Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138312e3231362e302e302f31332d3234203d3e203238353733.roa
File:                     3138312e3231362e302e302f31332d3234203d3e203238353733.roa (raw, json)
Hash identifier:          L9kdZ8gmtPIc3CdESDoQD1DUxUhgb5nobVb7G1ATjcQ=
Subject key identifier:   2C:27:F0:D5:3D:31:5C:21:5F:3D:13:BC:13:56:5D:98:82:A7:F4:A6
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       3B36A442C953BCFCE570F4AED755F1084BBD11AD
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138312e3231362e302e302f31332d3234203d3e203238353733.roa
Signing time:             Wed 03 Apr 2024 18:31:43 +0000
ROA not before:           Wed 03 Apr 2024 18:26:43 +0000
ROA not after:            Wed 02 Apr 2025 18:31:43 +0000
asID:                     28573
IP address blocks:        181.216.0.0/13 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:36:a4:42:c9:53:bc:fc:e5:70:f4:ae:d7:55:f1:08:4b:bd:11:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Apr  3 18:26:43 2024 GMT
            Not After : Apr  2 18:31:43 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2c:08:07:f4:9e:07:12:6f:b1:96:20:96:2d:
                    e8:53:2f:dd:db:c5:d2:f1:65:fb:ca:2e:14:bc:67:
                    7d:d8:07:c4:f4:0b:c7:f3:4e:5e:93:fb:40:19:17:
                    7d:02:de:b2:cb:f1:55:2f:2d:95:3f:34:ce:b5:07:
                    97:c0:07:c5:c8:6c:2b:ea:7d:4a:7b:92:bc:37:fd:
                    f8:67:e0:a1:95:39:5b:1e:8d:fe:cc:6f:5c:01:6d:
                    30:d3:3e:aa:22:4f:21:cc:2e:98:29:50:6b:1b:68:
                    af:15:f5:81:2e:05:20:d7:97:08:37:05:58:82:9c:
                    a3:dd:44:d5:e7:7e:da:03:00:fa:f2:b0:db:1f:20:
                    f8:91:b5:b2:0c:2e:7b:17:2d:00:18:d2:db:82:e2:
                    fd:a7:ec:1f:23:03:f4:47:b3:a7:45:31:bf:f3:f4:
                    88:b0:05:b0:1e:89:77:54:46:b8:b1:ae:9c:5e:17:
                    04:91:8b:f3:9e:b8:43:17:6e:f4:65:0e:d4:bf:3f:
                    0e:69:37:12:ca:11:ef:e7:04:90:4c:ea:42:64:60:
                    d9:8c:a3:17:f6:9b:0f:8d:dd:a7:8e:70:9e:44:7d:
                    60:30:b9:5a:1f:25:22:6b:ae:54:f4:91:47:7b:dc:
                    92:13:58:ca:ac:58:6b:fa:70:65:3f:af:8a:ad:08:
                    b8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:27:F0:D5:3D:31:5C:21:5F:3D:13:BC:13:56:5D:98:82:A7:F4:A6
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138312e3231362e302e302f31332d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.216.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         71:8c:66:d6:52:93:0d:97:57:11:14:2f:4a:15:75:0e:f7:88:
         30:04:b7:c2:6a:33:cf:c3:9b:f4:01:d1:18:f8:cf:40:a0:e0:
         d6:fc:57:ea:6c:46:b5:5e:f4:2c:c7:59:02:c2:94:1d:b4:31:
         91:8f:14:0b:4b:0b:95:96:fb:8c:5d:09:e4:cf:56:ab:05:8a:
         4a:7c:29:6e:50:0a:54:d4:a0:a8:9f:b2:14:6e:c0:e9:b0:68:
         61:40:2e:fb:cd:3b:8c:c0:a2:4a:c5:f0:79:29:36:54:51:c4:
         da:62:d8:58:21:e7:f7:50:5a:5f:95:bc:03:b1:f0:12:a4:81:
         56:b9:83:29:1e:d4:67:3f:2b:b5:21:b0:76:68:bd:b5:9d:1e:
         8a:a4:73:9e:f1:a0:e9:cf:67:c1:42:c3:48:b5:53:84:83:e8:
         6b:13:32:40:e8:83:cb:4e:96:a3:da:d1:e2:0f:fd:fe:7e:51:
         68:5e:31:64:7e:cd:3b:86:39:9b:d6:cd:6a:72:ba:ee:16:30:
         08:0a:5a:1f:1a:35:2d:b7:29:d0:c2:58:9c:7a:9b:5b:66:d6:
         e8:37:4a:2e:e3:1a:f4:68:f4:12:32:b0:1d:e4:d5:38:85:43:
         44:13:43:5f:26:db:a1:4b:4b:b2:c5:df:69:c9:c0:85:73:66:
         20:00:dc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:13 2024 by rpki-client on console-ams.rpki-client.org