Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138362e3232302e302e302f31342d3234203d3e203238353733.roa
File:                     3138362e3232302e302e302f31342d3234203d3e203238353733.roa (raw, json)
Hash identifier:          Msd6zZToWaI0ae+7TAGgKcKN7RC9XdhTl5sXPVNBRpo=
Subject key identifier:   06:DC:BA:B7:78:DC:32:B3:F5:77:30:C0:88:33:0A:BB:12:ED:C5:B3
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       4D892D7A288E25D1F4A9E5F2A2C9A5B0E2B221E8
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138362e3232302e302e302f31342d3234203d3e203238353733.roa
Signing time:             Wed 03 Apr 2024 18:31:45 +0000
ROA not before:           Wed 03 Apr 2024 18:26:45 +0000
ROA not after:            Wed 02 Apr 2025 18:31:45 +0000
asID:                     28573
IP address blocks:        186.220.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:89:2d:7a:28:8e:25:d1:f4:a9:e5:f2:a2:c9:a5:b0:e2:b2:21:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Apr  3 18:26:45 2024 GMT
            Not After : Apr  2 18:31:45 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:36:c5:fd:93:cd:e6:f1:6c:82:d5:12:ed:4c:
                    46:43:07:b3:e7:c5:14:12:5f:86:36:a2:d3:ee:c1:
                    24:a0:c6:68:c1:e3:6f:c1:eb:a4:cd:b7:1a:71:2c:
                    1b:fa:84:a2:66:5b:2d:9b:f0:df:55:99:e0:f6:91:
                    c5:4e:82:21:78:0f:50:69:a7:69:24:56:7b:85:80:
                    bb:f1:7a:a1:9e:7f:99:28:bc:b5:b3:42:1e:aa:9e:
                    fe:cb:a6:21:9e:36:cc:d9:21:f7:42:27:31:4a:65:
                    bf:1a:89:7c:29:03:b5:13:45:a5:63:88:4b:d0:b0:
                    f9:d9:a9:95:4e:d7:55:8f:a9:c4:6c:84:b5:23:d9:
                    7c:77:23:f2:4f:06:8b:30:68:de:c3:f0:ed:c7:db:
                    54:e4:dc:ef:21:d7:ac:32:53:d5:18:2f:bc:87:40:
                    09:83:6d:76:89:79:eb:2e:54:79:6c:a0:49:57:78:
                    a1:17:01:84:6f:74:b3:86:fd:0c:84:58:c6:77:8e:
                    29:de:d6:01:5d:13:eb:72:f9:10:16:50:7e:83:dc:
                    1b:2b:9c:f1:33:d6:32:81:98:39:9a:48:6d:8e:94:
                    6e:0c:a9:34:d2:12:ec:a8:b0:b3:41:eb:59:52:ba:
                    7e:b2:b6:ba:15:54:05:d3:ca:66:2a:eb:4d:99:2e:
                    34:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:DC:BA:B7:78:DC:32:B3:F5:77:30:C0:88:33:0A:BB:12:ED:C5:B3
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138362e3232302e302e302f31342d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.220.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         88:f6:57:d3:a7:5b:81:4c:7c:a4:cb:8d:2e:ff:44:e8:a7:da:
         b9:fb:cc:20:79:a7:97:ff:47:a2:c4:5d:98:8b:ff:12:8c:48:
         91:7e:78:6c:c5:79:45:c6:03:22:55:25:83:83:08:a6:27:c6:
         47:41:9d:da:8b:d9:a3:88:e8:7d:a0:05:25:cb:e5:0a:c1:27:
         24:37:89:66:b9:25:2f:ac:f9:f6:43:19:52:60:c1:be:84:cc:
         d2:97:00:83:8d:f7:9c:f6:67:47:29:c9:6f:9b:17:eb:42:9e:
         7b:41:c8:e0:15:3b:a0:6f:b4:df:b0:37:39:95:56:a7:0d:05:
         02:d3:01:25:52:3c:b2:3b:d0:cd:6b:09:7f:8f:5c:f9:b8:30:
         45:ae:a6:f8:3e:2d:e5:ec:a4:ae:97:b4:ba:17:a7:23:16:3d:
         62:72:a4:f9:ec:57:73:5e:22:c5:e0:cc:29:2e:39:22:0c:9e:
         0e:26:c1:1a:7a:f0:61:a8:1b:43:55:ae:26:4c:c7:09:3f:28:
         90:78:45:a4:6a:d1:df:7e:ff:b7:f6:ec:9c:bf:79:67:ff:39:
         96:6d:c9:13:d6:8f:55:46:5e:bb:fe:c6:72:e7:21:39:fc:41:
         9c:c7:7c:76:5e:1a:1c:78:3f:25:5f:b9:4f:a1:ce:77:98:3b:
         0c:df:63:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:12 2024 by rpki-client on console-fra.rpki-client.org