Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138372e33362e302e302f31342d3234203d3e203238353733.roa
File:                     3138372e33362e302e302f31342d3234203d3e203238353733.roa (raw, json)
Hash identifier:          ACHZfbl1kWZLMTmI/R23UzjkVPYo9Ge/t1YwFZbUQmU=
Subject key identifier:   5B:81:75:5A:28:04:43:6D:98:80:F1:54:5D:B6:91:25:07:B3:5E:A7
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       092A03568BBCA331C58ED7C0FB1C225F53BFFC64
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138372e33362e302e302f31342d3234203d3e203238353733.roa
Signing time:             Wed 03 Apr 2024 18:31:44 +0000
ROA not before:           Wed 03 Apr 2024 18:26:44 +0000
ROA not after:            Wed 02 Apr 2025 18:31:44 +0000
asID:                     28573
IP address blocks:        187.36.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:2a:03:56:8b:bc:a3:31:c5:8e:d7:c0:fb:1c:22:5f:53:bf:fc:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Apr  3 18:26:44 2024 GMT
            Not After : Apr  2 18:31:44 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:47:36:51:70:1b:77:ae:c6:d3:04:b4:ea:4f:
                    e7:fa:58:94:5d:f2:1f:9d:e1:6b:d7:59:d8:37:43:
                    dc:09:a3:16:da:82:ae:98:20:ea:18:87:f1:1a:30:
                    b5:ab:48:7b:19:04:d0:b7:f9:91:38:da:d1:27:24:
                    1f:0d:6d:62:d1:43:38:04:2b:c3:49:15:76:02:cc:
                    40:ed:a0:f2:86:88:58:67:96:df:55:39:ed:53:f1:
                    98:96:e7:9d:98:5a:08:05:c8:74:37:6e:34:87:42:
                    77:84:ed:14:c7:79:50:ce:44:2d:d2:41:b7:84:05:
                    e0:47:19:64:04:dc:6b:54:b6:1d:03:cc:e4:94:74:
                    74:f4:c0:02:03:61:99:a1:6a:81:4f:2b:49:69:2f:
                    4d:5d:c0:f0:7a:7e:6b:5c:04:51:77:be:f3:0c:70:
                    6a:4f:1d:b1:35:34:87:d8:ce:38:ff:05:52:3f:4b:
                    2a:f4:cc:76:34:80:e0:86:8d:84:3c:f3:60:48:1d:
                    73:b0:6d:cf:93:50:6d:96:11:6e:eb:af:14:72:9c:
                    04:a4:1d:38:f8:ef:1e:43:0d:0b:09:82:a2:45:03:
                    7e:5d:69:32:f4:15:12:7a:72:dd:a9:6b:aa:3d:76:
                    bd:92:c1:8b:7a:e1:8c:35:9c:59:a0:b2:f4:32:35:
                    06:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:81:75:5A:28:04:43:6D:98:80:F1:54:5D:B6:91:25:07:B3:5E:A7
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138372e33362e302e302f31342d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.36.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         3d:dd:8e:fe:d0:ee:a3:3c:d2:75:38:82:f3:ff:9f:52:4f:22:
         88:4d:58:40:9c:a5:f0:c6:a2:53:66:b2:00:6a:c7:aa:d7:78:
         fc:82:dd:f3:7f:e8:95:12:f7:cd:4c:fe:89:86:14:3c:09:b2:
         b8:04:ca:f4:05:53:79:d0:45:72:02:eb:80:14:56:0c:c6:f5:
         7e:a3:2e:d0:96:b8:44:a8:bc:9f:74:f3:80:31:aa:62:5d:fa:
         b1:38:45:07:6c:99:28:2f:6c:a5:f1:0d:9e:26:38:d6:3d:bd:
         52:a2:23:ef:57:39:c2:d8:57:00:81:11:13:31:00:87:dd:4e:
         ce:d1:3b:d7:3c:36:b0:ba:36:6c:5d:9f:c0:d2:b3:79:2a:ab:
         a1:ee:8b:d1:14:36:34:80:33:9e:20:3e:60:aa:bf:78:79:ed:
         50:a4:f9:69:d5:ca:c7:7e:1e:1d:5c:77:eb:51:ba:89:f7:8d:
         bf:dc:e1:42:d0:45:ca:1b:72:70:92:61:f2:21:bd:46:64:23:
         b1:fa:8a:b5:7f:05:a0:6b:d1:07:03:87:5b:f6:bc:de:9b:4d:
         67:db:5a:ec:d0:1d:85:a0:06:2a:b3:a5:17:13:6e:05:80:fe:
         52:66:ba:a0:c6:3b:0e:7e:fd:6c:27:9f:43:1b:76:55:3b:42:
         0b:80:13:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:12 2024 by rpki-client on console-fra.rpki-client.org