Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e33322e302e302f31342d3234203d3e203238353733.roa
File:                     3138392e33322e302e302f31342d3234203d3e203238353733.roa (raw, json)
Hash identifier:          EGpPVXSufp08q1kg2AVAzgrT0pKFWEGJTU2Plcnfttc=
Subject key identifier:   0C:F9:29:5F:36:FE:4C:7F:A4:89:40:06:80:21:03:07:F9:5D:46:9C
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       6F5E51033362E1F7F29B5C684188A7E35A89875F
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e33322e302e302f31342d3234203d3e203238353733.roa
Signing time:             Wed 03 Apr 2024 18:31:45 +0000
ROA not before:           Wed 03 Apr 2024 18:26:45 +0000
ROA not after:            Wed 02 Apr 2025 18:31:45 +0000
asID:                     28573
IP address blocks:        189.32.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:5e:51:03:33:62:e1:f7:f2:9b:5c:68:41:88:a7:e3:5a:89:87:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Apr  3 18:26:45 2024 GMT
            Not After : Apr  2 18:31:45 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d6:b9:9f:cc:73:53:59:7b:9a:68:52:e7:83:
                    4d:07:86:e7:da:60:9b:ec:4e:96:59:02:b3:67:50:
                    a3:b2:9b:01:c4:12:67:6e:3a:e4:e4:62:9c:27:16:
                    55:a5:e7:39:08:47:71:25:e7:e9:86:be:fa:3a:b2:
                    2a:0b:12:ea:ad:59:49:af:ce:dd:f8:7e:2a:d8:48:
                    e7:fb:10:54:06:a6:86:14:b3:38:ff:f6:7d:c2:9a:
                    3c:ef:94:40:6f:cf:16:1d:42:95:d7:5c:0e:65:cb:
                    11:29:d3:31:c8:9c:c3:5d:80:2a:d4:22:a4:de:76:
                    4e:d8:f4:0d:6a:68:17:ed:38:34:95:53:2b:2b:b3:
                    27:e9:63:ca:9c:a2:93:77:35:a5:00:a8:0b:38:54:
                    bc:7a:af:ba:ab:10:f2:5c:60:b3:36:cc:f3:4c:cf:
                    7b:2a:b9:5f:86:f6:77:6c:f8:94:1e:13:98:91:fd:
                    f1:d9:a1:63:7e:af:fc:5c:40:23:02:e0:51:51:ce:
                    f6:39:43:a0:06:92:44:81:ce:03:66:9e:6f:0a:c9:
                    35:63:0c:fa:53:58:3f:ff:54:6b:89:07:36:4d:b2:
                    50:a1:96:b3:86:16:0f:ff:2b:0f:f2:c8:ac:be:7b:
                    df:60:79:b0:88:f0:9e:c2:59:93:a4:87:f0:fe:2f:
                    af:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F9:29:5F:36:FE:4C:7F:A4:89:40:06:80:21:03:07:F9:5D:46:9C
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e33322e302e302f31342d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.32.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         70:42:c2:20:0a:68:d4:25:e5:11:75:3e:20:79:a6:16:75:6a:
         c6:8a:8d:18:b3:17:6f:fa:56:7f:a8:fd:4e:b7:cd:a2:15:f6:
         eb:dd:98:fa:c2:09:98:55:b4:23:ba:3a:ed:c8:f8:ab:3d:1a:
         8a:6f:dd:3e:bf:5c:e0:b9:60:8b:a8:9f:a6:fb:c6:0f:ab:b4:
         1a:29:a3:08:af:c3:18:e2:72:4f:b0:64:ba:4c:20:e1:c4:86:
         85:54:55:b1:22:f0:65:c7:e8:73:17:90:7e:5f:cf:d4:5d:7d:
         0b:7b:0e:ed:3c:4b:7e:62:db:a5:d3:f5:78:b4:bd:5f:9a:cc:
