Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e33392e3134342e302f32302d3234203d3e203238353733.roa
File:                     3138392e33392e3134342e302f32302d3234203d3e203238353733.roa (raw, json)
Hash identifier:          ItxN6MwlMB0UGDdoz+kV697Oih1Y+w1byIQjsWoMYbk=
Subject key identifier:   53:42:80:D0:31:D6:8B:24:37:3D:DE:66:A0:98:FD:45:D3:FC:F9:98
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       4D0984074918D9CA7285B08917E701E404CC0A93
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e33392e3134342e302f32302d3234203d3e203238353733.roa
Signing time:             Wed 03 Apr 2024 18:31:45 +0000
ROA not before:           Wed 03 Apr 2024 18:26:45 +0000
ROA not after:            Wed 02 Apr 2025 18:31:45 +0000
asID:                     28573
IP address blocks:        189.39.144.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:09:84:07:49:18:d9:ca:72:85:b0:89:17:e7:01:e4:04:cc:0a:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Apr  3 18:26:45 2024 GMT
            Not After : Apr  2 18:31:45 2025 GMT
        Subject: CN=3082010A0282010100B382DBB235489BE610CEB5457DB162182FD37AB77D570BABD8F2C11D79572E4BD2426451A69329A872003A2A567374B0B21F76E491F85AFE24C10458B9D96F02D5801FAFA697CCDDC4E58C336565E9BB74570313CD0F6005B712C7963EA6396B55A76B99C2DDC746223BB55D46093BF87FDF216609EAC23EDAA241669849BDBC8D5D64663C580E7EC7A34EAB471F4BB24BB21878A90FB2C23570BBC74DACEFE2163EB4FC145AB5AA1BBD1C030A10697DA7D2CD59F17C8590FFD7F0B4FBA2F632872F6C991C7BDB023F6620D357C97A0D5367BDA5DD03F9A4394ACE2EAD4B3E0033050248F564307D39942B5EBE375F7FF1C082CAEC8572A1F261CCE47BDF02B10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:82:db:b2:35:48:9b:e6:10:ce:b5:45:7d:b1:
                    62:18:2f:d3:7a:b7:7d:57:0b:ab:d8:f2:c1:1d:79:
                    57:2e:4b:d2:42:64:51:a6:93:29:a8:72:00:3a:2a:
                    56:73:74:b0:b2:1f:76:e4:91:f8:5a:fe:24:c1:04:
                    58:b9:d9:6f:02:d5:80:1f:af:a6:97:cc:dd:c4:e5:
                    8c:33:65:65:e9:bb:74:57:03:13:cd:0f:60:05:b7:
                    12:c7:96:3e:a6:39:6b:55:a7:6b:99:c2:dd:c7:46:
                    22:3b:b5:5d:46:09:3b:f8:7f:df:21:66:09:ea:c2:
                    3e:da:a2:41:66:98:49:bd:bc:8d:5d:64:66:3c:58:
                    0e:7e:c7:a3:4e:ab:47:1f:4b:b2:4b:b2:18:78:a9:
                    0f:b2:c2:35:70:bb:c7:4d:ac:ef:e2:16:3e:b4:fc:
                    14:5a:b5:aa:1b:bd:1c:03:0a:10:69:7d:a7:d2:cd:
                    59:f1:7c:85:90:ff:d7:f0:b4:fb:a2:f6:32:87:2f:
                    6c:99:1c:7b:db:02:3f:66:20:d3:57:c9:7a:0d:53:
                    67:bd:a5:dd:03:f9:a4:39:4a:ce:2e:ad:4b:3e:00:
                    33:05:02:48:f5:64:30:7d:39:94:2b:5e:be:37:5f:
                    7f:f1:c0:82:ca:ec:85:72:a1:f2:61:cc:e4:7b:df:
                    02:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:42:80:D0:31:D6:8B:24:37:3D:DE:66:A0:98:FD:45:D3:FC:F9:98
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e33392e3134342e302f32302d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.39.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         27:3c:1e:37:d6:65:89:c0:0f:a9:76:e6:ba:75:09:88:ff:34:
         b9:fd:a1:30:6a:d2:4c:46:ea:24:2a:eb:92:c6:17:3e:44:df:
         31:ec:8e:aa:e1:f3:ca:cc:44:ce:9b:7b:1b:a5:2e:cf:35:23:
