Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230302e3138392e38302e302f32302d3234203d3e203238353733.roa
File:                     3230302e3138392e38302e302f32302d3234203d3e203238353733.roa (raw, json)
Hash identifier:          c0xESElULCQjDo5ukAIfaZU+N0E6WoWx/fNBirwukcQ=
Subject key identifier:   96:15:53:48:18:D0:3D:84:9B:70:86:D8:7C:56:AD:65:08:C8:78:5D
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       3D5FCD495529FDD55EE3C231749B946A8B27C68C
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230302e3138392e38302e302f32302d3234203d3e203238353733.roa
Signing time:             Wed 03 Apr 2024 18:31:45 +0000
ROA not before:           Wed 03 Apr 2024 18:26:45 +0000
ROA not after:            Wed 02 Apr 2025 18:31:45 +0000
asID:                     28573
IP address blocks:        200.189.80.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:5f:cd:49:55:29:fd:d5:5e:e3:c2:31:74:9b:94:6a:8b:27:c6:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Apr  3 18:26:45 2024 GMT
            Not After : Apr  2 18:31:45 2025 GMT
        Subject: CN=3082010A0282010100E50E64BB69741AB2D5A1811FC22096EF466BCFFE8A1DA7AC166DC9F8AAEA9E4A4024C7DEEA0B95EC2B0D344E39E0F76C43DD0E6094373FEA5B07D39F3FCC68C0C0453F121EADD31CD4EBDBBF3183A7A19BB48B1A2CBFFD95F20654FC6395B177C93E3F9F7FD2A624E1A5C4827FCFF5CECEFCA9A8EAD2438CB5BFBCED6024F5450A9D4C5F0FF4405F2D68376EE505C098D90575228B87FEA1F855DEBDAA7CE15678B3425A5C61176A9FBD2676836FEC367B747D77D2C7A41E8912ECAF6732EBF330F3D456672617333F84CE657B0F2FA1EA6E7C17F623A089C8153C16229CE17F12970C207B6A3307311426F6D96DF7ED1CA8E876B103FAE414EC38E13AFA761F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:0e:64:bb:69:74:1a:b2:d5:a1:81:1f:c2:20:
                    96:ef:46:6b:cf:fe:8a:1d:a7:ac:16:6d:c9:f8:aa:
                    ea:9e:4a:40:24:c7:de:ea:0b:95:ec:2b:0d:34:4e:
                    39:e0:f7:6c:43:dd:0e:60:94:37:3f:ea:5b:07:d3:
                    9f:3f:cc:68:c0:c0:45:3f:12:1e:ad:d3:1c:d4:eb:
                    db:bf:31:83:a7:a1:9b:b4:8b:1a:2c:bf:fd:95:f2:
                    06:54:fc:63:95:b1:77:c9:3e:3f:9f:7f:d2:a6:24:
                    e1:a5:c4:82:7f:cf:f5:ce:ce:fc:a9:a8:ea:d2:43:
                    8c:b5:bf:bc:ed:60:24:f5:45:0a:9d:4c:5f:0f:f4:
                    40:5f:2d:68:37:6e:e5:05:c0:98:d9:05:75:22:8b:
                    87:fe:a1:f8:55:de:bd:aa:7c:e1:56:78:b3:42:5a:
                    5c:61:17:6a:9f:bd:26:76:83:6f:ec:36:7b:74:7d:
                    77:d2:c7:a4:1e:89:12:ec:af:67:32:eb:f3:30:f3:
                    d4:56:67:26:17:33:3f:84:ce:65:7b:0f:2f:a1:ea:
                    6e:7c:17:f6:23:a0:89:c8:15:3c:16:22:9c:e1:7f:
                    12:97:0c:20:7b:6a:33:07:31:14:26:f6:d9:6d:f7:
                    ed:1c:a8:e8:76:b1:03:fa:e4:14:ec:38:e1:3a:fa:
                    76:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:15:53:48:18:D0:3D:84:9B:70:86:D8:7C:56:AD:65:08:C8:78:5D
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230302e3138392e38302e302f32302d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.189.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         57:20:4d:c3:13:0d:75:e6:7c:11:ed:84:01:27:d9:27:c3:1f:
         26:be:3c:69:1e:4e:89:ee:ed:2a:ce:83:75:77:65:6e:9c:cb:
         e2:45:99:b6:85:a6:42:df:62:bd:4b:9c:99:80:09:90:29:d3:
