Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e35312e3137362e302f32302d3230203d3e203238333531.roa
File:                     3138392e35312e3137362e302f32302d3230203d3e203238333531.roa (raw, json)
Hash identifier:          /t6AxYsrP6DdcgkS/zXBIcru+qsBXoqQBD2pHaywUTI=
Subject key identifier:   7F:12:CC:9B:05:73:FC:94:FB:5E:71:5D:B9:ED:7F:4B:D0:58:62:6D
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       4D13B030634B96EAF0B7701D1E84F4CC91B0149F
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e35312e3137362e302f32302d3230203d3e203238333531.roa
Signing time:             Wed 03 Apr 2024 18:31:42 +0000
ROA not before:           Wed 03 Apr 2024 18:26:42 +0000
ROA not after:            Wed 02 Apr 2025 18:31:42 +0000
asID:                     28351
IP address blocks:        189.51.176.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:13:b0:30:63:4b:96:ea:f0:b7:70:1d:1e:84:f4:cc:91:b0:14:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Apr  3 18:26:42 2024 GMT
            Not After : Apr  2 18:31:42 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:af:9e:8f:57:fd:52:22:1f:e0:7c:5c:89:76:
                    51:bd:76:d6:17:4b:12:a9:80:7b:5f:0a:e8:08:5b:
                    bb:38:7b:22:87:88:b0:2f:a8:f5:75:bd:5d:f2:55:
                    e5:31:6e:38:77:e6:09:1c:00:e2:51:5d:88:e6:b7:
                    0b:b8:82:24:0c:2e:10:76:fb:3f:0c:41:0f:96:07:
                    d5:83:20:cd:79:8a:4f:5c:07:81:32:c5:fa:6a:e5:
                    3e:63:54:e2:14:91:98:b8:6e:ce:4e:a4:3d:5b:c9:
                    2f:3d:f0:f7:19:fa:ac:15:06:51:76:d0:25:54:be:
                    81:fd:d0:be:ad:26:10:b5:3b:f9:3b:65:33:2c:47:
                    7e:fc:23:2b:4f:03:e6:f7:b8:44:47:d5:d4:8d:da:
                    74:88:ef:2e:c0:12:1a:9f:18:70:32:eb:49:b4:02:
                    6f:10:9d:38:24:4e:f8:3d:97:d2:81:3a:2d:88:53:
                    60:18:98:07:86:58:c9:09:5d:49:52:02:c9:c6:93:
                    43:10:4f:b5:51:93:af:a4:48:72:4f:c0:bc:68:c0:
                    7a:21:55:15:b5:49:9f:63:6e:8f:2d:ee:d1:cf:19:
                    48:7f:ac:16:15:0d:0f:f5:6e:f5:c4:a3:97:4b:47:
                    66:d1:b7:db:6a:5f:30:8b:12:34:a2:ca:51:d9:66:
                    ab:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:12:CC:9B:05:73:FC:94:FB:5E:71:5D:B9:ED:7F:4B:D0:58:62:6D
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e35312e3137362e302f32302d3230203d3e203238333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         58:65:26:cb:9f:d5:8e:0f:6e:0f:ed:77:38:40:34:a2:68:3f:
         9c:c9:e6:27:7a:28:84:94:e8:96:82:37:8b:4b:f3:45:7f:82:
         9a:cf:34:67:62:7e:b3:ff:e8:32:c9:bf:a6:d8:e5:d9:02:30:
         57:3e:e0:e6:5d:6a:a9:b1:4c:7e:55:72:1b:b5:e0:12:6e:d8:
         f9:b7:c1:c8:60:14:f0:71:cd:89:31:22:ec:fd:57:7e:d1:ea:
         eb:4f:aa:a6:7c:b1:34:d0:b0:70:e3:69:4a:c7:ab:b1:7a:00:
         25:32:9e:c5:dc:31:d4:80:a6:8e:e4:64:ba:b7:d9:08:24:c4:
         1c:ea:1f:83:a8:a7:f2:2b:1d:0b:cc:3e:a7:49:a5:f9:c8:f0:
         5c:49:ea:f6:5d:b9:28:de:88:eb:e0:57:6e:18:dc:17:e4:a1:
         4d:a6:7a:5c:05:e5:18:77:02:e6:04:3a:64:d9:5c:47:c4:cf:
         1e:09:ba:91:d2:f8:0a:65:93:0a:e3:93:e5:07:d7:55:02:3d:
         4a:b1:33:f0:f0:6a:1b:6a:46:50:df:80:2c:26:7e:6a:b5:f5:
         73:de:17:3c:2f:26:2d:ca:3b:c1:9e:66:df:a3:74:e5:05:8b:
         c1:e0:26:6c:de:c4:a6:4d:51:9e:0a:b0:35:4a:68:d7:d4:e1:
         29:44:b6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:13 2024 by rpki-client on console-ams.rpki-client.org