Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138372e3235352e302e302f31362d3234203d3e203238353733.roa
File:                     3138372e3235352e302e302f31362d3234203d3e203238353733.roa (raw, json)
Hash identifier:          q+EiqsWxUF29Jm46dgDPDiy2cLZP8rTgcY0/5Gc4Hmk=
Subject key identifier:   D7:CB:C1:15:8D:BC:F4:6F:8D:A6:D6:3B:0E:86:19:2C:09:45:3C:0C
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       0282CAFEAF11FB5CA87BB8AAE74D1DF4F0253527
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138372e3235352e302e302f31362d3234203d3e203238353733.roa
Signing time:             Wed 03 Apr 2024 18:31:48 +0000
ROA not before:           Wed 03 Apr 2024 18:26:48 +0000
ROA not after:            Wed 02 Apr 2025 18:31:48 +0000
asID:                     28573
IP address blocks:        187.255.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:82:ca:fe:af:11:fb:5c:a8:7b:b8:aa:e7:4d:1d:f4:f0:25:35:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Apr  3 18:26:48 2024 GMT
            Not After : Apr  2 18:31:48 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c1:0d:dd:18:4c:3b:be:0b:db:a0:97:91:90:
                    67:1b:d9:3b:34:f5:64:e9:c4:72:2f:f3:c5:69:f2:
                    b8:74:9f:5c:44:96:c2:3b:c1:87:a2:e6:95:f3:bd:
                    4a:eb:7c:a2:ae:20:8b:99:9b:1f:c1:1a:f3:56:40:
                    93:28:e7:d6:61:9f:11:bc:a4:1f:2f:ea:08:13:32:
                    e5:25:af:58:a9:5f:9c:52:eb:a4:63:f8:b8:6d:55:
                    a2:99:14:af:db:c5:7b:3b:f8:da:eb:56:7a:89:53:
                    31:71:1c:a3:e6:64:d0:90:ed:0d:c0:91:36:28:b7:
                    17:26:42:59:1c:fc:6f:87:26:48:6d:07:e6:c7:dd:
                    b7:a3:83:f3:37:5a:ec:ea:68:20:e6:c6:6a:c4:cf:
                    49:5e:af:15:a8:6e:93:01:c6:04:af:dc:6a:b3:eb:
                    fb:9b:6d:af:b6:85:0c:57:24:b7:e7:88:25:aa:92:
                    e3:62:37:6e:6f:98:2a:73:f3:6b:f5:02:b5:6e:7b:
                    b5:12:e7:6e:8c:3c:87:d4:d3:7d:56:ac:a4:24:91:
                    3d:a2:0c:95:1f:2a:9f:93:7e:57:1f:4e:62:ad:b3:
                    a3:6c:0b:ea:32:a4:fa:61:0a:fb:96:24:19:ca:1a:
                    e9:82:26:69:0e:e9:d4:1f:6f:aa:c7:ea:c8:5d:56:
                    8e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:CB:C1:15:8D:BC:F4:6F:8D:A6:D6:3B:0E:86:19:2C:09:45:3C:0C
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138372e3235352e302e302f31362d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.255.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a3:f2:81:ac:52:f5:1b:92:a9:41:1f:7c:71:4c:34:0b:82:71:
         93:34:b1:ae:b9:b5:c0:1a:ce:8d:a5:8e:05:e2:47:18:02:97:
         98:af:68:11:62:41:25:e6:2e:f4:e3:45:1a:a3:39:83:6a:da:
         89:41:e8:3b:2c:bc:1f:4a:59:41:70:1d:c0:0a:38:25:9d:8f:
         3b:9a:e2:27:20:26:41:a2:83:f7:24:6c:73:2e:e7:be:53:a0:
         39:3b:12:ab:0e:7d:c6:06:4b:ba:4c:0f:3a:49:82:d3:7b:09:
         97:3c:9e:a6:96:73:13:bb:26:94:f8:ed:d0:59:b1:96:da:82:
         84:fd:d6:1b:a5:76:0e:20:16:b6:df:cd:9b:57:e4:c5:8d:57:
         87:3d:88:21:bf:28:d7:05:5d:eb:96:e0:3f:fe:33:5b:76:2d:
         8f:3e:04:0d:04:c5:97:f5:db:9b:c8:08:1c:ff:ed:e3:be:10:
         71:df:39:a1:67:5f:2c:7f:43:20:40:41:14:6a:6f:80:7c:b3:
         1b:a6:00:e1:0a:91:32:c0:9d:32:58:31:10:81:3b:db:5e:0e:
         df:a8:f0:0b:96:fb:8e:7d:b9:43:e3:42:76:b2:2d:c9:d4:08:
         66:fb:64:08:fb:e8:4b:d4:77:85:04:9e:2b:d6:ac:7f:5b:81:
         af:37:7a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:12 2024 by rpki-client on console-fra.rpki-client.org