         e2:6a:77:1c:7e:e4:a8:1a:9a:42:31:77:f9:f8:3a:a2:e0:f1:
         c4:8e:3d:09:a5:b4:f0:03:1f:25:83:84:b8:5e:f3:97:10:67:
         23:51:9f:38:fb:05:5d:d6:d3:46:6e:eb:01:65:f6:17:b3:cd:
         cd:d7:dd:f2:5f:96:59:30:98:c6:f2:f1:ce:24:1f:3b:22:15:
         78:ff:87:5a:11:15:24:07:6d:81:dd:2e:47:f7:3e:b7:67:b8:
         91:67:6c:31:ba:17:e6:f5:54:34:7f:31:0a:85:d6:14:fd:4d:
         65:ad:a0:7e:26:f4:7c:cf:d9:21:06:77:fb:bb:53:72:ca:ff:
         a3:bf:5a:1e
-----BEGIN CERTIFICATE-----
MIIHPDCCBiSgAwIBAgIUb15RAzNi4ffym1xoQYin41qJh18wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZBMDJCNkY4RjREQkJEOThBQzlBOUQwQzc3QjA1MjFE
NUE2QkQwQTAeFw0yNDA0MDMxODI2NDVaFw0yNTA0MDIxODMxNDVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQURENkI5OUZDQzczNTM1OTdC
OUE2ODUyRTc4MzREMDc4NkU3REE2MDlCRUM0RTk2NTkwMkIzNjc1MEEzQjI5QjAx
QzQxMjY3NkUzQUU0RTQ2MjlDMjcxNjU1QTVFNzM5MDg0NzcxMjVFN0U5ODZCRUZB
M0FCMjJBMEIxMkVBQUQ1OTQ5QUZDRURERjg3RTJBRDg0OEU3RkIxMDU0MDZBNjg2
MTRCMzM4RkZGNjdEQzI5QTNDRUY5NDQwNkZDRjE2MUQ0Mjk1RDc1QzBFNjVDQjEx
MjlEMzMxQzg5Q0MzNUQ4MDJBRDQyMkE0REU3NjRFRDhGNDBENkE2ODE3RUQzODM0
OTU1MzJCMkJCMzI3RTk2M0NBOUNBMjkzNzczNUE1MDBBODBCMzg1NEJDN0FBRkJB
QUIxMEYyNUM2MEIzMzZDQ0YzNENDRjdCMkFCOTVGODZGNjc3NkNGODk0MUUxMzk4
OTFGREYxRDlBMTYzN0VBRkZDNUM0MDIzMDJFMDUxNTFDRUY2Mzk0M0EwMDY5MjQ0
ODFDRTAzNjY5RTZGMEFDOTM1NjMwQ0ZBNTM1ODNGRkY1NDZCODkwNzM2NERCMjUw
QTE5NkIzODYxNjBGRkYyQjBGRjJDOEFDQkU3QkRGNjA3OUIwODhGMDlFQzI1OTkz
QTQ4N0YwRkUyRkFGOTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEArda5n8xzU1l7mmhS54NNB4bn2mCb7E6WWQKzZ1CjspsBxBJnbjrk
5GKcJxZVpec5CEdxJefphr76OrIqCxLqrVlJr87d+H4q2Ejn+xBUBqaGFLM4//Z9
wpo875RAb88WHUKV11wOZcsRKdMxyJzDXYAq1CKk3nZO2PQNamgX7Tg0lVMrK7Mn
6WPKnKKTdzWlAKgLOFS8eq+6qxDyXGCzNszzTM97KrlfhvZ3bPiUHhOYkf3x2aFj
fq/8XEAjAuBRUc72OUOgBpJEgc4DZp5vCsk1Ywz6U1g//1RriQc2TbJQoZazhhYP
/ysP8sisvnvfYHmwiPCewlmTpIfw/i+vlwIDAQABo4ICSjCCAkYwHQYDVR0OBBYE
FAz5KV82/kx/pIlABoAhAwf5XUacMB8GA1UdIwQYMBaAFF+gK2+PTbvZismp0Md7
BSHVpr0KMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZRQXF5WXlHTFd4eFJi
SDVLY3BoejUxNzlkd2NCcThoWU5jMVFzaWFrTUwyLzEvNUZBMDJCNkY4RjREQkJE
OThBQzlBOUQwQzc3QjA1MjFENUE2QkQwQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS81RkEwMkI2RjhGNERCQkQ5OEFDOUE5RDBDNzdCMDUyMUQ1QTZC
RDBBLmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GUUFxeVl5R0xXeHhSYkg1S2Nw
aHo1MTc5ZHdjQnE4aFlOYzFRc2lha01MMi8xLzMxMzgzOTJlMzMzMjJlMzAyZTMw
MmYzMTM0MmQzMjM0MjAzZDNlMjAzMjM4MzUzNzMzLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCvSAwDQYJ
KoZIhvcNAQELBQADggEBAHBCwiAKaNQl5RF1PiB5phZ1asaKjRizF2/6Vn+o/U63
zaIV9uvdmPrCCZhVtCO6Ou3I+Ks9Gopv3T6/XOC5YIuon6b7xg+rtBopowivwxji
ck+wZLpMIOHEhoVUVbEi8GXH6HMXkH5fz9RdfQt7Du08S35i26XT9Xi0vV+azOJq
dxx+5KgamkIxd/n4OqLg8cSOPQmltPADHyWDhLhe85cQZyNRnzj7BV3W00Zu6wFl
9hezzc3X3fJfllkwmMby8c4kHzsiFXj/h1oRFSQHbYHdLkf3PrdnuJFnbDG6F+b1
VDR/MQqF1hT9TWWtoH4m9HzP2SEGd/u7U3LK/6O/Wh4=
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:13 2024 by rpki-client on console-ams.rpki-client.org