Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e31342e3132382e302f31382d3234203d3e203238353733.roa
File:                     3138392e31342e3132382e302f31382d3234203d3e203238353733.roa (raw, json)
Hash identifier:          EyXYVbsVfe5PdItQ1rLX3QJASOysxldXzEEp3FwtRl0=
Subject key identifier:   F1:83:89:4B:90:75:3D:CA:AD:12:F2:C9:FC:B3:A1:30:C4:9B:D3:23
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       5DCBBD3B040281B45345F315ED8F98B51B42811D
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e31342e3132382e302f31382d3234203d3e203238353733.roa
Signing time:             Wed 03 Apr 2024 18:31:48 +0000
ROA not before:           Wed 03 Apr 2024 18:26:48 +0000
ROA not after:            Wed 02 Apr 2025 18:31:48 +0000
asID:                     28573
IP address blocks:        189.14.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:cb:bd:3b:04:02:81:b4:53:45:f3:15:ed:8f:98:b5:1b:42:81:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Apr  3 18:26:48 2024 GMT
            Not After : Apr  2 18:31:48 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:d1:dc:c9:b3:2a:b3:c9:74:6a:db:da:46:ea:
                    ee:26:08:6f:f2:d1:e0:4e:2d:a5:41:3a:6c:7e:aa:
                    68:70:fe:31:e4:e6:41:92:7f:c5:18:ef:b5:d8:d1:
                    ca:48:48:97:06:0f:00:07:26:21:e5:b8:d5:63:54:
                    17:21:93:d7:77:c2:96:ee:39:68:43:86:22:4f:b7:
                    8e:81:4e:98:f3:55:11:fd:65:48:52:40:fb:c3:7b:
                    e5:90:3f:08:46:c0:b0:9a:c6:9d:90:e6:09:86:f4:
                    9c:94:4e:5d:db:67:c1:e6:69:c2:56:8d:87:f6:ff:
                    cf:60:06:aa:90:1b:11:e2:c9:69:d8:d5:62:d0:13:
                    25:b5:73:9a:d3:80:90:9f:fe:81:37:5e:a0:dd:78:
                    ef:b2:8d:8f:6e:0d:c0:01:23:ea:8a:97:c0:8a:9b:
                    a9:91:d5:96:8f:8a:31:ef:00:24:1c:5c:35:b1:54:
                    4a:5b:8d:a2:6a:42:1d:3b:a5:48:6d:f2:f9:51:a0:
                    5e:32:df:f0:0e:fc:6e:9a:71:0f:e8:dd:c1:e9:8c:
                    ce:cb:ee:b0:31:f9:8e:cc:63:06:e7:65:ae:19:63:
                    eb:41:26:e7:9b:be:a4:0e:2d:1a:0f:6b:da:66:fa:
                    05:53:e9:1a:09:48:d4:b4:3c:8d:9a:9e:47:4d:96:
                    3b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:83:89:4B:90:75:3D:CA:AD:12:F2:C9:FC:B3:A1:30:C4:9B:D3:23
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e31342e3132382e302f31382d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.14.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9f:4e:16:93:2c:2c:13:3e:e9:93:00:83:ba:53:1a:4b:69:50:
         bb:ab:36:5f:e2:d4:55:49:c6:03:5e:53:c5:a5:6a:9f:81:a6:
         0f:f2:44:9f:c4:98:2c:d3:88:75:7b:8d:3f:01:9b:23:ec:e3:
         01:42:b8:00:0e:d1:fd:e8:09:4c:89:6c:38:4f:15:b6:cd:d1:
         07:a3:ad:bc:a9:8e:b2:95:a0:61:07:3e:24:b5:8f:71:b1:a0:
         0f:5c:94:b0:7e:5a:f8:01:4d:1a:6d:f8:27:6c:10:83:62:9c:
         b7:11:e8:34:5e:b0:09:ff:04:cd:ca:19:d1:0b:43:91:13:26:
         f3:e8:27:6e:17:03:d4:f2:f3:c6:a8:ea:51:64:b4:04:e3:e6:
         3a:64:c1:e5:12:f9:0a:2a:23:e3:3b:24:c6:fa:e3:ee:4e:20:
         c7:0a:69:08:39:44:79:a1:b2:d1:3b:a8:a8:3f:f4:13:0c:5d:
         63:23:ed:d6:5c:9b:0f:f2:bc:6a:4c:a9:e8:6a:9f:ea:df:f4:
         43:c6:fd:e3:e0:3b:f2:26:3e:a0:26:87:d0:4d:9d:77:06:65:
         eb:59:63:4e:d8:d4:60:29:2e:8b:72:0e:b2:b2:42:58:10:4a:
         f4:4a:f7:53:e5:8c:54:d0:5b:a5:9b:94:40:ad:4e:ae:c5:70:
         9c:ac:e5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:13 2024 by rpki-client on console-ams.rpki-client.org