Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138372e3130342e302e302f31342d3234203d3e203238353733.roa
File:                     3138372e3130342e302e302f31342d3234203d3e203238353733.roa (raw, json)
Hash identifier:          EjqXAcEUzZA+6orh75GF8S3kbgZhoGxvnkfo0FZkL14=
Subject key identifier:   6F:F6:02:F0:9F:95:AB:5D:7F:C0:18:C6:2A:8A:C6:8F:33:6E:16:B3
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       5F01D876BB6CBC1C299DCE265E471242B3250D4B
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138372e3130342e302e302f31342d3234203d3e203238353733.roa
Signing time:             Wed 03 Apr 2024 18:31:44 +0000
ROA not before:           Wed 03 Apr 2024 18:26:44 +0000
ROA not after:            Wed 02 Apr 2025 18:31:44 +0000
asID:                     28573
IP address blocks:        187.104.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:01:d8:76:bb:6c:bc:1c:29:9d:ce:26:5e:47:12:42:b3:25:0d:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Apr  3 18:26:44 2024 GMT
            Not After : Apr  2 18:31:44 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e4:d5:b9:e1:a3:10:e7:ed:03:29:4b:14:64:
                    e4:d5:fe:72:5b:6d:76:f6:97:3c:a2:b0:c4:76:1e:
                    12:1f:43:7b:0b:54:86:53:fa:80:55:22:e3:37:80:
                    5e:be:5a:93:82:e8:bd:91:f2:75:41:6f:54:9f:98:
                    58:5d:b1:b0:f9:b6:64:2d:8f:22:12:2b:da:81:3a:
                    a7:7b:f1:d4:c1:69:2c:05:a6:c2:ea:d1:25:96:9b:
                    52:59:e4:c0:86:2b:99:66:18:69:14:bb:63:08:bb:
                    9d:1f:af:c3:6e:c7:8a:8a:7b:b8:2d:26:6d:fd:ec:
                    ad:ac:b5:e4:59:4f:10:dc:f8:e3:a9:49:b0:89:7a:
                    ec:8f:f6:37:cf:0c:b7:12:36:04:6b:0b:e5:d4:35:
                    60:97:e3:3f:98:ac:4a:55:e3:6d:25:6b:1d:b1:51:
                    fc:98:39:95:38:b1:71:cb:f0:c0:12:f3:9d:bb:93:
                    7d:b9:ab:fb:fc:5a:37:04:c8:7d:31:ba:a2:d9:2e:
                    a6:88:91:ed:fe:7b:1f:b0:48:39:e8:cc:2b:3f:9f:
                    0e:90:67:ed:15:1e:55:eb:8d:9a:39:51:9d:a8:01:
                    f1:60:5f:83:5c:86:e9:a5:1b:62:d4:81:36:e4:79:
                    ed:6c:28:5c:ec:29:f8:0c:b1:85:73:d5:17:5a:f4:
                    b2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F6:02:F0:9F:95:AB:5D:7F:C0:18:C6:2A:8A:C6:8F:33:6E:16:B3
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138372e3130342e302e302f31342d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.104.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         67:58:ea:a1:c5:4a:9e:44:41:9c:a2:32:e8:86:3d:d2:57:dc:
         52:7d:c8:c8:82:0f:44:b3:ea:73:a2:05:8b:90:db:7e:b2:53:
         cc:b6:75:14:71:1e:ad:a2:93:00:18:a7:37:6d:9a:f5:31:a1:
         3c:78:24:4f:f5:bf:f7:a5:1b:d8:c6:ac:7c:17:03:61:d4:ed:
         4c:62:89:3e:06:f3:81:8f:ee:53:f3:a9:53:02:4d:dd:b6:16:
         98:f6:1b:11:10:4c:14:57:ad:54:ff:ae:9a:77:81:5c:f0:17:
         25:e2:f4:d6:6e:1d:84:08:2d:97:79:f2:9e:20:08:ba:ce:36:
         3e:ac:be:b4:38:76:8f:0e:44:fe:b1:ef:82:6c:fb:1b:3d:87:
         12:b5:a8:b1:47:49:4d:e5:6c:30:ff:23:30:03:b2:75:79:53:
         ca:1f:45:84:f3:00:93:66:48:cb:aa:95:57:e5:a1:07:1a:bf:
         96:ee:80:3b:b1:ac:ab:2f:a6:32:c2:a2:a5:9e:2a:08:3b:2f:
         ba:3d:f0:61:d6:ab:82:07:1e:5f:7e:77:58:62:4a:12:31:37:
         75:5a:2d:df:50:9f:7a:40:82:7d:f3:fc:83:cf:bf:4e:1b:1d:
         61:c5:88:e5:e9:13:c4:ab:d1:46:e5:e7:ce:cf:69:5a:96:fe:
         e3:90:7e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:13 2024 by rpki-client on console-ams.rpki-client.org