Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137372e33322e302e302f31342d3234203d3e203238353733.roa
File:                     3137372e33322e302e302f31342d3234203d3e203238353733.roa (raw, json)
Hash identifier:          RCeQ10x0qdFIDTLPEWGXT0CTfGdMWX6KP4yN+1nID4I=
Subject key identifier:   EA:1E:71:F8:8B:A6:5B:C1:59:89:63:AB:3F:CF:F3:C5:49:E1:CC:BD
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       6FDCD31BC61F844B8931989506695189AF23DA30
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137372e33322e302e302f31342d3234203d3e203238353733.roa
Signing time:             Wed 05 Mar 2025 19:00:11 +0000
ROA not before:           Wed 05 Mar 2025 18:55:11 +0000
ROA not after:            Wed 04 Mar 2026 19:00:11 +0000
asID:                     28573
IP address blocks:        177.32.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 13:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:dc:d3:1b:c6:1f:84:4b:89:31:98:95:06:69:51:89:af:23:da:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Mar  5 18:55:11 2025 GMT
            Not After : Mar  4 19:00:11 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f8:da:cf:c0:63:7a:00:58:82:b6:ba:c5:5e:
                    ed:4d:12:e3:1e:de:e3:58:8c:7a:df:c0:62:31:d2:
                    63:6d:d9:3b:7b:e8:d6:da:d5:00:d4:d1:6a:f4:ce:
                    4e:47:cf:80:ba:1a:28:89:4c:67:64:44:12:9d:7a:
                    59:1a:6f:43:18:19:9b:21:cd:db:86:c8:60:77:0f:
                    6f:3e:b0:b6:51:7f:64:20:a5:83:bf:28:b7:0c:73:
                    62:3b:80:20:c9:1c:58:99:db:83:e5:07:35:a3:6c:
                    15:65:6b:43:55:10:20:82:a8:cd:f7:0e:be:bd:06:
                    97:77:5f:2f:24:ed:85:d2:2d:09:10:4e:8c:3b:65:
                    35:88:04:ef:53:d7:42:3f:eb:61:78:d0:77:7b:c4:
                    de:27:2b:ff:17:06:cf:6b:d8:e3:b2:67:eb:11:e1:
                    1b:a1:39:64:b1:bc:ef:7e:e2:2f:a9:c4:0e:77:5e:
                    2f:c4:e4:60:69:96:30:bb:73:2a:4e:f0:26:d7:0d:
                    fb:66:52:dd:3c:88:05:9f:ee:04:a6:d1:c7:21:72:
                    38:22:c3:93:00:2e:9d:4e:f7:99:fa:f2:bc:80:b6:
                    af:c6:3a:91:51:8d:e9:f4:75:0d:9a:fa:e9:1e:12:
                    09:53:d4:07:9f:37:cd:82:12:1f:32:da:fb:78:82:
                    4a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:1E:71:F8:8B:A6:5B:C1:59:89:63:AB:3F:CF:F3:C5:49:E1:CC:BD
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137372e33322e302e302f31342d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.32.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         64:b8:85:8e:8a:d8:2f:6e:d6:5d:e3:cf:6e:d2:47:93:1d:60:
         82:fc:f4:02:94:4e:91:da:ee:22:47:ba:8f:59:29:fa:3f:f3:
         ba:d6:11:8e:d0:81:7b:6c:79:01:1d:44:a5:9a:00:08:51:54:
         50:a5:57:71:10:66:26:3d:96:c9:33:31:ae:c9:c5:66:94:f8:
         e8:5b:af:b5:c6:70:d4:cb:4a:42:08:6b:7d:7e:76:73:f8:76:
         19:80:48:73:13:1a:dd:fb:2c:4a:67:13:97:ed:4c:eb:6e:49:
         74:6a:4f:8c:37:43:40:93:37:f7:4c:d5:25:8c:b1:83:bd:50:
         af:c4:ed:05:9a:3a:4e:1f:fe:65:ae:42:a4:9a:69:15:81:10:
         ce:63:19:3c:68:16:bf:13:30:cc:71:d2:f3:57:8f:97:8a:2c:
         8a:56:e1:de:0a:85:33:25:ee:c5:0a:8c:a6:eb:25:37:e3:31:
         92:5e:b7:2a:e5:56:78:b8:f1:74:f9:6a:92:69:bc:2c:37:3f:
         e6:ec:ee:22:60:b5:55:7a:ef:e2:8c:a0:ae:9a:0f:29:98:7a:
         d7:36:24:1e:e9:62:87:a4:b2:00:ca:3e:ff:4f:85:87:9f:64:
         1b:2c:f5:44:c8:3d:45:d4:2a:60:24:2e:7d:8a:ee:08:1b:9d:
         72:42:f4:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:31:31 2025 by rpki-client