Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138372e322e302e302f31352d3234203d3e203238353733.roa
File:                     3138372e322e302e302f31352d3234203d3e203238353733.roa (raw, json)
Hash identifier:          5xiWYBziRI+J8vc5yLDEFVfwiKx0/ZLy8KNQ37CAYyc=
Subject key identifier:   53:94:14:40:CC:9A:BA:99:67:F5:86:AA:6C:DB:E3:1B:73:D5:BA:7E
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       021C394256014974A5A063327E167FACD45F8D81
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138372e322e302e302f31352d3234203d3e203238353733.roa
Signing time:             Wed 03 Apr 2024 18:31:49 +0000
ROA not before:           Wed 03 Apr 2024 18:26:49 +0000
ROA not after:            Wed 02 Apr 2025 18:31:49 +0000
asID:                     28573
IP address blocks:        187.2.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:1c:39:42:56:01:49:74:a5:a0:63:32:7e:16:7f:ac:d4:5f:8d:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Apr  3 18:26:49 2024 GMT
            Not After : Apr  2 18:31:49 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:30:ed:7a:af:d1:8f:f1:4c:8a:d0:ac:f5:db:
                    e1:9f:e3:ef:6f:ee:27:ce:45:76:11:47:a1:d5:07:
                    34:e4:8b:64:c4:c9:21:36:36:36:37:dd:41:80:84:
                    e3:46:c1:e2:2d:14:a9:cb:41:3a:df:e1:51:c7:5b:
                    bb:72:4e:6f:d4:41:68:39:b5:fe:66:43:81:b9:ca:
                    ab:d3:f2:7b:6a:33:23:b0:14:87:30:59:e7:e2:24:
                    e7:a5:03:57:ef:2f:e5:fe:9f:a3:ea:25:f1:2c:ac:
                    ef:d7:78:42:68:e4:3b:12:ea:ca:be:d5:f0:e3:80:
                    d9:43:db:31:ed:22:64:f5:58:d4:21:3e:55:1d:8f:
                    dc:ef:2d:a8:3b:4e:6f:7b:aa:e1:a2:06:36:dd:e2:
                    4f:16:41:ef:2d:0c:7d:e2:11:0c:5b:08:b7:87:69:
                    41:86:8b:36:4e:26:d0:14:c8:06:0d:b4:7d:fa:ea:
                    bc:d1:14:a9:54:e0:48:49:b1:01:f2:bd:6b:73:4f:
                    1f:74:3f:e5:1e:57:90:03:00:c2:99:bd:ce:59:e1:
                    c2:52:dd:59:a0:62:94:ce:f4:2d:2a:6d:95:be:92:
                    87:34:38:ba:1f:9f:15:b2:23:4d:01:e7:c0:3e:a5:
                    4d:6f:ac:14:4e:49:35:e5:65:b5:8a:72:fd:20:9b:
                    a3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:94:14:40:CC:9A:BA:99:67:F5:86:AA:6C:DB:E3:1B:73:D5:BA:7E
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138372e322e302e302f31352d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.2.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         b8:b9:e6:56:ed:35:fc:3e:f7:f0:96:53:2b:34:25:9d:2f:a6:
         05:01:3a:13:77:9c:51:02:8a:b6:f9:11:60:e5:57:9a:99:c3:
         bf:da:57:55:3c:50:3b:ed:a5:2e:9d:e9:b6:3a:04:60:fe:af:
         73:03:30:42:ce:6c:6a:49:f5:9b:33:0c:46:42:ca:34:55:60:
         63:45:d7:3a:d7:24:a6:ac:c0:af:3b:62:fc:47:b5:93:98:be:
         0a:ff:33:2a:3c:dd:6c:b5:41:3e:d4:32:92:b9:87:e9:69:64:
         88:9e:02:c4:4e:23:c9:24:da:c4:b1:a0:0d:a2:f0:2e:d2:f7:
         60:5b:f5:c4:be:7e:0d:23:28:b2:19:b9:c2:40:52:23:15:d4:
         d3:d5:54:53:42:fa:7e:80:ba:c7:f9:c2:a0:89:3e:83:f8:fb:
         4e:39:22:ae:aa:7c:1e:b6:a9:d6:ba:b1:ab:ab:a5:39:b6:3c:
         06:12:a6:3b:67:74:b9:0f:98:09:e9:f3:b0:90:01:c7:3e:e1:
         a8:8e:65:9f:45:ed:30:07:09:14:49:00:b4:f1:b4:c5:07:8b:
         b4:3b:85:a4:0f:b8:55:00:38:26:57:95:5f:32:44:3f:ed:a0:
         ea:18:81:8c:20:d2:07:ac:c7:65:f5:bd:26:1b:58:b7:2f:a1:
         f4:f7:f3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:12 2024 by rpki-client on console-fra.rpki-client.org