Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137392e3130352e302e302f31362d3234203d3e203238353733.roa
File:                     3137392e3130352e302e302f31362d3234203d3e203238353733.roa (raw, json)
Hash identifier:          6jTvNQbDWguOoIt5FzSru9XGY+1YYHVH/l5CCUCSpak=
Subject key identifier:   88:10:E8:A4:1F:A6:97:C0:41:D9:87:39:B9:AB:38:7F:2D:5B:D5:82
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       1779E53B11979062848C62A809BF6D69BA21E228
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137392e3130352e302e302f31362d3234203d3e203238353733.roa
Signing time:             Wed 03 Apr 2024 18:31:42 +0000
ROA not before:           Wed 03 Apr 2024 18:26:42 +0000
ROA not after:            Wed 02 Apr 2025 18:31:42 +0000
asID:                     28573
IP address blocks:        179.105.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:79:e5:3b:11:97:90:62:84:8c:62:a8:09:bf:6d:69:ba:21:e2:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Apr  3 18:26:42 2024 GMT
            Not After : Apr  2 18:31:42 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f2:02:72:9b:0e:6b:e0:52:ab:79:d7:9c:1a:
                    5a:00:05:13:3d:72:1d:05:e0:59:b0:b8:46:f1:17:
                    18:a1:e9:d0:37:da:53:7c:60:3b:5c:1f:dd:37:bb:
                    d2:1b:92:c3:e4:6b:4c:c3:c1:b5:6a:6f:a0:29:6c:
                    0c:12:d4:e6:44:e7:b4:20:13:b8:7f:24:ee:7f:7d:
                    8a:43:22:e4:56:48:a6:29:6d:50:63:5d:21:51:40:
                    b9:b5:84:50:f8:a1:f9:76:fe:77:da:e5:36:1d:72:
                    b1:3e:7d:a3:48:37:8b:f1:21:90:4e:21:52:d7:99:
                    fa:55:3d:15:72:88:51:7f:e4:da:69:d9:b1:65:40:
                    43:b1:8f:4d:f7:57:4b:05:fa:b0:16:ca:1c:3a:84:
                    9b:fc:0a:42:c0:7d:38:00:47:54:4a:4b:9b:fa:e5:
                    eb:fd:4c:2d:be:91:92:0c:b8:30:7d:37:19:83:c5:
                    c4:6a:48:4a:77:fe:8e:62:13:21:a0:c1:2b:3e:dd:
                    f4:1d:75:6f:48:20:a5:5d:fd:b2:34:0f:e0:e5:89:
                    7d:da:63:38:69:4c:3d:6a:40:95:48:3d:5b:13:a8:
                    df:a4:8e:57:a7:1b:3c:bc:16:d6:49:45:8d:da:93:
                    9e:24:9c:0f:e2:c1:e7:ea:76:20:23:ef:b1:ef:7c:
                    17:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:10:E8:A4:1F:A6:97:C0:41:D9:87:39:B9:AB:38:7F:2D:5B:D5:82
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137392e3130352e302e302f31362d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.105.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         03:f2:db:7b:65:75:74:ae:4f:af:9b:cc:18:73:f3:ce:84:73:
         b1:99:4e:53:c9:d4:49:3e:bb:c2:d1:37:ff:46:1a:ea:6f:09:
         4a:5e:c4:1c:d7:00:cf:af:53:f3:02:61:4b:a2:b9:ab:af:f4:
         91:dc:69:9f:3f:89:88:13:04:41:62:1d:c6:97:ce:2d:d5:6d:
         76:10:64:d0:93:8f:03:3d:d8:60:9d:a3:ee:65:7b:c3:f0:b0:
         98:d1:fa:7b:2b:92:33:9a:38:b2:1e:89:6b:af:04:bf:f3:b6:
         e6:44:72:44:f5:9e:27:fe:7e:87:02:5e:e6:4a:31:c3:62:a6:
         e3:65:a5:2c:3c:4a:85:9f:32:ec:36:b7:a8:15:af:2d:92:e2:
         e5:c7:4d:15:b9:c2:c2:3f:01:0a:9a:bd:f9:38:4a:8d:4c:91:
         32:61:ba:17:22:40:e1:ea:53:06:96:e3:5c:f7:29:d1:d0:d4:
         2b:0d:9f:5b:eb:16:f5:89:fe:0d:1e:b4:74:52:2f:e6:f3:55:
         f9:03:ed:8a:a7:2d:40:fb:1e:88:f7:9b:13:13:c7:bd:9b:83:
         f6:25:43:7a:28:55:38:c8:5a:12:c7:8d:42:41:65:b1:96:41:
         49:9e:de:2f:dd:fc:b9:e4:af:d9:8c:a0:51:dd:f1:9f:a9:56:
         1a:b2:93:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:12 2024 by rpki-client on console-fra.rpki-client.org