Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138372e3132322e302e302f31352d3234203d3e203238353733.roa
File:                     3138372e3132322e302e302f31352d3234203d3e203238353733.roa (raw, json)
Hash identifier:          REmipGXrYx7+F8NPDlQ6MSwWOnhvELanJHS8ARzcTz8=
Subject key identifier:   47:7B:C6:82:83:C0:E7:B2:D8:1F:69:F0:FE:18:DE:AD:B2:79:DA:82
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       3B5713BD5C79BBBC72843DA13C6A8B135102680D
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138372e3132322e302e302f31352d3234203d3e203238353733.roa
Signing time:             Wed 03 Apr 2024 18:31:44 +0000
ROA not before:           Wed 03 Apr 2024 18:26:44 +0000
ROA not after:            Wed 02 Apr 2025 18:31:44 +0000
asID:                     28573
IP address blocks:        187.122.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:57:13:bd:5c:79:bb:bc:72:84:3d:a1:3c:6a:8b:13:51:02:68:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Apr  3 18:26:44 2024 GMT
            Not After : Apr  2 18:31:44 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:77:f5:8c:99:08:9f:fa:b6:19:92:c9:be:68:
                    7e:15:f1:a0:e3:4d:09:b4:71:f6:47:90:bc:67:f0:
                    82:28:aa:c9:9f:f0:1b:13:99:20:6b:18:5c:2d:46:
                    8a:81:14:ac:15:5d:d6:61:61:0c:c5:cb:a7:59:5f:
                    e8:c3:71:7e:49:28:9c:5c:ed:85:70:c0:43:21:eb:
                    7a:e6:e4:a3:d8:13:0b:5c:de:c7:6d:e1:49:15:07:
                    a9:74:13:b1:40:4d:b6:38:d8:22:ee:ac:53:01:36:
                    f0:82:43:5b:1b:a2:a2:4c:b5:0f:69:31:f8:45:fb:
                    7d:21:19:17:9b:e5:72:c2:09:db:64:dd:45:1c:37:
                    2f:68:a9:c9:63:62:a5:6a:15:de:f0:30:11:09:71:
                    40:7e:fd:d3:66:d8:43:e5:e0:00:96:71:c8:8a:96:
                    ee:5b:a2:af:14:4c:86:a1:aa:2e:66:de:50:7a:4a:
                    98:57:0c:19:78:b7:12:18:f5:a0:f0:8d:7a:b8:0d:
                    9f:f6:69:3f:40:63:c7:43:1e:e9:47:1a:4e:5c:db:
                    15:81:98:26:46:8f:99:25:27:3b:b1:0e:de:4e:b4:
                    6e:7a:0c:62:1b:46:d0:dc:48:8f:ad:08:b4:60:e3:
                    3b:4b:18:fd:9a:b4:cc:c0:cc:5d:85:1d:2b:e6:69:
                    93:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:7B:C6:82:83:C0:E7:B2:D8:1F:69:F0:FE:18:DE:AD:B2:79:DA:82
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138372e3132322e302e302f31352d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.122.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         7c:46:45:c8:16:3c:c0:59:53:7b:99:55:68:c3:0a:fd:b9:08:
         b4:53:f8:ce:02:be:36:97:0a:5a:cd:ec:4c:38:ae:44:d6:a9:
         48:74:9c:f8:9b:ec:cf:33:1e:22:59:1a:28:66:82:e6:d7:6b:
         81:a1:48:bc:d4:74:0b:8f:f8:7f:c5:7a:61:0c:13:dc:7c:8a:
         83:e0:9d:73:3a:bc:92:97:96:f5:61:9a:0c:dc:e2:8a:34:81:
         d6:36:84:3d:bf:a1:56:36:4e:1f:46:6d:8c:ce:d8:42:16:58:
         2d:0b:d4:f2:88:d0:d6:8c:97:e3:fb:e9:79:b3:a1:78:3e:ab:
         ed:74:87:2e:c3:35:1b:35:be:5c:33:51:16:2e:a5:61:50:61:
         04:e5:71:34:63:ef:f7:12:11:aa:d6:3f:5f:05:db:26:e5:a2:
         fb:c6:d2:e4:1d:cf:dc:bf:36:df:8d:48:1e:3f:d3:9b:a5:d8:
         42:8c:f4:02:35:b2:64:65:c6:ca:ff:c6:92:bd:eb:0d:a2:57:
         d5:54:4f:2a:bb:54:43:ee:05:45:ee:b3:d6:82:9a:98:15:50:
         f8:96:67:1a:c6:d4:7d:52:eb:12:9a:01:90:9b:ea:bf:7e:db:
         f5:5d:c3:5c:68:a9:83:e6:33:9d:b4:89:8f:48:9c:c9:c7:e5:
         75:c0:f6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:12 2024 by rpki-client on console-fra.rpki-client.org