Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138372e32302e302e302f31342d3234203d3e203238353733.roa
File:                     3138372e32302e302e302f31342d3234203d3e203238353733.roa (raw, json)
Hash identifier:          EInfGanNLG1SZTt7EyLJ+68x7V7+/gkYscm/Y+PbkvQ=
Subject key identifier:   1D:0C:24:BD:27:44:1D:30:71:F8:6E:98:E8:06:E9:D6:59:62:B7:2F
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       1021224609C82FD312680BDC825E30DBAA5D3976
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138372e32302e302e302f31342d3234203d3e203238353733.roa
Signing time:             Wed 03 Apr 2024 18:31:43 +0000
ROA not before:           Wed 03 Apr 2024 18:26:43 +0000
ROA not after:            Wed 02 Apr 2025 18:31:43 +0000
asID:                     28573
IP address blocks:        187.20.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:21:22:46:09:c8:2f:d3:12:68:0b:dc:82:5e:30:db:aa:5d:39:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Apr  3 18:26:43 2024 GMT
            Not After : Apr  2 18:31:43 2025 GMT
        Subject: CN=3082010A0282010100CD7A1C597D549BAAB949FAEF2CC7BDE7ADEAF852127537F7DEC1A25BACF4689D8076520AADE2AD2306CFCADB4459C298173902FEBEE829BE3BEAD53BA58A1B36E9C8556416C3286986D083D3A95A98C485D86AD116CD5EDBF6C0E974CC36A19EC3952582CC6F04F78F14753E9FBF76978355FDFDB9CF1B403A4DE4D2B496560213311CED054B0E20164D7108E48D69B0542CA648983A522A7886D2B41CC695F9451DD6E9EA83BD6341D444969CE86B58E893FC261110020C82528758C1E1EBB45FE7FFC1F533CC6F526C0E1274AFC8739DB6F24EAB6C26B3339211BD37C56C0C6ADF5348976AD6A4ECAB6DC13E287BAA9FBB0F5C4EF6EB920E862EC0A943F6670203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7a:1c:59:7d:54:9b:aa:b9:49:fa:ef:2c:c7:
                    bd:e7:ad:ea:f8:52:12:75:37:f7:de:c1:a2:5b:ac:
                    f4:68:9d:80:76:52:0a:ad:e2:ad:23:06:cf:ca:db:
                    44:59:c2:98:17:39:02:fe:be:e8:29:be:3b:ea:d5:
                    3b:a5:8a:1b:36:e9:c8:55:64:16:c3:28:69:86:d0:
                    83:d3:a9:5a:98:c4:85:d8:6a:d1:16:cd:5e:db:f6:
                    c0:e9:74:cc:36:a1:9e:c3:95:25:82:cc:6f:04:f7:
                    8f:14:75:3e:9f:bf:76:97:83:55:fd:fd:b9:cf:1b:
                    40:3a:4d:e4:d2:b4:96:56:02:13:31:1c:ed:05:4b:
                    0e:20:16:4d:71:08:e4:8d:69:b0:54:2c:a6:48:98:
                    3a:52:2a:78:86:d2:b4:1c:c6:95:f9:45:1d:d6:e9:
                    ea:83:bd:63:41:d4:44:96:9c:e8:6b:58:e8:93:fc:
                    26:11:10:02:0c:82:52:87:58:c1:e1:eb:b4:5f:e7:
                    ff:c1:f5:33:cc:6f:52:6c:0e:12:74:af:c8:73:9d:
                    b6:f2:4e:ab:6c:26:b3:33:92:11:bd:37:c5:6c:0c:
                    6a:df:53:48:97:6a:d6:a4:ec:ab:6d:c1:3e:28:7b:
                    aa:9f:bb:0f:5c:4e:f6:eb:92:0e:86:2e:c0:a9:43:
                    f6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:0C:24:BD:27:44:1D:30:71:F8:6E:98:E8:06:E9:D6:59:62:B7:2F
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138372e32302e302e302f31342d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.20.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         0e:34:e3:90:b2:09:14:66:0e:01:7b:59:96:93:43:ac:39:68:
         f7:c5:2e:43:4f:1f:29:19:15:cd:ec:36:e5:d4:c5:2e:ba:aa:
         76:e6:f7:45:f3:ed:6f:40:d2:a6:70:2e:ad:1b:f8:08:0e:88:
         fa:aa:c3:40:21:8f:a8:d1:20:2c:48:3a:a7:e2:a5:f3:cd:c1:
         90:22:9e:bc:37:48:6e:b2:16:d7:26:db:cb:7a:48:de:5f:25:
         2e:65:21:40:69:2c:c6:bf:1a:f1:c0:c8:19:86:4a:2d:9d:d9:
         4a:d4:ad:19:93:e4:6a:f1:ff:64:f3:8f:01:41:a2:0f:5a:63:
         50:57:0a:7d:9c:4a:37:d0:13:9e:e4:87:f7:2b:69:3c:d9:a7:
         b5:3c:20:be:50:52:4c:17:e9:03:61:aa:9b:00:0f:9e:1c:9b:
         e8:20:38:a1:f5:e3:6c:18:4d:56:f1:b1:b2:28:bc:16:7d:b5:
         99:b7:0d:01:7f:c0:49:ec:e6:b9:53:63:44:b3:27:a3:b9:80:
         55:37:01:20:ca:97:eb:27:81:81:bc:c0:c1:1d:70:ea:23:9a:
         3d:9f:c6:38:ed:50:30:ee:c3:b1:36:31:03:f2:58:4b:b3:a2:
         94:5d:b1:b2:ca:ec:c6:b4:95:2c:c8:24:68:4a:80:7b:51:25:
         a8:48:64:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:13 2024 by rpki-client on console-ams.rpki-client.org