Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e31372e302e302f31362d3234203d3e203238353733.roa
File:                     3230312e31372e302e302f31362d3234203d3e203238353733.roa (raw, json)
Hash identifier:          TU6xc/d32s8kSRvDwQ2d2uNY4I87vwzN5K5bMSOQFR8=
Subject key identifier:   A8:3C:A9:BD:3D:50:A6:66:A9:F5:A9:E7:61:0B:60:C9:00:AF:45:68
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       2CFFAEF311421921BCD275CFB272AAB9852E6B94
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e31372e302e302f31362d3234203d3e203238353733.roa
Signing time:             Wed 03 Apr 2024 18:31:46 +0000
ROA not before:           Wed 03 Apr 2024 18:26:46 +0000
ROA not after:            Wed 02 Apr 2025 18:31:46 +0000
asID:                     28573
IP address blocks:        201.17.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:ff:ae:f3:11:42:19:21:bc:d2:75:cf:b2:72:aa:b9:85:2e:6b:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Apr  3 18:26:46 2024 GMT
            Not After : Apr  2 18:31:46 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:61:84:70:d9:f3:a2:5b:92:ba:b4:1d:a1:ee:
                    c7:42:1c:a2:49:33:e1:8f:a2:36:1c:e3:a4:3c:75:
                    a9:5a:2b:d5:42:21:a9:15:c6:4c:4e:79:3d:42:7c:
                    fd:37:35:d6:1a:a1:76:4d:51:8f:ec:b3:ec:29:c5:
                    2e:bb:2e:a6:78:35:04:06:1c:80:09:29:e0:4a:01:
                    34:d1:87:e3:ae:df:78:47:9d:3b:ff:04:9c:4f:03:
                    c2:84:c2:05:1f:ba:5f:40:05:09:85:49:45:e7:88:
                    d9:db:a2:cb:5d:5d:59:af:e9:30:ad:ec:63:a3:47:
                    35:d6:51:46:2e:1c:a4:3c:b2:43:7d:b1:28:7f:56:
                    8a:a1:cc:15:91:0f:34:0e:d3:25:50:63:95:25:b9:
                    65:44:c5:34:14:f7:24:3c:f6:15:bb:1f:68:8f:e8:
                    a6:9f:56:e0:fa:b7:5c:35:6f:b5:f3:02:35:5e:0b:
                    09:6d:30:dd:ae:cf:52:30:85:6c:55:f8:6c:5d:2e:
                    d3:cd:3a:fe:d5:57:5f:f8:d7:d3:4c:13:7d:0d:1c:
                    a5:7a:1c:71:8a:8d:26:6c:29:27:dd:b7:1c:54:75:
                    07:c5:90:0c:b5:29:fc:ea:43:b6:d7:54:0a:a9:7f:
                    00:b8:45:2e:77:86:f7:30:8b:f5:ce:ed:ca:00:1f:
                    55:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:3C:A9:BD:3D:50:A6:66:A9:F5:A9:E7:61:0B:60:C9:00:AF:45:68
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e31372e302e302f31362d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.17.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         14:ee:60:94:f2:15:01:df:46:bb:c2:e1:ed:d9:93:2a:40:33:
         6c:cf:bc:19:24:9d:00:dc:25:1e:df:d9:5f:3b:69:bc:20:1e:
         7d:38:6b:f0:1a:17:c1:70:8f:67:e1:7d:4c:76:f9:7d:4e:28:
         cd:d0:1d:40:72:95:8b:55:b6:ce:e4:39:ea:70:7e:76:f4:0c:
         0f:0e:20:9b:d2:5c:c2:23:bd:60:6c:66:ce:6c:24:9e:f8:c1:
         d0:75:eb:2d:a7:04:f4:cd:91:99:ad:68:32:c5:1c:af:7b:ae:
         55:7a:59:81:a9:d5:a6:35:69:bc:9f:aa:95:44:fe:20:c3:1a:
