Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e35342e302e302f31352d3234203d3e203238353733.roa
File:                     3138392e35342e302e302f31352d3234203d3e203238353733.roa (raw, json)
Hash identifier:          f3lpPGWD3M63JeX+BzP49b6BePPTeN32v8sMFCIZ1W4=
Subject key identifier:   53:74:2E:E1:3A:C2:EC:68:74:B3:4D:C1:86:70:6F:19:D7:2B:72:35
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       3C2CBA7186FC84BD3E6F246BD10C457131FC10F5
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e35342e302e302f31352d3234203d3e203238353733.roa
Signing time:             Wed 03 Apr 2024 18:31:45 +0000
ROA not before:           Wed 03 Apr 2024 18:26:45 +0000
ROA not after:            Wed 02 Apr 2025 18:31:45 +0000
asID:                     28573
IP address blocks:        189.54.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:2c:ba:71:86:fc:84:bd:3e:6f:24:6b:d1:0c:45:71:31:fc:10:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Apr  3 18:26:45 2024 GMT
            Not After : Apr  2 18:31:45 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:36:e2:aa:50:c3:90:2e:1c:a9:df:7c:0c:ca:
                    64:3b:11:d9:f0:29:68:bf:d5:82:21:51:95:07:75:
                    14:5a:e8:ca:1a:cc:29:82:34:b0:c3:1b:91:3b:a2:
                    15:93:e4:a8:2d:98:42:9b:7d:b0:5c:93:01:cd:12:
                    42:74:94:2b:12:ba:e8:2a:42:f9:21:e0:31:77:80:
                    ec:85:71:88:c1:5e:01:4f:5a:cf:2f:55:9b:b4:07:
                    c4:78:c5:cd:0a:24:34:e8:13:ec:e2:82:be:68:cf:
                    f8:e6:c7:7b:01:9f:88:57:a6:1c:2c:cb:bc:62:d1:
                    77:6b:c9:e2:a6:23:fc:50:d5:5d:ae:7c:ef:54:fb:
                    72:1d:7d:ba:22:00:ee:7c:df:3a:9b:12:17:09:69:
                    5e:8b:00:00:35:3c:7c:b7:9c:30:95:d0:d4:db:cd:
                    f3:3b:f3:7a:dc:11:cd:2b:d9:65:22:ac:9f:db:bd:
                    78:94:5f:1d:a6:89:50:81:af:e7:c8:76:b1:1b:65:
                    0f:6d:4b:35:e6:f3:35:2c:c6:c6:3d:ba:4f:5d:f6:
                    40:61:b1:c8:a9:9e:a9:69:d4:fa:89:15:32:d5:84:
                    36:69:e8:ce:72:2c:a7:bf:ef:79:d4:94:a8:23:ee:
                    76:50:75:84:b7:d0:e9:b4:9d:1d:af:99:c2:66:7f:
                    35:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:74:2E:E1:3A:C2:EC:68:74:B3:4D:C1:86:70:6F:19:D7:2B:72:35
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e35342e302e302f31352d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.54.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         7a:96:fc:97:2a:24:82:4a:fe:a7:62:5a:09:84:32:68:3f:b9:
         c3:db:8d:ca:a1:09:02:14:a0:10:a5:26:c3:f9:a1:0c:e9:7a:
         3f:cf:65:10:fe:4b:a1:cd:a5:fa:69:36:da:ef:37:83:da:c3:
         85:e3:48:af:89:3c:87:f3:6d:c8:0b:41:05:94:97:00:fe:f4:
         37:9c:ab:3f:0c:4e:2e:92:bf:be:f4:70:36:d7:f4:f4:24:33:
         be:b1:1f:b3:47:50:1b:f8:01:08:25:6d:fd:53:37:fc:4a:2f:
         3e:e4:0c:c6:2e:cd:7b:4e:d0:31:51:84:46:56:c1:30:f8:a0:
         9d:b0:d6:55:47:9d:15:7d:af:bc:6f:47:a9:39:40:2d:a8:07:
         0d:57:72:d3:47:2d:53:7e:56:c0:65:8b:7b:cc:83:1b:e4:d3:
         69:c2:eb:0c:cc:88:63:9f:e8:a9:f5:f2:3c:72:c4:f2:33:05:
         53:8c:9f:c3:20:d6:24:7b:5e:15:f9:a6:56:a9:c9:68:5c:17:
         f7:65:a2:d2:9f:fd:53:f5:52:6e:0c:69:8e:77:5a:34:9f:c0:
         3e:a5:89:66:88:de:bf:39:4d:f9:b7:bc:55:7d:84:25:da:6a:
         59:1b:7a:00:55:b4:8a:cb:bf:98:c6:22:d4:15:c9:1e:b9:3b:
         d2:30:c1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:14 2024 by rpki-client on console-fra.rpki-client.org