Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e33392e3134342e302f32302d3234203d3e203238353733.roa
File:                     3138392e33392e3134342e302f32302d3234203d3e203238353733.roa (raw, json)
Hash identifier:          kJH8LaQWSfW0nlCyXQS9zSbXXIWmLwcRf5GJV2t185Q=
Subject key identifier:   AF:D2:2D:16:6E:9F:5F:82:04:E1:BC:41:1A:6E:E3:3A:17:BF:AC:23
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       309F9783E0BDC8F0A0B3A9F8EA61188284AE7957
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e33392e3134342e302f32302d3234203d3e203238353733.roa
Signing time:             Wed 05 Mar 2025 19:00:10 +0000
ROA not before:           Wed 05 Mar 2025 18:55:10 +0000
ROA not after:            Wed 04 Mar 2026 19:00:10 +0000
asID:                     28573
IP address blocks:        189.39.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 13:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:9f:97:83:e0:bd:c8:f0:a0:b3:a9:f8:ea:61:18:82:84:ae:79:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Mar  5 18:55:10 2025 GMT
            Not After : Mar  4 19:00:10 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:09:6d:db:9d:2f:37:04:5c:cd:d7:07:55:fd:
                    fb:6b:86:c9:c4:ec:93:c2:6b:3a:d2:10:a2:12:03:
                    76:00:e6:b6:2f:0a:f0:c4:7d:41:5b:6f:20:1b:77:
                    96:6d:96:0c:36:30:41:9d:28:bc:b4:5b:99:2e:e9:
                    0c:7a:2a:b6:1b:ab:4c:90:d3:38:f2:3d:7c:09:f7:
                    e4:c6:59:7d:bb:2e:6a:05:79:3c:0e:25:fa:40:20:
                    fb:0e:74:1f:35:93:b0:bf:56:78:ad:20:17:15:49:
                    cd:4c:84:f8:0f:cf:72:62:6e:c6:55:d8:3c:c3:e7:
                    81:db:b7:5e:98:d3:20:54:f7:77:73:a1:ed:e8:7b:
                    52:d4:c4:2b:59:e1:43:7b:66:d4:47:94:51:a9:c0:
                    23:fa:8b:c1:0d:43:42:3a:89:ea:11:8f:44:fe:4a:
                    7a:32:96:cc:1e:f2:93:0b:7b:bb:8e:68:fe:60:de:
                    82:6f:15:68:27:75:f2:1c:03:81:e8:f2:41:10:74:
                    ed:08:7d:25:a8:2b:86:a4:26:a8:31:6c:75:04:03:
                    b8:95:d5:5e:d2:d0:e7:68:fd:cf:2f:e9:3d:23:85:
                    9b:8e:fa:d1:9f:75:54:e8:c8:fa:48:57:82:72:fe:
                    5c:ac:ed:8e:7b:09:d8:88:8a:66:d2:1c:c8:71:52:
                    1b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:D2:2D:16:6E:9F:5F:82:04:E1:BC:41:1A:6E:E3:3A:17:BF:AC:23
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e33392e3134342e302f32302d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.39.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         00:5f:51:4d:78:c9:c4:73:78:48:00:91:35:f9:70:f8:14:0a:
         30:9b:b5:4b:8d:c0:58:f9:bd:fd:31:b4:54:bd:3b:c8:ab:9b:
         c1:55:75:16:1b:fc:c1:5e:d3:6f:12:15:b8:2c:4c:7b:24:13:
         7f:bd:65:8f:3b:66:eb:54:99:a1:c9:18:51:6c:75:c6:39:e5:
         1f:00:c4:b5:0d:77:24:a2:cc:88:08:80:d4:5f:3b:c3:45:fa:
         57:f5:72:e2:85:76:a4:aa:37:7c:a7:3f:e5:a8:ed:df:57:98:
         6e:01:9d:ac:34:6a:d6:33:f4:46:52:33:e6:9b:be:77:27:c0:
         88:e0:f3:db:c3:b1:93:c6:81:92:37:f1:0f:ff:5d:27:38:f3:
         07:7d:13:07:63:95:2b:79:17:9e:b0:f5:7b:31:e6:3d:2d:91:
         43:c5:a7:05:63:e0:30:ff:e7:a4:9c:02:ad:be:f9:97:ab:ac:
         27:17:5a:98:34:60:45:b7:db:58:45:e1:3e:a1:99:7a:d8:e1:
         36:81:4f:5e:e7:cb:34:d6:15:40:3b:af:df:b5:f9:50:37:a4:
         6a:ec:16:15:ab:22:15:4b:b4:ca:82:7e:72:f6:ff:1d:63:18:
         c7:b1:90:98:c9:09:68:86:df:ef:42:18:51:70:1a:58:f7:f7:
         a7:8c:04:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:36:55 2025 by rpki-client