Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137392e3233322e302e302f31342d3234203d3e203238353733.roa
File:                     3137392e3233322e302e302f31342d3234203d3e203238353733.roa (raw, json)
Hash identifier:          V4VgzL7MGG0O0ucUXu7uTb0oerphpCEfdVlRWlkMnFc=
Subject key identifier:   0A:DB:15:5C:63:E8:73:2F:0A:EA:6A:9E:A0:50:43:1A:51:BB:CD:F2
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       49A50DF20A0BD448DC5014A2148EDE5FB0A82E13
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137392e3233322e302e302f31342d3234203d3e203238353733.roa
Signing time:             Wed 05 Mar 2025 19:00:14 +0000
ROA not before:           Wed 05 Mar 2025 18:55:14 +0000
ROA not after:            Wed 04 Mar 2026 19:00:14 +0000
asID:                     28573
IP address blocks:        179.232.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 13:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:a5:0d:f2:0a:0b:d4:48:dc:50:14:a2:14:8e:de:5f:b0:a8:2e:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Mar  5 18:55:14 2025 GMT
            Not After : Mar  4 19:00:14 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4c:b3:b3:62:29:af:ff:ec:ae:28:5e:40:c8:
                    e3:2f:a3:03:a7:1c:29:1b:ea:3b:0f:16:ce:f3:d1:
                    e7:74:2b:3e:5e:7b:36:15:ed:50:94:b2:d1:23:2b:
                    6b:67:43:0e:b8:15:fd:4a:0c:2e:84:73:7b:4f:87:
                    b6:01:02:56:b6:f2:e6:65:61:4d:93:b4:aa:72:67:
                    40:b6:9d:26:bc:ae:be:d6:33:c4:ce:04:b4:e2:97:
                    20:f0:67:64:39:2d:8c:71:08:b5:26:51:f0:0a:5a:
                    42:11:98:c8:cb:57:27:34:73:30:98:a6:b3:be:36:
                    c0:a5:90:dd:9b:74:71:6d:fd:b3:22:38:91:ce:33:
                    4f:07:58:2e:90:fa:bd:58:62:07:c9:7e:42:8a:ce:
                    69:bf:c4:74:f4:ed:fc:2a:72:4d:86:c5:29:69:87:
                    fa:f3:7c:ea:ac:bb:b4:53:c9:22:16:0c:fe:5b:e4:
                    cb:36:fb:23:52:a9:46:51:b4:ca:95:f8:10:a0:3f:
                    5b:58:3d:ba:86:a4:db:63:e2:0b:be:ec:3f:e3:c5:
                    63:4c:44:9b:b6:43:19:e0:3e:b5:33:23:05:dc:2a:
                    1e:56:39:98:38:1b:68:67:8d:1f:ad:82:57:bd:08:
                    8b:39:48:32:8e:45:22:2c:63:a7:e5:ae:98:7c:0e:
                    8f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:DB:15:5C:63:E8:73:2F:0A:EA:6A:9E:A0:50:43:1A:51:BB:CD:F2
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137392e3233322e302e302f31342d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.232.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         b1:f7:65:3c:cb:b6:6a:44:6c:99:29:e1:4d:47:55:bd:e0:26:
         16:b2:32:a8:04:98:6c:85:89:e0:6c:c5:bf:49:05:04:4c:5e:
         91:f5:ff:22:57:bf:47:2e:71:ea:11:92:c3:96:3e:84:59:50:
         1c:33:d7:d7:64:ec:0f:16:83:24:c6:ec:af:a0:92:50:81:ef:
         3f:0c:26:a9:e7:14:eb:2f:65:69:a4:91:d4:0d:e0:25:05:b7:
         00:cd:75:a3:18:22:e5:6a:c6:8a:96:eb:f0:9a:fe:64:3a:e5:
