Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230302e3136302e39362e302f32302d3234203d3e203238353733.roa
File:                     3230302e3136302e39362e302f32302d3234203d3e203238353733.roa (raw, json)
Hash identifier:          ZVXIKC6qKUXsSK2wmaNfLc+62nBIApfFf/61hr7hWmM=
Subject key identifier:   67:9D:D7:75:12:96:0F:0A:D0:AB:08:14:26:01:2A:2F:9D:CD:A1:5F
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       65C59EA6A06B52C5B54ED06FC1029C7F704EDB1C
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230302e3136302e39362e302f32302d3234203d3e203238353733.roa
Signing time:             Wed 03 Apr 2024 18:31:46 +0000
ROA not before:           Wed 03 Apr 2024 18:26:46 +0000
ROA not after:            Wed 02 Apr 2025 18:31:46 +0000
asID:                     28573
IP address blocks:        200.160.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:c5:9e:a6:a0:6b:52:c5:b5:4e:d0:6f:c1:02:9c:7f:70:4e:db:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Apr  3 18:26:46 2024 GMT
            Not After : Apr  2 18:31:46 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:7c:dd:23:c3:06:bb:de:9e:a4:57:af:55:31:
                    c9:0d:62:4b:c2:cc:ea:d6:51:cd:7f:dd:56:48:e7:
                    a2:3c:1d:98:4d:92:88:97:dd:59:da:e1:e0:e5:b0:
                    fe:b5:1c:ff:0e:c4:d7:69:84:3d:5f:2a:ff:9c:d2:
                    52:79:7e:8e:9f:86:88:c9:f3:54:8e:85:f3:e4:f4:
                    1d:83:92:3b:50:02:ce:77:20:33:7c:5c:c9:59:4d:
                    b0:68:3b:de:dc:b6:84:67:33:88:0b:91:21:e1:38:
                    99:53:1b:d0:a7:b9:4f:51:29:95:1a:57:ba:b5:b5:
                    76:29:6f:ca:aa:f2:4f:49:be:18:2e:c4:58:43:24:
                    6c:80:8b:3c:b6:ac:03:69:8b:28:68:1e:e3:a9:52:
                    e3:d5:38:74:ad:39:5a:e1:5b:4b:c5:63:13:d0:80:
                    49:49:19:0a:69:f2:4a:f9:30:05:66:ef:7f:e2:08:
                    34:46:56:51:fc:53:5d:a3:30:74:81:50:f6:ed:c0:
                    15:b3:17:9b:ae:26:2c:bb:e7:b0:52:3b:ca:16:2a:
                    07:fc:0f:0f:e0:a1:5d:34:fe:d1:50:58:82:d6:ab:
                    6b:3d:0b:51:81:99:39:a1:12:fd:52:b5:f7:3d:49:
                    19:8c:7c:2d:7e:65:e9:14:ca:03:72:3a:14:1e:7c:
                    70:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:9D:D7:75:12:96:0F:0A:D0:AB:08:14:26:01:2A:2F:9D:CD:A1:5F
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230302e3136302e39362e302f32302d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.160.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         15:50:12:9c:9e:41:d4:ea:09:12:88:67:48:b1:6a:43:9a:4d:
         d6:33:26:ff:fc:dc:55:1e:08:f7:4f:01:9d:b3:fe:e9:62:20:
         42:fd:68:dc:a5:81:b5:4d:33:78:29:21:20:7c:f7:bf:1e:d6:
         bb:25:2d:08:13:7e:f5:17:62:be:47:2b:55:37:6f:0c:c2:77:
         0f:fb:01:dd:31:13:e4:b5:65:f2:13:ea:19:a8:f1:57:d3:26:
         bd:90:3f:66:cf:c6:46:8e:40:d5:47:cc:63:57:60:a0:28:e0:
         02:17:0d:01:4f:68:40:6d:31:8e:22:55:67:06:10:6f:b1:85:
         5a:24:09:cb:09:82:52:4d:cb:ed:fd:33:81:7a:1d:19:d0:bc:
         2c:38:00:16:9f:46:27:11:ce:b1:7e:92:6a:13:2d:ff:e5:03:
         2a:a5:bb:fa:25:f9:fe:5a:20:15:f3:c8:e7:c5:93:b5:18:2b:
         73:2d:5b:fe:e5:0c:ad:e4:91:98:c2:eb:d7:db:c0:71:f2:6a:
         ff:6f:46:99:82:53:35:08:89:f6:68:f9:f9:40:4a:5b:05:70:
         51:4f:f5:55:e3:87:d6:10:24:c9:55:ca:6d:08:02:d9:6f:e9:
         06:b7:14:69:54:3d:d7:ea:d2:d9:e6:e6:17:37:ed:33:3c:38:
         69:a1:e3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:14 2024 by rpki-client on console-ams.rpki-client.org