:6c:75:31:c9:f0:cc:4f:bb:
                    d5:8f:56:26:6c:f1:0f:63:9c:f8:53:3b:f2:22:8d:
                    9d:9a:7b:b4:f7:e7:61:b0:1c:30:85:79:7d:3e:1b:
                    91:8a:b8:70:03:07:65:ca:24:f6:b0:32:fa:bc:2d:
                    2d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:FF:AB:41:47:6F:31:38:99:56:1E:A0:2B:62:17:4A:4C:D5:04:B2
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137372e3138302e302e302f31342d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.180.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         7e:1b:38:d0:8a:41:7a:80:23:3d:ff:32:49:f1:21:7f:fb:01:
         fb:32:b8:5c:5f:79:21:14:56:ed:92:57:53:74:c1:12:ae:4f:
         00:21:df:cb:02:bb:01:26:1c:d0:26:6b:dc:7d:16:eb:c0:ed:
         0a:c0:5e:ca:e3:00:0f:71:e4:ba:09:52:87:81:eb:c9:81:09:
         5a:e1:af:f2:d7:e7:8f:dd:2c:e6:ea:9b:b9:3b:90:09:30:75:
         42:5b:e5:26:9a:30:a1:cc:b9:69:cc:79:ab:03:b1:61:4e:22:
         15:7b:ae:45:82:2f:97:02:92:80:06:52:fb:d1:4b:c8:ba:9d:
         f1:56:5c:0a:d8:c5:94:3a:50:5f:48:0b:84:0d:63:dc:ee:31:
         00:4c:d4:45:48:40:47:d7:eb:6f:d5:22:49:9e:b2:04:35:a8:
         ee:c6:3d:32:93:d7:d4:40:9c:07:e1:6a:17:87:c8:fe:05:e3:
         25:0d:23:2b:8e:59:7c:28:43:16:2e:77:b8:a9:d6:19:ec:95:
         a4:fe:2c:67:6e:01:2e:80:5a:f7:d8:ac:35:0f:f3:13:13:76:
         09:7e:d1:34:c8:66:6c:80:46:d9:ea:b9:08:51:a8:57:4f:8f:
         a3:fa:bf:cc:f8:f6:17:02:ff:6d:8e:3f:89:d1:e7:12:c8:82:
         e2:d8:66:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:12 2024 by rpki-client on console-fra.rpki-client.org