Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230302e3138392e38302e302f32302d3234203d3e203238353733.roa
File:                     3230302e3138392e38302e302f32302d3234203d3e203238353733.roa (raw, json)
Hash identifier:          k8rYMsA/X/uOgWj6e1nFyknr1u2/2wwomGHfzyx4Yo4=
Subject key identifier:   85:73:7E:8A:A5:9B:41:57:DF:2D:34:5C:79:7E:91:B8:03:1B:1C:25
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       26CAD60C53B39CB1A4BF7BF94155680B7BAFA2A2
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230302e3138392e38302e302f32302d3234203d3e203238353733.roa
Signing time:             Wed 05 Mar 2025 19:00:12 +0000
ROA not before:           Wed 05 Mar 2025 18:55:12 +0000
ROA not after:            Wed 04 Mar 2026 19:00:12 +0000
asID:                     28573
IP address blocks:        200.189.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 13:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:ca:d6:0c:53:b3:9c:b1:a4:bf:7b:f9:41:55:68:0b:7b:af:a2:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Mar  5 18:55:12 2025 GMT
            Not After : Mar  4 19:00:12 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:83:d9:0d:b3:b2:0e:33:62:de:84:bc:9b:f7:
                    f7:e9:c5:83:20:ae:a8:95:ef:d4:28:6d:4d:35:79:
                    e4:6d:11:1a:bb:ed:a9:c2:82:a3:90:3f:a7:dc:9e:
                    44:3a:a1:f2:3c:9f:ed:4e:36:f8:b5:d6:d4:95:14:
                    96:9c:63:46:48:d8:13:1b:a0:9d:b5:bd:f8:68:2e:
                    f2:f8:c0:d4:37:2f:16:36:0d:5f:1e:93:c5:86:6a:
                    cb:fb:b6:95:95:be:11:55:c5:5f:e1:be:87:4f:41:
                    58:5a:30:22:9f:41:a8:2e:52:9c:76:b1:9f:88:f2:
                    e9:83:53:b1:b2:14:5e:8c:bc:4f:05:41:5d:3c:92:
                    1c:f4:a5:94:02:b8:98:15:ed:88:62:52:1a:d1:2a:
                    f1:04:eb:b2:13:55:b9:6d:a0:7f:7e:a4:08:96:e8:
                    e5:97:ee:ed:68:69:48:ac:f5:fa:99:80:1d:cb:6e:
                    05:25:41:26:21:25:26:1c:bc:75:b4:15:87:c3:24:
                    f0:d0:8e:e1:77:d8:2d:a4:58:cc:b8:16:d9:2e:e9:
                    f4:c9:dd:1c:f6:58:bd:f0:f7:b9:95:35:a5:2a:e4:
                    2f:e2:74:97:c3:0a:09:ee:f1:9a:e3:11:83:64:c0:
                    ff:7e:e3:a8:ab:c2:fa:4f:61:89:a5:87:43:18:96:
                    6c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:73:7E:8A:A5:9B:41:57:DF:2D:34:5C:79:7E:91:B8:03:1B:1C:25
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230302e3138392e38302e302f32302d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.189.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         82:74:b1:56:34:a9:2c:0f:27:59:38:e4:c8:fb:96:43:96:60:
         e0:55:1f:ce:fd:5e:5b:f4:9b:65:d4:59:20:04:7e:04:1d:66:
         09:18:7e:69:b3:76:8c:2e:fc:f2:4b:b8:bc:7d:09:5a:17:ec:
         5c:58:03:b8:48:08:77:26:6f:97:7d:cf:32:1c:3d:fe:8d:8c:
         66:2c:93:a6:8d:67:9f:fd:33:1c:77:e0:5d:8f:17:ec:ea:0c:
         18:96:a0:24:6d:c9:b2:65:6b:1d:23:dc:ea:41:46:df:3d:93:
         33:37:80:e1:f5:a6:c1:62:de:84:82:cc:8c:0f:b1:8a:b2:14:
         5f:83:bc:10:97:4a:68:e1:9f:a2:3b:c9:7e:d3:57:97:ce:46:
         c1:f9:be:25:34:b3:b2:8a:7f:42:09:b7:b3:1f:c7:aa:9e:d2:
         89:b3:3c:39:ab:f9:32:75:4e:d3:fe:16:ae:d7:bd:0d:6b:1f:
         78:a6:58:04:cd:d1:e1:72:49:00:10:82:96:ee:01:48:72:92:
         e7:f2:90:25:74:01:6e:9a:11:5d:b4:dc:0a:e7:4b:40:9f:7b:
         be:ea:f8:d0:39:15:21:26:30:ea:87:d3:60:67:16:15:a1:6e:
         40:93:dc:59:08:ab:69:bc:0e:4f:4a:bb:ed:ad:4a:32:45:a9:
         81:ae:49:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:52:22 2025 by rpki-client