Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230302e3231382e33322e302f31392d3234203d3e203238353733.roa
File:                     3230302e3231382e33322e302f31392d3234203d3e203238353733.roa (raw, json)
Hash identifier:          ZDWCAX0ibmOtrX9oLclUVZn1LxN5brOD8VcA2MnvXYE=
Subject key identifier:   6E:7F:23:91:ED:14:98:AE:AB:29:FD:C6:2B:53:07:4F:1C:02:A4:61
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       5E0557CFF4E9EA7F1058C7EA5BB1730B253B9092
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230302e3231382e33322e302f31392d3234203d3e203238353733.roa
Signing time:             Wed 03 Apr 2024 18:31:48 +0000
ROA not before:           Wed 03 Apr 2024 18:26:48 +0000
ROA not after:            Wed 02 Apr 2025 18:31:48 +0000
asID:                     28573
IP address blocks:        200.218.32.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:05:57:cf:f4:e9:ea:7f:10:58:c7:ea:5b:b1:73:0b:25:3b:90:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Apr  3 18:26:48 2024 GMT
            Not After : Apr  2 18:31:48 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:9f:05:6c:fb:20:d8:73:e0:5d:7d:3f:c2:85:
                    a0:52:27:aa:19:b5:41:79:04:cc:cb:ea:44:b2:c9:
                    48:3a:57:90:5b:fd:b7:18:5a:d7:d9:e2:8c:85:94:
                    75:44:f4:ea:43:dc:ca:07:b3:f8:6d:e1:35:45:c0:
                    a9:c7:6b:85:b0:e5:5e:d9:77:7e:3a:48:75:49:db:
                    cb:bd:cf:1e:74:4c:ee:29:45:5b:9f:0b:b8:33:5d:
                    e7:c9:7c:f6:a2:76:95:32:0e:b2:85:8a:ac:ff:a0:
                    d6:d6:7d:0b:64:8e:ff:96:01:d4:bd:b9:9e:3c:f3:
                    ca:72:27:ee:c2:f7:0d:b0:25:04:bf:96:0a:94:83:
                    c2:c3:c1:0a:64:6e:9d:78:e5:a1:86:06:cf:ed:8b:
                    0f:41:f7:77:19:46:e1:db:0e:b3:c2:0f:ec:cd:67:
                    92:0c:64:2e:e0:b0:dd:7e:4e:d8:87:06:c0:42:f6:
                    71:f6:bc:91:72:69:14:77:c7:21:27:d3:9b:5f:d3:
                    80:d6:f6:50:09:b8:e6:3a:c6:35:f7:f6:98:52:1d:
                    8f:c7:cb:22:8d:ce:cd:6c:13:18:0d:f9:ba:7f:53:
                    cc:95:cb:04:dd:38:3d:5b:3d:ee:c6:43:2f:ec:95:
                    0c:4b:a0:94:0e:b7:a4:70:ba:db:ae:8c:e2:ef:b6:
                    81:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:7F:23:91:ED:14:98:AE:AB:29:FD:C6:2B:53:07:4F:1C:02:A4:61
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230302e3231382e33322e302f31392d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         aa:a7:89:d2:a8:19:eb:83:c7:c4:e8:4c:6b:c4:65:40:cc:da:
         02:06:b5:c5:fd:15:1a:5e:e8:d9:0b:c5:cc:5c:22:f4:9c:f8:
         67:a1:a8:3b:1f:72:ba:00:6e:ce:b9:16:2e:58:64:08:99:63:
         98:47:db:9a:3c:b3:5e:3a:e6:83:9d:c3:ef:3e:2a:03:88:15:
         cd:be:a1:07:c5:82:d0:3b:b9:69:62:50:f5:e3:ff:1a:ef:0d:
         2c:25:c9:c7:c9:e6:5d:b5:d0:17:b1:a1:7e:79:dd:9e:ce:25:
         7a:05:e9:96:65:d9:cb:7d:75:f8:b1:bf:3c:cc:bd:bc:7a:28:
         85:7c:a5:49:f4:a7:c3:53:1c:fd:01:6e:5a:ee:a0:57:70:6e:
         08:57:52:9d:dc:5a:72:36:59:ad:23:5c:6c:14:cd:e0:da:b4:
         9e:2a:29:b5:e7:46:06:d7:14:bd:8c:22:2a:49:4d:15:b0:c4:
         50:ae:ac:28:f6:19:18:78:7b:86:c8:42:98:6f:f3:78:44:05:
         55:1a:a0:0b:07:79:8d:db:d3:ff:f5:a5:2b:96:75:02:62:28:
         fc:cd:54:03:96:93:09:35:9f:65:16:2b:3d:ad:48:f9:3b:cd:
         cb:09:88:9e:6a:a8:3b:24:2f:31:ee:76:cc:f2:f7:9c:95:87:
         9f:44:3f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:14 2024 by rpki-client on console-ams.rpki-client.org