         eb:7e:bd:de:9b:29:fc:e9:65:58:35:fd:43:85:c5:c0:18:16:
         25:bc:98:02:55:3c:d9:c1:a5:72:70:0e:cd:d8:d9:2e:19:d2:
         e2:fc:fe:9f:a3:58:2e:24:38:77:93:8a:03:13:9c:c1:07:5a:
         82:56:8d:d3:4c:fa:4e:68:e6:6c:b8:08:61:bb:c1:ca:ba:00:
         79:a6:dc:95:14:95:5e:cc:58:a1:96:3c:80:4e:8c:e2:94:37:
         7d:b9:4a:53:cc:ed:e2:f3:6c:4c:cb:1e:34:3e:8c:40:10:23:
         99:ea:8e:e0:0c:0a:59:76:95:d0:2c:c1:26:d1:b6:96:d0:cb:
         de:80:45:f7:8b:99:be:01:6c:b1:f8:5b:45:31:1a:35:32:f4:
         1e:e7:47:06:30:f5:32:59:e2:10:72:da:1d:c2:53:ce:76:3d:
         17:11:b8:5c:65:f7:a0:98:03:25:79:af:93:ff:4e:46:18:e6:
         1e:7c:bf:a9:79:5b:15:aa:72:c5:0c:84:f4:a3:8a:36:aa:95:
         fe:dd:31:d9
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUTQmEB0kY2cpyhbCJF+cB5ATMCpMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZBMDJCNkY4RjREQkJEOThBQzlBOUQwQzc3QjA1MjFE
NUE2QkQwQTAeFw0yNDA0MDMxODI2NDVaFw0yNTA0MDIxODMxNDVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjM4MkRCQjIzNTQ4OUJFNjEw
Q0VCNTQ1N0RCMTYyMTgyRkQzN0FCNzdENTcwQkFCRDhGMkMxMUQ3OTU3MkU0QkQy
NDI2NDUxQTY5MzI5QTg3MjAwM0EyQTU2NzM3NEIwQjIxRjc2RTQ5MUY4NUFGRTI0
QzEwNDU4QjlEOTZGMDJENTgwMUZBRkE2OTdDQ0REQzRFNThDMzM2NTY1RTlCQjc0
NTcwMzEzQ0QwRjYwMDVCNzEyQzc5NjNFQTYzOTZCNTVBNzZCOTlDMkREQzc0NjIy
M0JCNTVENDYwOTNCRjg3RkRGMjE2NjA5RUFDMjNFREFBMjQxNjY5ODQ5QkRCQzhE
NUQ2NDY2M0M1ODBFN0VDN0EzNEVBQjQ3MUY0QkIyNEJCMjE4NzhBOTBGQjJDMjM1
NzBCQkM3NERBQ0VGRTIxNjNFQjRGQzE0NUFCNUFBMUJCRDFDMDMwQTEwNjk3REE3
RDJDRDU5RjE3Qzg1OTBGRkQ3RjBCNEZCQTJGNjMyODcyRjZDOTkxQzdCREIwMjNG
NjYyMEQzNTdDOTdBMEQ1MzY3QkRBNUREMDNGOUE0Mzk0QUNFMkVBRDRCM0UwMDMz
MDUwMjQ4RjU2NDMwN0QzOTk0MkI1RUJFMzc1RjdGRjFDMDgyQ0FFQzg1NzJBMUYy
NjFDQ0U0N0JERjAyQjEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAs4LbsjVIm+YQzrVFfbFiGC/Terd9Vwur2PLBHXlXLkvSQmRRppMp
qHIAOipWc3Swsh925JH4Wv4kwQRYudlvAtWAH6+ml8zdxOWMM2Vl6bt0VwMTzQ9g
BbcSx5Y+pjlrVadrmcLdx0YiO7VdRgk7+H/fIWYJ6sI+2qJBZphJvbyNXWRmPFgO
fsejTqtHH0uyS7IYeKkPssI1cLvHTazv4hY+tPwUWrWqG70cAwoQaX2n0s1Z8XyF
kP/X8LT7ovYyhy9smRx72wI/ZiDTV8l6DVNnvaXdA/mkOUrOLq1LPgAzBQJI9WQw
fTmUK16+N19/8cCCyuyFcqHyYczke98CsQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FFNCgNAx1oskNz3eZqCY/UXT/PmYMB8GA1UdIwQYMBaAFF+gK2+PTbvZismp0Md7
BSHVpr0KMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZRQXF5WXlHTFd4eFJi
SDVLY3BoejUxNzlkd2NCcThoWU5jMVFzaWFrTUwyLzEvNUZBMDJCNkY4RjREQkJE
OThBQzlBOUQwQzc3QjA1MjFENUE2QkQwQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS81RkEwMkI2RjhGNERCQkQ5OEFDOUE5RDBDNzdCMDUyMUQ1QTZC
RDBBLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GUUFxeVl5R0xXeHhSYkg1S2Nw
aHo1MTc5ZHdjQnE4aFlOYzFRc2lha01MMi8xLzMxMzgzOTJlMzMzOTJlMzEzNDM0
MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzODM1MzczMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBL0n
kDANBgkqhkiG9w0BAQsFAAOCAQEAJzweN9ZlicAPqXbmunUJiP80uf2hMGrSTEbq
JCrrksYXPkTfMeyOquHzysxEzpt7G6UuzzUj63693psp/OllWDX9Q4XFwBgWJbyY
AlU82cGlcnAOzdjZLhnS4vz+n6NYLiQ4d5OKAxOcwQdaglaN00z6TmjmbLgIYbvB
yroAeabclRSVXsxYoZY8gE6M4pQ3fblKU8zt4vNsTMseND6MQBAjmeqO4AwKWXaV
0CzBJtG2ltDL3oBF94uZvgFssfhbRTEaNTL0HudHBjD1MlniEHLaHcJTznY9FxG4
XGX3oJgDJXmvk/9ORhjmHny/qXlbFapyxQyE9KOKNqqV/t0x2Q==
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:14 2024 by rpki-client on console-fra.rpki-client.org