Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138362e3230342e302e302f31342d3234203d3e203238353733.roa
File:                     3138362e3230342e302e302f31342d3234203d3e203238353733.roa (raw, json)
Hash identifier:          Py7Rn1NM4z+w5+pbN0zdtFHzVyjfEpuhqcglsy0Rz08=
Subject key identifier:   C2:77:BB:38:F8:33:8F:02:F4:C3:7C:CF:C6:7E:A4:C1:8C:BE:3B:1A
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       68FF3772B90C4C66D042A809A7B801067B3C9DFA
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138362e3230342e302e302f31342d3234203d3e203238353733.roa
Signing time:             Wed 05 Mar 2025 19:00:14 +0000
ROA not before:           Wed 05 Mar 2025 18:55:14 +0000
ROA not after:            Wed 04 Mar 2026 19:00:14 +0000
asID:                     28573
IP address blocks:        186.204.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 13:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ff:37:72:b9:0c:4c:66:d0:42:a8:09:a7:b8:01:06:7b:3c:9d:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Mar  5 18:55:14 2025 GMT
            Not After : Mar  4 19:00:14 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b9:45:00:85:dc:b9:c6:6c:e5:72:54:4a:76:
                    2b:d8:3a:ab:40:d2:7d:78:7f:da:0a:c0:bc:da:f0:
                    d7:1c:1a:dd:0e:11:fb:15:ac:cc:2c:7c:68:51:90:
                    ba:d3:c7:d3:83:28:f1:be:8b:5a:e0:49:d9:6e:2b:
                    a2:90:ee:4c:50:59:fa:f9:86:e2:44:00:b2:48:d8:
                    e7:aa:ff:d7:be:8d:6e:4f:d5:44:96:e2:4c:74:73:
                    f6:e7:25:f9:69:de:45:17:bd:c7:3d:5d:c7:42:7c:
                    ff:10:8a:13:95:2c:58:c8:af:d5:d5:10:86:d3:a6:
                    f9:f8:92:18:fc:73:46:31:6d:0b:d3:68:f2:3d:9b:
                    f7:be:64:34:9e:a3:11:e1:ff:3c:77:6b:70:8c:1e:
                    0a:e3:6f:b6:80:56:76:de:10:e5:23:0b:af:a9:c2:
                    97:b1:6c:7a:1b:4c:b5:d9:77:fe:fe:28:d9:38:49:
                    7a:68:74:a6:10:ff:72:41:d0:9b:cd:fd:70:40:ef:
                    4d:8c:09:ed:53:64:03:f3:c1:9d:f9:50:d6:9d:17:
                    6d:ce:e1:45:95:30:4b:fe:e1:2c:20:4c:a6:02:05:
                    07:aa:e9:7c:47:5b:5c:62:93:38:65:c2:d4:f9:a9:
                    03:a9:56:5b:e4:24:d9:28:4a:7a:0d:3c:28:0a:04:
                    2c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:77:BB:38:F8:33:8F:02:F4:C3:7C:CF:C6:7E:A4:C1:8C:BE:3B:1A
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138362e3230342e302e302f31342d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.204.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         2c:d5:cb:c1:04:a9:a3:5e:b5:fc:14:4b:15:a2:6b:f0:0c:f0:
         aa:9a:31:7a:79:5d:47:c9:84:bd:f3:99:70:b1:28:4f:1a:13:
         34:cf:8d:ec:3d:d6:21:a2:0d:97:7e:c4:83:5b:1c:e2:bd:f8:
         a4:6b:ac:8d:f4:4c:9f:71:59:17:e2:ff:f7:c2:50:af:f1:36:
         eb:da:5a:e9:fa:3a:88:f6:b8:12:f8:32:d5:c7:ba:2d:57:9f:
         9f:d6:d2:39:1f:31:92:47:37:e0:cd:e0:4d:2d:49:48:f4:8d:
         08:72:b4:cd:e8:d5:f2:41:c5:0f:ee:ac:5c:0b:b3:3f:1f:c9:
         56:e2:0d:27:01:d9:67:ea:02:c8:6d:1e:27:82:4b:18:dd:3d:
         92:72:21:4d:b0:9d:fa:6a:94:7b:00:18:01:ba:c6:ed:ef:80:
         d3:42:51:17:b5:75:f5:cc:fa:00:70:c8:f7:1d:c1:6f:85:95:
         0d:68:d1:d0:88:9f:81:2e:f8:7b:da:cc:a3:18:7c:a4:d2:64:
         40:26:43:d1:1f:de:cf:28:51:af:a4:21:79:c2:8b:18:47:e9:
         b7:6c:ec:aa:1a:ea:07:4f:2d:96:ab:3e:dc:5f:4b:1c:2b:df:
         e4:3e:b2:1a:ca:f6:f5:b2:1f:d8:e0:a5:0c:40:9f:85:5c:e0:
         02:4c:59:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:24:08 2025 by rpki-client