Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138312e3231332e302e302f31362d3234203d3e203238353733.roa
File:                     3138312e3231332e302e302f31362d3234203d3e203238353733.roa (raw, json)
Hash identifier:          WCyvAiOl+IidJRsuaPDemlFFwtovH64jIiXW6LmJCkU=
Subject key identifier:   75:0F:A3:7A:19:7F:F2:23:41:17:B7:BB:06:CC:19:82:D4:1A:5D:70
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       0971C8819FC3B8799235032B43145178A34CD0CE
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138312e3231332e302e302f31362d3234203d3e203238353733.roa
Signing time:             Wed 03 Apr 2024 18:31:44 +0000
ROA not before:           Wed 03 Apr 2024 18:26:44 +0000
ROA not after:            Wed 02 Apr 2025 18:31:44 +0000
asID:                     28573
IP address blocks:        181.213.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:71:c8:81:9f:c3:b8:79:92:35:03:2b:43:14:51:78:a3:4c:d0:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Apr  3 18:26:44 2024 GMT
            Not After : Apr  2 18:31:44 2025 GMT
        Subject: CN=3082010A0282010100D041CB66084029948E6B2D13CBFBB08CEDC7146423467441DF9D23900A76C7E6F6DB6299A780BE26A2E112ED05A4A7D6ADE589C29444759580670FAC4175DBDCB1ADDA04C6207889989B0387CB4A6609CB420FE04D666554EAA08B6598FA7EF8A82D21AFFA45291F00688A8AEE59B5AFD35580C98C39A6E76F32F4F7DE2EBDFEA2BC2DDB8174105AEFAB7982292CDEFF2201A7AD44563676745A2289DEE6CE4EC1873C1146799961C444361A37F6D1C86FCC3FD2757383CFD388E56FC991DA1C17E5892E99BF4F3CDFD92357D3A4F9B333E16FBEE7DDCA09346D4B733BA54A5009742B88D933EDD286DA99F8C03E431F7C98A1D41CB205FD74D183E8FE88BCD90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:41:cb:66:08:40:29:94:8e:6b:2d:13:cb:fb:
                    b0:8c:ed:c7:14:64:23:46:74:41:df:9d:23:90:0a:
                    76:c7:e6:f6:db:62:99:a7:80:be:26:a2:e1:12:ed:
                    05:a4:a7:d6:ad:e5:89:c2:94:44:75:95:80:67:0f:
                    ac:41:75:db:dc:b1:ad:da:04:c6:20:78:89:98:9b:
                    03:87:cb:4a:66:09:cb:42:0f:e0:4d:66:65:54:ea:
                    a0:8b:65:98:fa:7e:f8:a8:2d:21:af:fa:45:29:1f:
                    00:68:8a:8a:ee:59:b5:af:d3:55:80:c9:8c:39:a6:
                    e7:6f:32:f4:f7:de:2e:bd:fe:a2:bc:2d:db:81:74:
                    10:5a:ef:ab:79:82:29:2c:de:ff:22:01:a7:ad:44:
                    56:36:76:74:5a:22:89:de:e6:ce:4e:c1:87:3c:11:
                    46:79:99:61:c4:44:36:1a:37:f6:d1:c8:6f:cc:3f:
                    d2:75:73:83:cf:d3:88:e5:6f:c9:91:da:1c:17:e5:
                    89:2e:99:bf:4f:3c:df:d9:23:57:d3:a4:f9:b3:33:
                    e1:6f:be:e7:dd:ca:09:34:6d:4b:73:3b:a5:4a:50:
                    09:74:2b:88:d9:33:ed:d2:86:da:99:f8:c0:3e:43:
                    1f:7c:98:a1:d4:1c:b2:05:fd:74:d1:83:e8:fe:88:
                    bc:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:0F:A3:7A:19:7F:F2:23:41:17:B7:BB:06:CC:19:82:D4:1A:5D:70
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138312e3231332e302e302f31362d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.213.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         29:0b:44:1d:c2:d3:7b:b0:16:41:a6:6e:d0:c1:52:ae:77:21:
         3f:f2:d9:94:15:5d:68:bf:27:df:a3:16:8f:e4:ab:37:a1:9d:
         62:1a:05:2d:66:32:27:c0:3d:08:14:44:da:85:38:e3:50:b5:
         69:bf:79:7d:ff:e1:57:6d:fb:90:ee:69:36:28:a4:12:a1:52:
         33:00:48:10:5e:08:29:15:26:c7:26:42:b0:73:88:53:8f:f2:
         a1:be:a8:3d:af:2a:f7:b1:f8:e8:29:56:3a:00:72:e0:fc:61:
         ff:8e:fa:af:14:18:62:1f:6d:85:22:da:dc:d4:9c:98:a8:fb:
         8f:db:82:9d:de:cc:31:a2:fa:3e:5d:f0:22:89:c3:f8:29:3d:
         d1:79:85:29:e5:ab:2b:15:6b:a3:7d:99:3c:71:56:24:20:d3:
         ce:63:00:88:4a:04:5e:0d:8b:6f:0d:b7:30:61:2f:b6:da:05:
         12:6e:ad:de:de:8d:ee:4f:19:3b:b7:9d:ae:b1:20:a6:d5:ef:
         13:59:2b:4d:ba:25:f5:f0:22:ac:78:50:89:c2:6a:20:90:4b:
         78:fa:45:4c:d2:87:cb:89:22:87:8f:28:80:a6:fd:6e:92:ab:
         14:23:26:56:3f:62:f1:93:19:8f:d7:04:b6:68:e7:1e:6d:0a:
         e7:95:61:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:12 2024 by rpki-client on console-fra.rpki-client.org