Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230302e3137302e302e302f31382d3234203d3e203238353733.roa
File:                     3230302e3137302e302e302f31382d3234203d3e203238353733.roa (raw, json)
Hash identifier:          nZkOV5i9b8E6N7xaapWeM994icWls+42mgHQ5dwsTpA=
Subject key identifier:   45:1A:EF:41:8E:8F:AA:4B:19:3B:20:93:CC:62:9B:9E:63:AE:0A:06
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       213860FE045AD7EE872D9CF186E1C7902AB8C93D
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230302e3137302e302e302f31382d3234203d3e203238353733.roa
Signing time:             Wed 05 Mar 2025 19:00:09 +0000
ROA not before:           Wed 05 Mar 2025 18:55:09 +0000
ROA not after:            Wed 04 Mar 2026 19:00:09 +0000
asID:                     28573
IP address blocks:        200.170.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 13:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:38:60:fe:04:5a:d7:ee:87:2d:9c:f1:86:e1:c7:90:2a:b8:c9:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Mar  5 18:55:09 2025 GMT
            Not After : Mar  4 19:00:09 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:aa:70:fe:4f:1b:60:e4:32:e9:de:d1:63:fa:
                    49:7c:9b:9b:36:7d:08:b7:bf:d1:fb:b2:ce:39:18:
                    79:5d:62:cf:dc:16:85:13:a2:95:d6:6f:f3:1f:5b:
                    06:10:41:8c:49:c4:8c:1c:1b:e0:83:74:e0:5a:1f:
                    70:6d:6a:44:4b:99:2b:05:15:d9:f2:1f:f7:97:73:
                    3e:3a:a8:1c:5f:b4:bc:f7:f4:c5:de:78:05:6a:66:
                    96:a8:27:a2:91:26:d3:70:3c:50:6b:45:4f:cd:62:
                    a1:7d:8a:ac:b4:83:ba:03:7b:a7:ac:96:1e:55:5b:
                    6b:49:6d:39:f7:be:50:29:02:bf:a6:af:bc:eb:c3:
                    05:b6:e3:e6:34:cd:e0:e4:21:84:ad:eb:25:1f:02:
                    c4:a7:13:80:01:ab:ab:fb:b1:1c:83:48:9d:63:05:
                    da:77:40:dd:21:9f:bf:99:34:33:97:4d:31:b7:fe:
                    69:38:07:52:0f:b7:b5:61:4f:9f:c9:63:6d:2e:9a:
                    72:ac:60:6e:29:45:1b:55:4b:d4:1d:7d:d3:fa:e2:
                    59:c4:80:43:f0:b3:a6:e8:51:c1:8f:42:a0:ce:e7:
                    55:eb:11:59:7c:9f:18:30:34:c1:af:7a:d5:17:3d:
                    c2:c1:43:fe:c5:74:40:7c:a7:c1:8a:a0:73:d0:39:
                    82:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:1A:EF:41:8E:8F:AA:4B:19:3B:20:93:CC:62:9B:9E:63:AE:0A:06
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230302e3137302e302e302f31382d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.170.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7c:58:5b:1a:76:58:cd:70:3a:97:c4:ce:73:27:62:67:2d:11:
         cc:7f:58:24:d1:9e:e8:ab:28:8b:0e:59:d6:7f:72:e4:eb:32:
         16:ff:7f:ac:dd:f3:f2:a6:9a:de:ab:09:63:54:b8:39:cd:fb:
         d5:f7:5c:ca:6f:27:4c:c9:f0:a6:88:87:38:ec:39:01:e8:95:
         5b:0a:4f:22:94:2e:61:c5:8c:6f:72:a7:53:ed:62:77:91:d4:
         38:b0:9d:87:54:5a:ba:c7:d7:6c:ac:91:35:62:bc:48:29:df:
         62:91:b1:45:e4:d4:d1:97:63:1b:64:ca:05:9e:db:c5:40:ee:
         bc:e7:eb:dc:6b:e2:99:bb:0d:02:a1:bd:6b:d9:26:98:9a:e9:
         53:5e:bf:e3:e5:75:4e:7c:f0:4e:54:b5:45:80:60:70:8d:ff:
         42:4a:c6:dc:95:c8:b1:99:e6:b3:44:18:b9:6f:76:b6:05:93:
         04:4e:d2:51:eb:11:5d:ee:e4:16:86:82:d5:6c:fa:51:87:2c:
         37:93:25:86:1d:86:d7:80:2e:88:cd:b7:31:e2:10:3d:ed:b7:
         52:f1:21:43:49:f7:f9:e2:97:e6:91:74:19:85:1b:53:cc:3e:
         9e:80:22:7b:2c:6c:e8:34:a5:cf:0d:c7:61:1c:59:49:cb:f0:
         0d:f6:04:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:35:21 2025 by rpki-client