Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e3132362e31362e302f32302d3234203d3e203238353733.roa
File:                     3138392e3132362e31362e302f32302d3234203d3e203238353733.roa (raw, json)
Hash identifier:          JYuB5AZSJ2aynN5jbXOhctC822yATxqovm+tslXPh3E=
Subject key identifier:   AA:EB:F3:63:1E:E0:73:80:E7:2F:E2:C9:B6:05:41:EC:93:1A:52:64
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       16232EF8B6CBF1A3782D844A529D0EEEE925F208
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e3132362e31362e302f32302d3234203d3e203238353733.roa
Signing time:             Wed 03 Apr 2024 18:31:44 +0000
ROA not before:           Wed 03 Apr 2024 18:26:44 +0000
ROA not after:            Wed 02 Apr 2025 18:31:44 +0000
asID:                     28573
IP address blocks:        189.126.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:23:2e:f8:b6:cb:f1:a3:78:2d:84:4a:52:9d:0e:ee:e9:25:f2:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Apr  3 18:26:44 2024 GMT
            Not After : Apr  2 18:31:44 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a2:36:c3:ce:e3:cd:62:ac:5b:8c:c8:71:67:
                    49:13:50:39:4e:35:74:5c:4d:ab:1b:75:ab:12:a9:
                    0d:f9:bb:67:ab:93:37:de:13:f1:87:f5:a1:9d:17:
                    10:4a:64:38:08:e5:2a:74:81:11:4e:ab:61:08:98:
                    ad:4c:6d:6c:94:cb:b1:dc:89:a8:cb:d4:77:d9:2b:
                    b7:92:38:07:79:cf:43:0c:3b:a5:cd:98:bd:c9:26:
                    2e:77:04:e3:88:b8:48:57:b9:37:b7:37:a1:3b:5d:
                    f0:c8:62:41:7c:ce:16:ef:f6:75:e9:51:ce:66:f2:
                    9e:6d:86:ff:23:6d:8f:11:f5:6f:29:de:ea:2e:4e:
                    6b:43:fc:73:b9:40:47:c2:31:2a:b9:a2:e3:e9:ca:
                    53:64:3c:e2:0d:15:8e:a1:6f:44:8b:f7:0c:52:ef:
                    ff:e2:76:68:cf:d2:1e:4d:9c:23:7d:62:da:04:b0:
                    1e:f7:bf:dd:1f:d1:a4:9e:ec:5d:72:2f:e3:14:63:
                    23:69:2c:74:e6:53:a8:4b:27:55:1c:1b:84:c6:b4:
                    d4:9b:80:a5:2b:6a:1f:a1:97:86:d8:46:92:75:50:
                    2b:fb:2e:1e:e4:04:7b:55:a9:04:f3:a2:e1:6e:f4:
                    9b:f4:07:e8:b1:a3:d8:a7:1a:56:96:72:16:db:c0:
                    f4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:EB:F3:63:1E:E0:73:80:E7:2F:E2:C9:B6:05:41:EC:93:1A:52:64
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e3132362e31362e302f32302d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         bc:27:d6:2f:8a:cc:1d:1c:d0:76:c9:5c:ef:81:3b:4e:50:e8:
         bf:ef:f5:f0:be:b8:df:72:fc:a0:d0:da:77:b9:35:5f:e8:3d:
         d5:82:ed:4d:7c:50:a2:cf:b8:a8:d0:c4:84:e4:d7:27:bf:f0:
         e7:5d:3e:19:8d:ea:c5:09:df:6d:8c:0e:46:25:b4:6b:1b:ce:
         08:fa:53:c2:be:7a:f1:54:9d:21:9f:31:83:e6:69:2b:5e:47:
         05:64:bb:0a:d8:e6:f1:4d:1e:dc:4c:bf:4c:4e:70:15:25:7a:
         57:74:b6:9a:26:d8:59:3b:27:2d:cd:65:be:d1:c3:eb:6c:cb:
         71:d3:97:b2:bf:ec:15:a2:d3:b9:6b:f3:b3:d7:e7:66:3a:13:
         c6:3e:bc:c0:e3:60:ac:63:d2:2a:1a:e1:9a:ff:86:8a:08:df:
         82:dd:52:10:0e:42:e6:39:04:d4:49:01:66:69:e0:8a:34:0d:
         31:b8:6e:17:ec:70:d8:58:10:2a:3a:59:0b:12:5a:52:14:d6:
         36:dc:cf:26:c1:43:40:ba:dd:0d:2b:9a:3c:8f:67:be:97:0c:
         c4:f7:b2:3b:e0:9c:d5:54:b0:57:fd:6e:2e:ac:9d:c6:e5:27:
         ad:cf:8e:9f:24:61:a9:1a:e9:06:f5:18:87:af:3a:e5:ee:55:
         9e:eb:48:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:12 2024 by rpki-client on console-fra.rpki-client.org