Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137372e33322e302e302f31342d3234203d3e203238353733.roa
File:                     3137372e33322e302e302f31342d3234203d3e203238353733.roa (raw, json)
Hash identifier:          unCo3D95yaPL4tWS1KpBEkjWLQbaOYihkawQhz9ebZc=
Subject key identifier:   95:8E:36:37:DB:A5:B7:B2:22:B7:75:9E:34:6D:E3:6D:1E:A5:FB:8B
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       7B79B7868A2C12067FA20F39DB04D837AAB8FED5
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137372e33322e302e302f31342d3234203d3e203238353733.roa
Signing time:             Wed 03 Apr 2024 18:31:43 +0000
ROA not before:           Wed 03 Apr 2024 18:26:43 +0000
ROA not after:            Wed 02 Apr 2025 18:31:43 +0000
asID:                     28573
IP address blocks:        177.32.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:79:b7:86:8a:2c:12:06:7f:a2:0f:39:db:04:d8:37:aa:b8:fe:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Apr  3 18:26:43 2024 GMT
            Not After : Apr  2 18:31:43 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:58:2e:4c:b1:8d:14:2d:09:0b:08:db:28:a0:
                    c9:00:f2:ac:50:a2:10:0c:b1:c9:95:5a:f9:02:5f:
                    00:f7:cf:97:f9:1c:c8:99:31:73:b7:98:54:7e:e4:
                    3c:66:a4:e2:11:01:bb:33:fd:3b:8e:d0:77:6e:0c:
                    bf:8d:80:1c:af:35:fe:fd:a6:13:6c:87:3a:f7:51:
                    4e:89:f0:96:3d:db:e6:62:6e:f7:b4:78:7f:61:00:
                    82:bf:51:b7:8f:ca:99:98:ba:c6:2f:87:c9:3c:5e:
                    ef:c7:23:2a:a6:a7:06:69:83:db:6e:98:f7:d8:16:
                    04:a9:c3:68:d9:34:55:0b:ac:18:22:c0:c1:ab:be:
                    6b:8c:3e:7a:19:8c:4e:45:81:ca:75:d9:3e:b2:bc:
                    87:8f:e1:97:32:62:e5:a6:02:4c:78:d0:91:73:71:
                    9e:b0:76:bc:3e:3e:0d:e8:c8:64:42:ae:5b:28:fb:
                    64:92:fd:75:45:0f:d3:d9:60:84:64:f7:16:b2:12:
                    20:3f:65:eb:c3:92:75:af:2b:e1:41:0c:5e:f7:6f:
                    57:9a:a8:41:2b:a4:fe:98:ed:10:2b:4c:f1:b7:eb:
                    f7:39:9f:38:cd:d8:34:9f:02:0b:aa:ed:f5:d3:e9:
                    c1:b9:43:a6:3a:95:16:ac:29:17:6e:8b:73:dd:de:
                    a3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:8E:36:37:DB:A5:B7:B2:22:B7:75:9E:34:6D:E3:6D:1E:A5:FB:8B
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137372e33322e302e302f31342d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.32.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         55:22:53:b0:82:a3:ea:c2:0d:b6:15:41:ce:ec:82:d6:0e:5e:
         5f:51:63:cb:5d:35:84:5a:d2:b6:ce:3c:ef:2e:24:ff:f1:99:
         0e:72:ba:6f:81:0b:8f:2c:3b:b7:73:8a:70:49:2c:0f:fb:2b:
         af:82:5b:ba:4f:ab:b5:d9:7d:3c:6b:e9:ee:d4:5e:54:e4:25:
         72:dc:f6:f7:2c:d9:99:ba:0d:eb:69:a2:69:75:e1:c1:9d:35:
         6f:8f:a3:a4:0b:cb:de:b6:14:65:f7:81:ad:ec:fd:c4:82:f6:
         24:b9:c9:3c:4a:9d:fc:80:9a:d9:d1:08:87:54:e3:53:39:b1:
         e6:61:af:8c:59:68:82:0a:6e:90:9c:ac:c7:f5:67:83:b5:86:
         21:6b:c1:5a:9b:36:d0:4d:99:0c:5b:a2:4c:b9:10:7c:04:0a:
         44:fb:60:ef:7a:31:0c:d8:26:89:e8:55:09:60:29:24:e0:b8:
         c6:63:73:8a:fb:bf:eb:98:ae:0c:cb:33:d7:a2:42:54:54:89:
         09:42:57:f6:32:9c:f4:4d:c5:2c:5f:d8:86:ef:57:16:02:af:
         76:01:2a:52:35:3c:d7:49:22:21:ea:ce:77:74:3d:c3:fc:8b:
         a9:39:d3:b6:b4:0a:9d:59:a5:a6:a7:69:ef:11:67:5f:1b:fb:
         7f:31:08:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:12 2024 by rpki-client on console-fra.rpki-client.org