Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e3130302e302e302f31342d3234203d3e203238353733.roa
File:                     3138392e3130302e302e302f31342d3234203d3e203238353733.roa (raw, json)
Hash identifier:          7a0paJLqu2CRt3uMVJgW51ohCFvMyAb5iCtJXlwbWL8=
Subject key identifier:   37:4D:89:AF:0A:A7:D0:BF:B8:93:18:3D:4D:76:B8:6A:71:28:42:60
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       35A25253CF6C146A2208EABC2F2BA5812BA4B2BD
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e3130302e302e302f31342d3234203d3e203238353733.roa
Signing time:             Wed 03 Apr 2024 18:31:45 +0000
ROA not before:           Wed 03 Apr 2024 18:26:45 +0000
ROA not after:            Wed 02 Apr 2025 18:31:45 +0000
asID:                     28573
IP address blocks:        189.100.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:a2:52:53:cf:6c:14:6a:22:08:ea:bc:2f:2b:a5:81:2b:a4:b2:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Apr  3 18:26:45 2024 GMT
            Not After : Apr  2 18:31:45 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:bc:f5:78:a9:17:fc:9d:c7:69:41:46:d9:69:
                    b6:68:e3:3d:be:33:06:5e:91:3c:6b:77:e1:31:69:
                    12:88:78:58:0f:06:6b:a9:5b:86:04:6f:75:84:1f:
                    b5:39:2d:b2:df:fa:46:45:96:cd:0d:7d:df:36:67:
                    16:59:b2:1a:39:16:53:a9:6a:26:c4:1c:db:39:a1:
                    8f:69:34:6e:33:c9:00:31:e6:2c:15:18:39:6c:30:
                    0a:b5:f7:f5:65:53:c4:8a:84:41:49:ae:35:98:6e:
                    a6:22:42:cc:fe:ce:d8:1a:40:0b:dc:c0:98:d6:59:
                    13:f3:9b:de:88:93:8e:18:7c:31:e5:c8:e1:fc:f8:
                    a5:48:73:53:21:ac:20:3b:1f:7f:66:b1:8b:b9:fc:
                    cc:97:a7:83:5f:3e:de:85:ab:22:ac:d0:03:08:11:
                    7b:a5:5b:6f:48:05:86:1d:dc:2a:ed:c5:67:e0:06:
                    5b:26:6a:23:9c:a0:ae:2d:99:f1:0d:e1:f1:d6:00:
                    65:08:95:46:a7:50:a4:a2:1b:60:47:56:58:3c:4b:
                    fc:1c:2e:8c:5e:1a:c5:9e:b6:db:d2:47:d8:95:3e:
                    94:8d:5f:9a:dc:e5:c7:e6:54:a6:71:66:e6:8c:d6:
                    2b:54:27:12:72:31:6e:b9:a8:7f:44:56:1f:89:fd:
                    8d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:4D:89:AF:0A:A7:D0:BF:B8:93:18:3D:4D:76:B8:6A:71:28:42:60
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e3130302e302e302f31342d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.100.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         15:98:89:05:eb:56:56:3c:32:fd:1b:bd:0a:78:fa:46:65:95:
         3f:f0:36:80:32:e3:af:df:15:62:b7:8d:13:11:ec:5e:28:42:
         75:26:51:3a:ab:ae:70:99:d4:63:4b:ec:61:5e:d4:aa:15:19:
         6c:ec:c0:50:35:71:50:a2:dd:b5:81:5e:bc:36:a8:45:c0:b9:
         8c:66:b6:d9:45:b8:b8:29:9a:a8:6d:b0:1b:14:8e:43:1c:05:
         fa:f5:c5:ce:e4:a9:95:85:b8:0f:fa:82:16:c4:b1:ad:21:a6:
         3a:98:29:9f:73:81:f1:6c:2f:67:fc:d8:9b:24:a2:ab:59:0e:
         0b:45:25:1e:5a:b6:12:56:7c:f7:2e:f0:e1:88:36:45:02:7e:
         2e:4d:61:31:1a:1f:f8:5a:db:96:fa:0d:30:f6:c6:53:91:ca:
         ad:dc:30:04:a1:9e:68:b2:0d:13:fa:a2:57:d3:30:60:77:33:
         d7:f8:85:40:68:54:f9:0d:f4:db:df:c2:e4:12:01:dd:a7:2a:
         05:e0:b9:22:6c:48:9c:97:d1:89:ca:a5:eb:01:94:ae:cb:fb:
         b3:6c:3d:bf:da:f9:8c:b0:eb:d2:e0:bc:03:40:14:e1:2d:80:
         4b:1f:6f:af:d6:aa:4a:41:02:ab:f0:d0:93:a8:d1:9c:0f:a2:
         63:7a:40:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:13 2024 by rpki-client on console-ams.rpki-client.org