Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e36302e302e302f31342d3234203d3e203238353733.roa
File:                     3138392e36302e302e302f31342d3234203d3e203238353733.roa (raw, json)
Hash identifier:          CZAtE/1FlPRELsoRqffLEh2RTnfKgr1nzzr4t8URFAE=
Subject key identifier:   04:BA:F0:C9:2F:C6:CB:52:DC:81:D5:3E:AF:0F:9C:92:5F:B8:46:F4
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       391DBE4AB794F200278E1830BED8A0C6AA701555
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e36302e302e302f31342d3234203d3e203238353733.roa
Signing time:             Wed 03 Apr 2024 18:31:44 +0000
ROA not before:           Wed 03 Apr 2024 18:26:44 +0000
ROA not after:            Wed 02 Apr 2025 18:31:44 +0000
asID:                     28573
IP address blocks:        189.60.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:1d:be:4a:b7:94:f2:00:27:8e:18:30:be:d8:a0:c6:aa:70:15:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Apr  3 18:26:44 2024 GMT
            Not After : Apr  2 18:31:44 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d5:85:6f:f8:ef:d5:ce:66:60:2f:a9:cf:e9:
                    6e:cf:89:58:e7:5d:83:9d:44:da:b8:f3:14:2b:65:
                    7f:ac:79:e6:0b:c8:69:72:18:d3:d3:4e:a3:66:35:
                    91:de:df:d6:ba:1d:83:d1:11:09:2b:35:7d:49:39:
                    ef:9d:56:0e:6e:83:ca:0f:95:6a:45:49:74:b8:a7:
                    10:a0:57:d8:33:a9:ad:89:58:35:e2:b1:6e:79:2f:
                    c6:6c:67:f1:27:ca:7e:23:3b:12:9e:6e:18:0f:e5:
                    7f:91:46:bd:b5:a7:1f:41:d1:e6:1e:e8:7d:f8:88:
                    86:4d:e4:8f:74:af:7b:70:45:47:34:b3:2e:8b:15:
                    9c:22:d7:c3:db:eb:54:33:12:2f:a5:3e:46:46:f2:
                    cd:3a:27:19:3b:46:cf:a3:d2:63:44:e4:e5:cb:11:
                    ed:52:d9:de:0d:a4:83:3e:b7:83:e3:83:3b:77:d7:
                    eb:23:77:df:ab:0b:0d:01:f6:0e:c1:a7:5c:b0:f7:
                    ef:07:8d:eb:94:82:ce:ee:b8:97:f6:54:72:86:90:
                    d6:5f:82:8c:e9:f6:18:38:61:66:6b:09:d0:78:80:
                    80:a7:1d:e0:c5:90:d0:67:8e:7b:fe:3d:5f:61:65:
                    b9:67:e7:16:84:52:54:a3:18:c5:db:24:93:65:14:
                    d5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:BA:F0:C9:2F:C6:CB:52:DC:81:D5:3E:AF:0F:9C:92:5F:B8:46:F4
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e36302e302e302f31342d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.60.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         7b:90:fb:cc:66:93:4b:ec:9f:6b:38:38:54:15:0d:74:df:09:
         68:06:cf:ce:b7:3c:8e:11:f2:96:b6:02:0f:a1:74:76:0e:ef:
         a1:2e:82:1f:80:c8:45:be:67:a8:b7:4b:c1:80:fa:a3:81:9a:
         66:79:67:86:f8:9f:ae:f8:60:a6:f1:38:cc:f2:70:d0:43:3c:
         95:40:3c:2c:9a:11:11:7a:02:92:85:f3:68:8b:98:e4:f4:f3:
         7d:8c:5f:7f:1f:3a:d8:4e:96:40:11:09:56:a6:31:bb:2c:54:
         17:2a:c2:47:d1:cb:8f:ac:7d:c4:9d:cc:cd:1a:00:66:fe:35:
         3d:ef:8c:f3:51:d6:ec:2b:59:29:82:62:c0:48:74:ec:18:b6:
         24:6a:ce:46:66:7d:75:41:4d:91:d2:e6:9b:0e:eb:ab:b0:ec:
         8f:81:36:59:da:64:21:e3:8a:87:bd:b6:19:da:77:24:72:e7:
         b2:f9:88:8f:b5:00:3f:fb:22:8a:fd:aa:28:c4:0c:a2:98:63:
         8f:1b:21:86:3f:c1:00:dd:4d:17:5f:db:90:ba:33:8e:08:23:
         95:dc:6d:56:70:0d:24:0e:9c:92:e9:45:dc:35:84:f4:ac:34:
         23:a1:15:ba:5c:0e:6c:af:6f:db:c3:2d:9a:c4:6c:a4:40:e3:
         14:10:8b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:14 2024 by rpki-client on console-fra.rpki-client.org