Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138372e36342e302e302f31342d3234203d3e203238353733.roa
File:                     3138372e36342e302e302f31342d3234203d3e203238353733.roa (raw, json)
Hash identifier:          ThxFKvQ12RlzOb2BL5MSBcwA8SMRQmJUP+YW/qmk2tI=
Subject key identifier:   17:57:9E:BA:0B:A6:11:A1:C8:51:91:8C:43:08:4E:2D:75:9A:0F:E0
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       6065D11874ADE2272E45BD67362ACCAD76CF86A8
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138372e36342e302e302f31342d3234203d3e203238353733.roa
Signing time:             Wed 03 Apr 2024 18:31:43 +0000
ROA not before:           Wed 03 Apr 2024 18:26:43 +0000
ROA not after:            Wed 02 Apr 2025 18:31:43 +0000
asID:                     28573
IP address blocks:        187.64.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:65:d1:18:74:ad:e2:27:2e:45:bd:67:36:2a:cc:ad:76:cf:86:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Apr  3 18:26:43 2024 GMT
            Not After : Apr  2 18:31:43 2025 GMT
        Subject: CN=3082010A02820101009F1D43327D2B9D9EBD71E8ECF36B22D31950F445EFAFCD5A43F7A36297BB2B47642162329ED9BDF549F04131DE894423F3B074EECE85EBF9B8CCE891199559C9460387B2B7495B3BE028F30E4FE6FE960741114D4240AA2ED86897DA3F9337FD4129369836732D9E00C4F64EA450B2B08CD2ABE31EA06DF405875E870B287032F135CE9C94E190C49006CE03D18388CC2A57A9BDCD457A70BBC8E804DC485EE5172D71F4ADBEEF345E2B87802914005927E370F7018CA602A20438CC920FFF01D01ADF176322B35A90FA57173533ABE3234037B78F81556533DAD8445BF587026FF73492C7DB33088714C75D3D0F75AB68DC671E6893B77C545A005A28D22A9F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1d:43:32:7d:2b:9d:9e:bd:71:e8:ec:f3:6b:
                    22:d3:19:50:f4:45:ef:af:cd:5a:43:f7:a3:62:97:
                    bb:2b:47:64:21:62:32:9e:d9:bd:f5:49:f0:41:31:
                    de:89:44:23:f3:b0:74:ee:ce:85:eb:f9:b8:cc:e8:
                    91:19:95:59:c9:46:03:87:b2:b7:49:5b:3b:e0:28:
                    f3:0e:4f:e6:fe:96:07:41:11:4d:42:40:aa:2e:d8:
                    68:97:da:3f:93:37:fd:41:29:36:98:36:73:2d:9e:
                    00:c4:f6:4e:a4:50:b2:b0:8c:d2:ab:e3:1e:a0:6d:
                    f4:05:87:5e:87:0b:28:70:32:f1:35:ce:9c:94:e1:
                    90:c4:90:06:ce:03:d1:83:88:cc:2a:57:a9:bd:cd:
                    45:7a:70:bb:c8:e8:04:dc:48:5e:e5:17:2d:71:f4:
                    ad:be:ef:34:5e:2b:87:80:29:14:00:59:27:e3:70:
                    f7:01:8c:a6:02:a2:04:38:cc:92:0f:ff:01:d0:1a:
                    df:17:63:22:b3:5a:90:fa:57:17:35:33:ab:e3:23:
                    40:37:b7:8f:81:55:65:33:da:d8:44:5b:f5:87:02:
                    6f:f7:34:92:c7:db:33:08:87:14:c7:5d:3d:0f:75:
                    ab:68:dc:67:1e:68:93:b7:7c:54:5a:00:5a:28:d2:
                    2a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:57:9E:BA:0B:A6:11:A1:C8:51:91:8C:43:08:4E:2D:75:9A:0F:E0
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138372e36342e302e302f31342d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.64.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         20:07:f7:fc:89:f8:dc:3a:bf:a3:3a:85:df:4b:de:22:f1:3c:
         d4:64:c2:60:7e:69:65:92:ea:e5:2c:b9:a8:77:c0:95:a4:22:
         4d:70:32:b6:f1:c4:92:59:2a:41:69:3a:53:a6:cd:86:82:b8:
         cb:03:d4:4f:2d:06:26:ef:97:a5:49:f9:1a:0c:60:1e:2d:b8:
         06:8f:35:17:58:ee:9e:c9:8f:d8:10:98:d0:6f:16:29:99:8a:
         05:b5:18:72:ce:00:c2:91:10:39:ad:7e:c4:cb:44:82:ce:9d:
         d6:30:47:e7:d2:b8:ed:5b:98:00:53:02:ed:11:cd:0f:cd:64:
         7b:3a:b7:38:9f:3f:f6:6f:f4:e8:5f:7d:14:06:48:22:33:da:
         4e:cc:3e:8e:11:11:2f:65:35:36:74:1d:87:e4:0c:e9:b4:60:
         aa:06:ca:12:d5:e8:c8:2f:18:0f:52:a9:f7:0f:41:16:80:de:
         f2:04:ae:d1:fd:41:c2:d1:f1:55:67:01:aa:52:17:62:c0:16:
         09:8e:ea:13:f8:03:db:31:02:2c:23:bf:a2:dc:f6:2e:c5:dd:
         de:c0:24:15:54:6a:0b:b1:a9:12:35:7d:74:0d:82:bd:90:b2:
         42:53:a5:49:f7:5c:59:48:ff:e8:12:c0:fe:50:69:0f:70:1e:
         36:47:83:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:13 2024 by rpki-client on console-ams.rpki-client.org