Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138372e322e302e302f31352d3234203d3e203238353733.roa
File:                     3138372e322e302e302f31352d3234203d3e203238353733.roa (raw, json)
Hash identifier:          SuU0MgpQeormKtXJ8WL9bgl0syKv2VVlnR4WUopMSP4=
Subject key identifier:   70:4F:FA:AB:BD:EB:26:BF:4C:4A:77:78:B2:EA:72:83:37:1A:A1:20
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       5361549DAEE19FC247DA7FF2A3D33475643BBC7C
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138372e322e302e302f31352d3234203d3e203238353733.roa
Signing time:             Wed 05 Mar 2025 19:00:11 +0000
ROA not before:           Wed 05 Mar 2025 18:55:11 +0000
ROA not after:            Wed 04 Mar 2026 19:00:11 +0000
asID:                     28573
IP address blocks:        187.2.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 13:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:61:54:9d:ae:e1:9f:c2:47:da:7f:f2:a3:d3:34:75:64:3b:bc:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Mar  5 18:55:11 2025 GMT
            Not After : Mar  4 19:00:11 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:85:dc:01:2a:44:be:8f:91:3e:22:bf:d5:8c:
                    24:fe:14:20:6e:16:c2:6b:5b:db:10:dd:e7:39:d5:
                    9a:74:ef:34:da:d5:37:9b:2e:42:d2:d9:06:62:b4:
                    49:c5:72:a3:97:5e:50:6f:63:85:ff:ee:6e:8d:8d:
                    f5:50:43:08:dd:e2:c9:35:3d:51:d2:ea:a3:3a:97:
                    a0:31:75:e3:f0:0e:cf:a9:dd:a7:eb:3e:0e:d7:75:
                    b7:b6:99:47:42:f2:d8:80:08:48:7f:a6:be:5c:20:
                    4b:da:bc:23:4d:60:49:bd:12:a8:e5:f5:04:24:37:
                    84:e7:42:9b:5d:af:c6:e9:95:65:23:73:04:bc:52:
                    8c:ba:9a:84:5a:a8:2c:70:fa:3d:b2:18:0b:65:ab:
                    22:9f:53:48:27:3f:71:03:66:7b:27:90:32:e7:24:
                    29:bf:0e:4f:9e:31:e6:2d:c8:d2:57:1a:52:ec:f1:
                    45:19:09:7b:6a:99:4b:b9:9d:a3:fb:9b:35:09:bf:
                    3a:24:cf:0b:64:76:47:3a:61:08:3f:2d:dc:b9:fc:
                    81:00:1f:71:1e:c3:c1:0d:a2:5c:45:46:6c:c2:2d:
                    88:4e:db:8e:23:a8:b6:a1:14:c0:a0:a9:fc:01:37:
                    52:8f:40:e5:fb:85:ed:2a:7a:1b:9d:11:66:7a:3f:
                    ed:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:4F:FA:AB:BD:EB:26:BF:4C:4A:77:78:B2:EA:72:83:37:1A:A1:20
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138372e322e302e302f31352d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.2.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         5c:7d:c0:38:7a:8b:32:ac:01:4c:ed:4c:7a:80:d6:b6:05:12:
         d8:ca:9a:fc:cd:fc:d6:37:8a:9d:d2:74:b4:01:e6:25:66:54:
         8b:58:11:3f:89:bd:d7:c5:43:d6:30:24:59:30:83:f5:c1:21:
         b2:ec:48:9d:ed:68:aa:cd:dd:11:44:8c:17:ae:33:dd:a3:09:
         05:f7:ce:fa:54:9f:0d:9e:47:0d:38:ed:27:aa:e0:a1:29:3d:
         2a:a9:63:e1:9c:b3:f9:14:ab:d9:36:e6:54:0a:09:cd:08:3f:
         bd:ac:18:ec:cd:bc:35:a4:19:52:92:fb:9e:09:8c:bc:90:92:
         82:05:dc:83:ad:a5:a2:4d:b0:dd:6c:21:2f:a7:26:6e:1e:7e:
         4d:cc:69:63:a3:4f:04:d6:44:ed:22:0f:eb:da:3e:bb:cb:89:
         30:ca:0b:60:c7:b5:c3:28:b8:af:25:2a:59:10:e5:8b:29:52:
         7b:52:c4:59:90:08:2b:60:ff:ae:cd:d1:39:18:9c:4c:6f:6b:
         55:9a:45:3c:2a:b5:a3:1d:b7:c0:63:dc:af:2c:17:d9:73:a9:
         27:05:48:dd:31:27:54:a9:9c:1c:26:e7:0f:b1:02:6d:c6:e6:
         3b:d5:05:d9:2b:a6:a3:0b:f4:4a:06:ae:23:d2:cc:27:62:ee:
         d2:24:59:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:59 2025 by rpki-client