         e8:a3:06:45:bc:80:93:24:96:29:a8:f5:1a:3b:f9:05:a9:78:
         da:40:3c:33:39:51:bc:a8:4e:27:6c:9d:94:32:52:3f:35:d3:
         22:f3:3d:b7:82:6b:6e:ff:b6:12:74:69:6a:a2:ea:de:ae:ad:
         b0:9a:c8:89:88:ff:cf:c9:56:d7:fa:b0:14:72:6d:0a:58:e0:
         f0:df:83:e4:50:09:e1:b2:e5:eb:20:26:58:cf:97:fb:43:0c:
         30:d1:a5:b4:a5:ab:90:92:ec:7c:d8:70:cd:af:5b:4f:4c:e6:
         d3:2d:50:b8:32:ff:cd:60:f9:6a:fd:d9:f2:ce:22:2e:d5:04:
         56:83:07:54:88:65:96:7a:0a:40:ba:95:16:67:cb:2a:b2:73:
         5b:dd:a8:9a
-----BEGIN CERTIFICATE-----
MIIHPjCCBiagAwIBAgIUSaUN8goL1EjcUBSiFI7eX7CoLhMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZBMDJCNkY4RjREQkJEOThBQzlBOUQwQzc3QjA1MjFE
NUE2QkQwQTAeFw0yNTAzMDUxODU1MTRaFw0yNjAzMDQxOTAwMTRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDc0Q0IzQjM2MjI5QUZGRkVD
QUUyODVFNDBDOEUzMkZBMzAzQTcxQzI5MUJFQTNCMEYxNkNFRjNEMUU3NzQyQjNF
NUU3QjM2MTVFRDUwOTRCMkQxMjMyQjZCNjc0MzBFQjgxNUZENEEwQzJFODQ3MzdC
NEY4N0I2MDEwMjU2QjZGMkU2NjU2MTREOTNCNEFBNzI2NzQwQjY5RDI2QkNBRUJF
RDYzM0M0Q0UwNEI0RTI5NzIwRjA2NzY0MzkyRDhDNzEwOEI1MjY1MUYwMEE1QTQy
MTE5OEM4Q0I1NzI3MzQ3MzMwOThBNkIzQkUzNkMwQTU5MEREOUI3NDcxNkRGREIz
MjIzODkxQ0UzMzRGMDc1ODJFOTBGQUJENTg2MjA3Qzk3RTQyOEFDRTY5QkZDNDc0
RjRFREZDMkE3MjREODZDNTI5Njk4N0ZBRjM3Q0VBQUNCQkI0NTNDOTIyMTYwQ0ZF
NUJFNENCMzZGQjIzNTJBOTQ2NTFCNENBOTVGODEwQTAzRjVCNTgzREJBODZBNERC
NjNFMjBCQkVFQzNGRTNDNTYzNEM0NDlCQjY0MzE5RTAzRUI1MzMyMzA1REMyQTFF
NTYzOTk4MzgxQjY4Njc4RDFGQUQ4MjU3QkQwODhCMzk0ODMyOEU0NTIyMkM2M0E3
RTVBRTk4N0MwRThGMjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA10yzs2Ipr//sriheQMjjL6MDpxwpG+o7DxbO89HndCs+Xns2Fe1Q
lLLRIytrZ0MOuBX9SgwuhHN7T4e2AQJWtvLmZWFNk7SqcmdAtp0mvK6+1jPEzgS0
4pcg8GdkOS2McQi1JlHwClpCEZjIy1cnNHMwmKazvjbApZDdm3Rxbf2zIjiRzjNP
B1gukPq9WGIHyX5Cis5pv8R09O38KnJNhsUpaYf683zqrLu0U8kiFgz+W+TLNvsj
UqlGUbTKlfgQoD9bWD26hqTbY+ILvuw/48VjTESbtkMZ4D61MyMF3CoeVjmYOBto
Z40frYJXvQiLOUgyjkUiLGOn5a6YfA6PKQIDAQABo4ICTDCCAkgwHQYDVR0OBBYE
FArbFVxj6HMvCupqnqBQQxpRu83yMB8GA1UdIwQYMBaAFF+gK2+PTbvZismp0Md7
BSHVpr0KMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZRQXF5WXlHTFd4eFJi
SDVLY3BoejUxNzlkd2NCcThoWU5jMVFzaWFrTUwyLzEvNUZBMDJCNkY4RjREQkJE
OThBQzlBOUQwQzc3QjA1MjFENUE2QkQwQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS81RkEwMkI2RjhGNERCQkQ5OEFDOUE5RDBDNzdCMDUyMUQ1QTZC
RDBBLmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GUUFxeVl5R0xXeHhSYkg1S2Nw
aHo1MTc5ZHdjQnE4aFlOYzFRc2lha01MMi8xLzMxMzczOTJlMzIzMzMyMmUzMDJl
MzAyZjMxMzQyZDMyMzQyMDNkM2UyMDMyMzgzNTM3MzMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwKz6DAN
BgkqhkiG9w0BAQsFAAOCAQEAsfdlPMu2akRsmSnhTUdVveAmFrIyqASYbIWJ4GzF
v0kFBExekfX/Ile/Ry5x6hGSw5Y+hFlQHDPX12TsDxaDJMbsr6CSUIHvPwwmqecU
6y9laaSR1A3gJQW3AM11oxgi5WrGipbr8Jr+ZDrl6KMGRbyAkySWKaj1Gjv5Bal4
2kA8MzlRvKhOJ2ydlDJSPzXTIvM9t4Jrbv+2EnRpaqLq3q6tsJrIiYj/z8lW1/qw
FHJtCljg8N+D5FAJ4bLl6yAmWM+X+0MMMNGltKWrkJLsfNhwza9bT0zm0y1QuDL/
zWD5av3Z8s4iLtUEVoMHVIhllnoKQLqVFmfLKrJzW92omg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:30:55 2025 by rpki-client