         2d:be:5a:77:29:ed:74:7b:72:77:f5:d7:5c:d0:4e:04:af:02:
         d6:07:e8:ea:94:c9:d3:54:61:4a:ae:d5:ce:9a:4b:b4:f7:52:
         7a:2a:09:61:3a:ca:0c:28:76:07:0e:c7:31:09:b6:05:a4:84:
         3c:98:15:b0:d6:6a:24:4c:0f:7d:e0:fa:a9:b5:f9:ff:70:9e:
         fc:90:fc:29:2b:f8:44:88:e9:c9:e9:d5:43:65:19:c0:f4:57:
         bb:f8:f3:f4:74:24:d0:b5:cf:fd:90:0e:b1:67:2b:64:8d:cf:
         ed:8f:f1:f3:6c:cf:fb:fd:ad:9c:eb:a2:78:76:71:9e:65:65:
         31:72:b1:d3:f6:f2:74:ce:60:00:8c:89:d0:ed:9f:90:b4:79:
         23:1a:35:94:6d:50:98:5a:57:fe:e0:ca:27:76:c2:2b:d5:9a:
         da:5f:b9:45:1c:cb:0e:d7:50:65:8d:e1:fa:14:07:42:12:4f:
         3f:eb:9e:bc:b4:1e:b2:67:c9:e8:02:cc:3a:95:79:2e:37:ff:
         5b:75:73:8a
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUPV/NSVUp/dVe48IxdJuUaosnxowwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZBMDJCNkY4RjREQkJEOThBQzlBOUQwQzc3QjA1MjFE
NUE2QkQwQTAeFw0yNDA0MDMxODI2NDVaFw0yNTA0MDIxODMxNDVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTUwRTY0QkI2OTc0MUFCMkQ1
QTE4MTFGQzIyMDk2RUY0NjZCQ0ZGRThBMURBN0FDMTY2REM5RjhBQUVBOUU0QTQw
MjRDN0RFRUEwQjk1RUMyQjBEMzQ0RTM5RTBGNzZDNDNERDBFNjA5NDM3M0ZFQTVC
MDdEMzlGM0ZDQzY4QzBDMDQ1M0YxMjFFQUREMzFDRDRFQkRCQkYzMTgzQTdBMTlC
QjQ4QjFBMkNCRkZEOTVGMjA2NTRGQzYzOTVCMTc3QzkzRTNGOUY3RkQyQTYyNEUx
QTVDNDgyN0ZDRkY1Q0VDRUZDQTlBOEVBRDI0MzhDQjVCRkJDRUQ2MDI0RjU0NTBB
OUQ0QzVGMEZGNDQwNUYyRDY4Mzc2RUU1MDVDMDk4RDkwNTc1MjI4Qjg3RkVBMUY4
NTVERUJEQUE3Q0UxNTY3OEIzNDI1QTVDNjExNzZBOUZCRDI2NzY4MzZGRUMzNjdC
NzQ3RDc3RDJDN0E0MUU4OTEyRUNBRjY3MzJFQkYzMzBGM0Q0NTY2NzI2MTczMzNG
ODRDRTY1N0IwRjJGQTFFQTZFN0MxN0Y2MjNBMDg5QzgxNTNDMTYyMjlDRTE3RjEy
OTcwQzIwN0I2QTMzMDczMTE0MjZGNkQ5NkRGN0VEMUNBOEU4NzZCMTAzRkFFNDE0
RUMzOEUxM0FGQTc2MUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA5Q5ku2l0GrLVoYEfwiCW70Zrz/6KHaesFm3J+KrqnkpAJMfe6guV
7CsNNE454PdsQ90OYJQ3P+pbB9OfP8xowMBFPxIerdMc1OvbvzGDp6GbtIsaLL/9
lfIGVPxjlbF3yT4/n3/SpiThpcSCf8/1zs78qajq0kOMtb+87WAk9UUKnUxfD/RA
Xy1oN27lBcCY2QV1IouH/qH4Vd69qnzhVnizQlpcYRdqn70mdoNv7DZ7dH130sek
HokS7K9nMuvzMPPUVmcmFzM/hM5lew8voepufBf2I6CJyBU8FiKc4X8Slwwge2oz
BzEUJvbZbfftHKjodrED+uQU7DjhOvp2HwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FJYVU0gY0D2Em3CG2HxWrWUIyHhdMB8GA1UdIwQYMBaAFF+gK2+PTbvZismp0Md7
BSHVpr0KMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZRQXF5WXlHTFd4eFJi
SDVLY3BoejUxNzlkd2NCcThoWU5jMVFzaWFrTUwyLzEvNUZBMDJCNkY4RjREQkJE
OThBQzlBOUQwQzc3QjA1MjFENUE2QkQwQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS81RkEwMkI2RjhGNERCQkQ5OEFDOUE5RDBDNzdCMDUyMUQ1QTZC
RDBBLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GUUFxeVl5R0xXeHhSYkg1S2Nw
aHo1MTc5ZHdjQnE4aFlOYzFRc2lha01MMi8xLzMyMzAzMDJlMzEzODM5MmUzODMw
MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzODM1MzczMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMi9
UDANBgkqhkiG9w0BAQsFAAOCAQEAVyBNwxMNdeZ8Ee2EASfZJ8MfJr48aR5Oie7t
Ks6DdXdlbpzL4kWZtoWmQt9ivUucmYAJkCnTLb5adyntdHtyd/XXXNBOBK8C1gfo
6pTJ01RhSq7VzppLtPdSeioJYTrKDCh2Bw7HMQm2BaSEPJgVsNZqJEwPfeD6qbX5
/3Ce/JD8KSv4RIjpyenVQ2UZwPRXu/jz9HQk0LXP/ZAOsWcrZI3P7Y/x82zP+/2t
nOuieHZxnmVlMXKx0/bydM5gAIyJ0O2fkLR5Ixo1lG1QmFpX/uDKJ3bCK9Wa2l+5
RRzLDtdQZY3h+hQHQhJPP+uevLQesmfJ6ALMOpV5Ljf/W3Vzig==
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:14 2024 by rpki-client on console-ams.rpki-client.org