Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e342e302e302f31342d3234203d3e203238353733.roa
File:                     3138392e342e302e302f31342d3234203d3e203238353733.roa (raw, json)
Hash identifier:          ZftkRDSpVmZEZx70bd7kSm5GrqzIXUmjhyX5JNW7iCU=
Subject key identifier:   29:05:58:9E:C9:72:BD:FA:70:5E:56:D9:C8:AA:5E:24:77:46:0F:C4
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       0D7437BF3ABB95FE853F17A8CE4D9C763FAAA41C
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e342e302e302f31342d3234203d3e203238353733.roa
Signing time:             Wed 03 Apr 2024 18:31:46 +0000
ROA not before:           Wed 03 Apr 2024 18:26:46 +0000
ROA not after:            Wed 02 Apr 2025 18:31:46 +0000
asID:                     28573
IP address blocks:        189.4.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:74:37:bf:3a:bb:95:fe:85:3f:17:a8:ce:4d:9c:76:3f:aa:a4:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Apr  3 18:26:46 2024 GMT
            Not After : Apr  2 18:31:46 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:13:6a:43:11:70:23:5a:81:28:22:97:93:39:
                    eb:ee:c1:cb:18:7a:da:45:ec:d5:c2:57:a6:1c:f1:
                    58:9b:7d:97:35:c9:61:cf:e0:33:9b:a1:0e:fc:e0:
                    da:58:2f:35:99:50:35:27:ef:e2:37:1f:41:6f:6b:
                    45:66:3f:74:a4:72:d1:bd:1f:ed:b8:0d:da:c1:aa:
                    e4:52:81:9c:55:80:ac:91:fc:db:dc:86:69:1f:5d:
                    8a:c2:4c:99:50:25:f6:50:27:51:d9:7a:8a:3b:4e:
                    99:12:92:97:2a:59:37:8b:4d:d5:58:dc:92:0d:74:
                    0f:09:16:e5:bf:da:d9:d3:3a:51:44:b2:a3:bd:1a:
                    26:2f:b9:f6:46:d6:77:04:4e:d2:34:3d:cb:7a:63:
                    2b:a7:5e:31:2e:93:39:b0:dd:9a:86:11:c9:e2:a2:
                    9c:f5:e6:f5:92:fa:42:a2:58:bb:d6:2b:0a:3b:03:
                    9c:bd:7d:15:52:f2:1a:f6:3c:f4:98:9c:56:82:d4:
                    d6:4c:b3:2f:c0:d3:cf:d5:bf:4a:3d:3e:c0:3c:3c:
                    32:b5:05:c3:de:36:03:12:3d:80:87:18:d9:f0:1f:
                    15:c9:89:74:da:28:d6:6d:42:80:ec:80:ff:0c:ff:
                    1c:a2:3d:7e:3d:02:f2:db:75:52:3e:b1:6f:c1:80:
                    0f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:05:58:9E:C9:72:BD:FA:70:5E:56:D9:C8:AA:5E:24:77:46:0F:C4
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e342e302e302f31342d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.4.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         c2:76:6b:ef:82:40:ec:1c:38:cc:dc:83:93:ab:a4:2f:97:6d:
         82:01:0d:a0:c2:91:03:bb:13:82:e6:a7:9b:e4:d4:23:81:31:
         b3:8f:ae:e3:9a:d8:d7:f4:37:46:6d:2b:fd:d8:24:e1:80:fd:
         a3:14:5c:19:6f:b4:62:5d:ef:ca:6b:26:98:a5:f0:0b:18:67:
         fc:96:b6:c9:ef:cf:72:f2:14:88:65:97:33:59:46:e1:8f:23:
         3d:89:ff:cf:7c:e7:b1:b9:35:ae:86:ed:62:60:21:5b:91:de:
         37:94:01:85:89:ab:c4:dd:8f:9a:80:38:97:62:bf:92:0f:fe:
         e0:52:52:5f:6d:d6:02:fe:5b:0b:de:da:2c:c2:31:f3:8d:43:
         6d:38:0a:5a:0b:e0:10:d8:4a:98:21:43:2d:49:75:c8:40:8b:
         8e:9b:c3:b9:74:b1:c4:01:ab:a5:44:32:1e:9b:21:cc:34:e3:
         39:15:1e:ad:ec:57:12:d3:90:94:8d:d2:ab:d8:d2:e7:19:93:
         ca:8f:62:c6:83:9c:d4:ed:12:a3:1b:e3:3e:89:46:71:77:ad:
         f5:de:2a:bc:03:60:df:e0:50:f9:ce:f7:6c:68:6b:e3:5b:0a:
         2d:da:fe:9a:52:c2:9e:47:97:06:59:5f:e0:0a:3a:df:7d:67:
         c3:68:cc:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:13 2024 by rpki-client on console-ams.rpki-client.org