         0b:c7:09:77:29:1f:6a:8d:14:1f:53:24:55:49:3a:a5:ce:49:
         4e:8d:fe:3c:40:0f:29:5b:29:93:0e:32:52:dd:ca:e8:e0:c1:
         ed:08:b7:f4:84:0f:2b:6f:4d:17:0a:12:3f:bf:90:ab:7e:fe:
         4e:0a:81:1f:b5:44:2b:4c:d6:44:a8:25:9d:d1:ba:ac:6a:e6:
         71:90:a6:74:b3:c3:07:2f:20:ab:c5:23:bd:26:c8:de:9d:fe:
         74:dd:dc:7d:48:9a:83:40:14:21:08:b4:a3:6d:d7:2f:a6:c1:
         49:47:9e:62:57:ed:de:fb:6b:4e:d2:a2:ff:78:b4:6a:de:ec:
         35:4b:2f:7e
-----BEGIN CERTIFICATE-----
MIIHPDCCBiSgAwIBAgIULP+u8xFCGSG80nXPsnKquYUua5QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZBMDJCNkY4RjREQkJEOThBQzlBOUQwQzc3QjA1MjFE
NUE2QkQwQTAeFw0yNDA0MDMxODI2NDZaFw0yNTA0MDIxODMxNDZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTQ2MTg0NzBEOUYzQTI1Qjky
QkFCNDFEQTFFRUM3NDIxQ0EyNDkzM0UxOEZBMjM2MUNFM0E0M0M3NUE5NUEyQkQ1
NDIyMUE5MTVDNjRDNEU3OTNENDI3Q0ZEMzczNUQ2MUFBMTc2NEQ1MThGRUNCM0VD
MjlDNTJFQkIyRUE2NzgzNTA0MDYxQzgwMDkyOUUwNEEwMTM0RDE4N0UzQUVERjc4
NDc5RDNCRkYwNDlDNEYwM0MyODRDMjA1MUZCQTVGNDAwNTA5ODU0OTQ1RTc4OEQ5
REJBMkNCNUQ1RDU5QUZFOTMwQURFQzYzQTM0NzM1RDY1MTQ2MkUxQ0E0M0NCMjQz
N0RCMTI4N0Y1NjhBQTFDQzE1OTEwRjM0MEVEMzI1NTA2Mzk1MjVCOTY1NDRDNTM0
MTRGNzI0M0NGNjE1QkIxRjY4OEZFOEE2OUY1NkUwRkFCNzVDMzU2RkI1RjMwMjM1
NUUwQjA5NkQzMEREQUVDRjUyMzA4NTZDNTVGODZDNUQyRUQzQ0QzQUZFRDU1NzVG
RjhEN0QzNEMxMzdEMEQxQ0E1N0ExQzcxOEE4RDI2NkMyOTI3RERCNzFDNTQ3NTA3
QzU5MDBDQjUyOUZDRUE0M0I2RDc1NDBBQTk3RjAwQjg0NTJFNzc4NkY3MzA4QkY1
Q0VFRENBMDAxRjU1RjUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA5GGEcNnzoluSurQdoe7HQhyiSTPhj6I2HOOkPHWpWivVQiGpFcZM
Tnk9Qnz9NzXWGqF2TVGP7LPsKcUuuy6meDUEBhyACSngSgE00Yfjrt94R507/wSc
TwPChMIFH7pfQAUJhUlF54jZ26LLXV1Zr+kwrexjo0c11lFGLhykPLJDfbEof1aK
ocwVkQ80DtMlUGOVJbllRMU0FPckPPYVux9oj+imn1bg+rdcNW+18wI1XgsJbTDd
rs9SMIVsVfhsXS7TzTr+1Vdf+NfTTBN9DRylehxxio0mbCkn3bccVHUHxZAMtSn8
6kO211QKqX8AuEUud4b3MIv1zu3KAB9V9QIDAQABo4ICSjCCAkYwHQYDVR0OBBYE
FKg8qb09UKZmqfWp52ELYMkAr0VoMB8GA1UdIwQYMBaAFF+gK2+PTbvZismp0Md7
BSHVpr0KMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZRQXF5WXlHTFd4eFJi
SDVLY3BoejUxNzlkd2NCcThoWU5jMVFzaWFrTUwyLzEvNUZBMDJCNkY4RjREQkJE
OThBQzlBOUQwQzc3QjA1MjFENUE2QkQwQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS81RkEwMkI2RjhGNERCQkQ5OEFDOUE5RDBDNzdCMDUyMUQ1QTZC
RDBBLmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GUUFxeVl5R0xXeHhSYkg1S2Nw
aHo1MTc5ZHdjQnE4aFlOYzFRc2lha01MMi8xLzMyMzAzMTJlMzEzNzJlMzAyZTMw
MmYzMTM2MmQzMjM0MjAzZDNlMjAzMjM4MzUzNzMzLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAyREwDQYJ
KoZIhvcNAQELBQADggEBABTuYJTyFQHfRrvC4e3ZkypAM2zPvBkknQDcJR7f2V87
abwgHn04a/AaF8Fwj2fhfUx2+X1OKM3QHUBylYtVts7kOepwfnb0DA8OIJvSXMIj
vWBsZs5sJJ74wdB16y2nBPTNkZmtaDLFHK97rlV6WYGp1aY1abyfqpVE/iDDGgvH
CXcpH2qNFB9TJFVJOqXOSU6N/jxADylbKZMOMlLdyujgwe0It/SEDytvTRcKEj+/
kKt+/k4KgR+1RCtM1kSoJZ3Ruqxq5nGQpnSzwwcvIKvFI70myN6d/nTd3H1ImoNA
FCEItKNt1y+mwUlHnmJX7d77a07Sov94tGre7DVLL34=
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:14 2024 by rpki-client on console-ams.rpki-client.org