Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137392e3133362e302e302f31342d3234203d3e203238353733.roa
File:                     3137392e3133362e302e302f31342d3234203d3e203238353733.roa (raw, json)
Hash identifier:          uDWsxR6EH01ECJryrZmY+xOVF6irC4MEi5R+O//PnXQ=
Subject key identifier:   E4:62:1A:C1:2C:E0:91:27:01:EC:DE:01:13:65:30:9B:92:B9:E2:A7
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       35AB813E4307F0565D7A8F7ADA6A2669DF1A8786
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137392e3133362e302e302f31342d3234203d3e203238353733.roa
Signing time:             Tue 18 Mar 2025 13:32:17 +0000
ROA not before:           Tue 18 Mar 2025 13:27:17 +0000
ROA not after:            Tue 17 Mar 2026 13:32:17 +0000
asID:                     28573
IP address blocks:        179.136.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 13:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ab:81:3e:43:07:f0:56:5d:7a:8f:7a:da:6a:26:69:df:1a:87:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Mar 18 13:27:17 2025 GMT
            Not After : Mar 17 13:32:17 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c7:86:81:ac:21:f3:49:ba:fe:f2:b8:cd:f1:
                    97:6a:05:9e:f8:56:5f:d2:0b:61:3c:5f:e1:c3:ee:
                    d9:8d:5e:c8:11:74:b3:e3:28:b0:86:da:0a:43:1b:
                    b5:c3:5a:45:b4:f1:eb:c7:3a:09:8c:2f:5b:08:42:
                    be:a6:b2:f5:be:6f:1d:9c:1d:e3:9b:e1:36:82:26:
                    f1:95:6a:76:95:d0:30:e6:af:2d:47:df:0f:f7:11:
                    3f:31:8e:bd:da:37:12:0c:e9:97:2a:95:f2:56:31:
                    5f:4e:0f:4d:d8:bc:b5:c8:18:1c:dd:28:ce:94:6c:
                    1d:2c:d9:a5:29:d6:5c:b7:3c:7d:77:69:05:a9:b1:
                    9a:b4:16:c1:c8:85:59:30:bc:d1:0d:25:7b:13:75:
                    dd:2a:55:94:0c:36:6a:4c:07:8a:b9:ea:bb:6d:43:
                    cd:d1:da:2e:b5:c4:8a:b6:af:0d:6c:37:1b:b7:2a:
                    a1:6b:80:d5:18:0f:fc:e3:48:aa:4c:7c:d0:68:9f:
                    37:28:2a:88:dc:5d:f5:cd:e1:0a:f1:ec:6d:19:80:
                    3f:3a:51:49:9d:12:da:ca:2a:6a:32:43:a1:81:44:
                    93:43:ed:54:96:ca:a3:89:0e:0e:96:c4:a3:92:61:
                    85:3a:c4:aa:c0:bb:84:06:5a:2d:8b:77:0a:cf:58:
                    b6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:62:1A:C1:2C:E0:91:27:01:EC:DE:01:13:65:30:9B:92:B9:E2:A7
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137392e3133362e302e302f31342d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.136.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         1a:45:b6:b7:92:ef:88:17:b4:6d:dc:e7:c1:5f:a0:1f:d4:62:
         60:e6:ac:16:b5:ed:3a:61:5a:ca:59:ce:84:c0:11:4d:6e:e8:
         64:86:f2:44:51:7a:13:27:58:f5:b7:d8:10:ff:80:88:7d:90:
         96:20:03:70:0b:a1:23:bd:b6:f5:0d:fd:4b:8c:e8:06:ea:b5:
         8e:5d:b9:f4:b0:1b:b5:fc:45:d4:41:79:bc:18:b5:cf:2d:c1:
         e8:85:15:d4:92:e6:5d:fa:02:44:da:51:ce:cd:00:8a:7a:a7:
         53:90:16:e2:15:88:8d:58:53:0a:66:45:3a:3a:7f:11:57:d4:
         ff:24:bc:a8:57:8f:46:88:66:4e:7c:b1:af:83:d9:93:34:d2:
         63:de:a9:3e:26:d5:09:b5:f4:6e:d1:1b:74:d5:ca:7f:69:5b:
         17:5d:65:bd:00:ca:52:af:7b:6a:8f:b9:35:9b:1d:3b:d1:40:
         69:6b:2d:94:fa:f3:55:a7:42:94:57:5c:e3:af:2e:63:c3:55:
         7b:ec:d3:6a:70:a0:33:23:3a:05:95:85:45:1d:47:04:02:07:
         77:54:00:94:61:b0:43:20:9c:1d:0a:7a:86:87:ce:d8:cb:4a:
         fb:81:84:d1:b7:46:b3:ee:d8:0e:3b:db:50:19:c6:70:03:d4:
         37:51:91:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:24:37 2025 by rpki-client