Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e31342e3132382e302f31382d3234203d3e203238353733.roa
File:                     3138392e31342e3132382e302f31382d3234203d3e203238353733.roa (raw, json)
Hash identifier:          WvwrcY5hQUhVi1afp1aGC33+gNfs7j1ufQbBUzHdn4A=
Subject key identifier:   4F:B3:AB:9A:63:76:98:C9:FC:0C:11:FE:6E:F7:65:64:63:2C:C8:F3
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       6DA0AB4F4063E59287403D66A7038E6E70899E77
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e31342e3132382e302f31382d3234203d3e203238353733.roa
Signing time:             Wed 05 Mar 2025 19:00:14 +0000
ROA not before:           Wed 05 Mar 2025 18:55:14 +0000
ROA not after:            Wed 04 Mar 2026 19:00:14 +0000
asID:                     28573
IP address blocks:        189.14.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 13:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:a0:ab:4f:40:63:e5:92:87:40:3d:66:a7:03:8e:6e:70:89:9e:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Mar  5 18:55:14 2025 GMT
            Not After : Mar  4 19:00:14 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:05:56:4f:cb:e2:7a:11:c3:e6:f8:a1:b2:d8:
                    c7:8b:33:e7:a5:af:00:24:46:f4:ff:c1:70:2b:af:
                    66:f6:5b:93:eb:a0:66:ce:c1:cd:5c:5a:b3:80:01:
                    ba:4a:e8:39:07:58:06:a1:ba:9d:28:7a:f3:a7:cd:
                    ee:fe:0b:17:5c:5e:c5:11:96:6d:a9:f8:9f:6c:ac:
                    58:33:2e:d7:61:41:dd:4a:16:bb:e8:f4:6c:d1:30:
                    c1:21:df:c3:5e:96:34:f9:ad:3e:54:be:42:d5:c3:
                    56:02:52:e8:50:e4:50:f1:e3:de:2c:d8:7f:b0:c5:
                    2c:bf:4e:cd:73:96:b4:5c:ed:22:fe:30:87:eb:db:
                    3d:39:b0:fd:fe:40:64:46:df:4e:c3:e5:58:37:8c:
                    e1:6f:f1:cb:f3:94:b6:f5:0e:45:9d:8f:45:be:a9:
                    f1:5a:25:c4:53:e3:a1:84:20:07:a9:24:ac:69:44:
                    02:11:68:dd:ca:fb:c0:6b:b1:66:03:54:6c:22:59:
                    83:9d:43:83:ce:ae:ee:62:3c:a3:c2:2c:1d:cf:5b:
                    23:d4:6c:7c:c9:05:9c:d9:4a:16:d3:ed:65:bf:94:
                    3f:d6:c4:15:96:2a:26:94:b6:0f:07:0a:22:56:29:
                    35:6a:ba:66:07:4c:f5:70:43:6c:c6:f7:fa:13:9e:
                    91:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B3:AB:9A:63:76:98:C9:FC:0C:11:FE:6E:F7:65:64:63:2C:C8:F3
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e31342e3132382e302f31382d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.14.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         58:3c:25:c1:06:50:5b:d7:65:5c:ed:23:fa:88:60:30:10:0b:
         2e:3d:45:fb:a1:d6:7a:ea:26:d9:b8:3c:b9:39:69:1e:b4:bc:
         c4:5b:03:f5:7e:32:80:75:66:96:73:fd:d2:3c:a6:ea:74:dd:
         cd:75:01:36:00:af:dc:22:fb:4a:4d:c0:de:a7:ae:a9:90:ac:
         52:fb:72:22:b7:82:a6:89:0a:08:95:08:86:94:76:fb:4b:6c:
         65:b3:6d:c2:db:f3:00:45:16:b3:36:39:34:94:21:7e:60:be:
         b1:5b:13:30:2e:a0:c6:67:c4:c8:93:eb:7a:0c:ea:95:80:b2:
         99:4f:ca:c5:e5:b4:9b:81:5c:39:53:6d:1b:99:69:46:87:d8:
         3b:c3:08:d7:d9:b1:18:42:49:31:c0:de:71:12:9e:76:75:98:
         7b:6f:6d:a1:aa:5e:fc:32:8e:1c:d2:e1:81:61:92:67:d7:06:
         e7:bf:e3:9a:a3:77:4c:85:a3:e1:6e:fc:11:7c:60:9c:ea:d5:
         6a:84:a8:de:44:bf:ad:56:eb:b6:73:5b:91:36:81:89:d7:3c:
         9b:1d:41:1a:75:17:21:54:16:32:e6:ff:bc:97:22:2c:0f:b9:
         fd:ed:22:36:f2:5c:d2:3d:21:ae:a0:34:bb:ec:d4:c6:41:3b:
         d2:83:2e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:31:34 2025 by rpki-client