Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137392e3134322e302e302f31352d3234203d3e203238353733.roa
File:                     3137392e3134322e302e302f31352d3234203d3e203238353733.roa (raw, json)
Hash identifier:          KER3X1q61yuPzNdxkDD3OfN/gyWu7kEffxVgxuIZja4=
Subject key identifier:   CD:C4:3E:81:57:40:B9:ED:19:DC:A1:7D:83:B6:6F:8F:48:FE:22:C0
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       2DEF0DCB39B5092833645CB788D8DA4D9090FB2F
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137392e3134322e302e302f31352d3234203d3e203238353733.roa
Signing time:             Mon 17 Mar 2025 18:46:48 +0000
ROA not before:           Mon 17 Mar 2025 18:41:48 +0000
ROA not after:            Mon 16 Mar 2026 18:46:48 +0000
asID:                     28573
IP address blocks:        179.142.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 13:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:ef:0d:cb:39:b5:09:28:33:64:5c:b7:88:d8:da:4d:90:90:fb:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Mar 17 18:41:48 2025 GMT
            Not After : Mar 16 18:46:48 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:70:eb:33:74:fe:b0:ed:0d:f3:a0:f7:e5:a7:
                    7b:3e:7f:39:77:33:71:a1:87:9d:f2:89:bf:5a:47:
                    25:ae:06:ce:4b:29:97:3d:fb:2e:9a:f7:06:ac:91:
                    c4:bc:36:a0:04:50:16:b6:8d:7b:da:ae:30:33:07:
                    5d:1e:a3:c9:39:a0:98:ce:79:21:6b:c8:81:60:52:
                    0a:0e:f0:eb:2c:23:db:07:8f:21:a0:ee:b1:e9:ca:
                    fd:a8:54:1d:92:7f:f6:7b:55:5c:25:8f:4a:c2:d6:
                    c1:e2:36:3f:97:d8:33:1c:e0:2d:de:42:31:09:3b:
                    50:a8:92:a9:16:25:25:54:f9:85:f4:82:1d:bf:a9:
                    e7:c7:10:71:b5:6d:31:32:fb:ce:51:f0:1c:2f:e1:
                    fa:2a:0b:47:2c:17:d9:55:0a:ab:e3:67:05:ad:d5:
                    39:c6:6f:32:8a:11:14:ca:4b:80:93:b0:85:33:16:
                    85:9c:f8:20:00:e4:0a:b5:3e:0a:7a:a0:87:09:5d:
                    60:8d:ec:b3:ee:85:a5:95:6b:f9:eb:c3:61:7b:6f:
                    d4:11:31:14:27:fd:7c:b1:b5:b7:2a:d6:d9:1d:cc:
                    f5:9d:63:f1:15:0b:7d:80:00:dd:1d:21:4d:b6:5e:
                    07:5d:31:1a:b0:15:b8:a1:2e:b5:13:47:02:9d:c8:
                    3e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C4:3E:81:57:40:B9:ED:19:DC:A1:7D:83:B6:6F:8F:48:FE:22:C0
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137392e3134322e302e302f31352d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.142.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         04:63:98:57:7c:1d:48:c0:52:6d:61:28:6c:96:6e:f0:72:40:
         83:ca:f6:4e:1c:d2:25:81:0d:cb:93:eb:e6:81:54:2a:4a:9c:
         be:7c:23:f5:fa:28:14:dd:80:5a:67:26:02:54:30:1d:15:ac:
         3a:d6:f9:cf:7b:dd:dd:69:a7:ad:05:a0:53:3f:5e:f0:3b:83:
         1d:2a:c9:ff:a1:eb:8e:04:94:44:44:3f:a0:35:f4:e6:78:77:
         ed:79:8d:8b:53:44:39:7f:08:ff:ed:0f:29:34:fb:e7:c4:bd:
         53:6f:39:d7:2c:96:8b:62:14:e4:9f:4c:be:ed:d6:03:7b:29:
         29:2e:23:75:cf:67:7a:54:ae:f9:45:9a:f4:9a:1c:64:6d:2c:
         c8:f6:d7:b5:34:f9:98:c8:99:36:d3:e8:55:62:c0:b6:0e:19:
         f9:57:f1:a4:a7:42:3e:ad:04:50:45:ce:78:52:53:bd:40:38:
         73:b9:25:dc:4f:71:b2:e7:e2:ac:97:72:6a:f5:3f:c1:22:b9:
         a8:4c:0f:db:7e:20:ae:3c:55:eb:49:c7:48:4c:4a:8d:7e:a2:
         2c:de:8a:f0:e5:34:59:21:cc:b6:06:1d:08:82:b7:b1:7b:e6:
         f2:6f:7e:bb:a6:ad:2d:2c:e2:07:a3:03:0a:3f:1f:ac:fd:08:
         dc:c6:a2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:29:35 2025 by rpki-client