Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e32312e302e302f31362d3234203d3e203238353733.roa
File:                     3230312e32312e302e302f31362d3234203d3e203238353733.roa (raw, json)
Hash identifier:          ijUlZFbRbuFPuLgQHUhrY81mMNcCT1x9gHGw/pl7mZE=
Subject key identifier:   B2:FD:7D:0B:0B:11:95:CE:67:E1:4A:9A:0C:D0:8C:5F:2E:39:B6:97
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       681F67A2B1522CF841352EE3910B98BEB325AD54
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e32312e302e302f31362d3234203d3e203238353733.roa
Signing time:             Wed 03 Apr 2024 18:31:46 +0000
ROA not before:           Wed 03 Apr 2024 18:26:46 +0000
ROA not after:            Wed 02 Apr 2025 18:31:46 +0000
asID:                     28573
IP address blocks:        201.21.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:1f:67:a2:b1:52:2c:f8:41:35:2e:e3:91:0b:98:be:b3:25:ad:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Apr  3 18:26:46 2024 GMT
            Not After : Apr  2 18:31:46 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3f:c5:29:d4:57:82:cd:8e:c6:e4:9a:14:25:
                    56:11:b3:e8:37:eb:88:16:8a:81:ab:a5:c9:77:e3:
                    e9:3f:95:ab:3b:89:27:70:3c:f8:28:60:f3:e4:57:
                    06:9e:0a:18:7a:e4:1f:1a:79:e9:4c:15:14:69:2f:
                    59:5e:5c:03:d1:de:53:5a:04:32:6c:27:d1:0d:30:
                    b3:28:b0:a3:b0:b3:a2:af:f4:d4:ff:89:f1:ec:90:
                    fe:80:70:3b:d3:87:c6:75:42:03:a2:6e:2f:ef:46:
                    84:5b:8e:e7:5f:ba:80:b1:8e:18:fc:ad:b1:f7:2b:
                    9e:1f:cc:7f:c7:c3:4d:d6:ac:8b:2a:64:d6:b3:04:
                    a9:d3:2a:73:5a:74:ed:03:de:d4:d4:f4:98:3c:41:
                    ce:e4:34:d4:21:9f:bd:fd:73:36:ce:9c:30:8e:fe:
                    16:f4:b0:d2:5b:8a:dd:d5:9c:b9:11:88:cb:b0:07:
                    27:8b:68:20:43:7d:ff:00:1f:61:2f:cc:41:8a:59:
                    89:7d:df:b6:a7:04:40:ea:da:66:c3:e5:1d:cd:e2:
                    7b:e9:af:c4:c7:95:d1:97:6c:b2:9c:e1:46:1d:b9:
                    1f:39:3c:d5:8b:63:a8:c8:e3:5e:4b:fe:bb:71:3c:
                    b6:93:bb:6c:c6:e7:97:4e:6b:9d:57:fc:b8:ae:cf:
                    42:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:FD:7D:0B:0B:11:95:CE:67:E1:4A:9A:0C:D0:8C:5F:2E:39:B6:97
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e32312e302e302f31362d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.21.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         32:3a:3d:8d:33:85:36:eb:45:13:dc:53:3c:66:fc:61:d2:43:
         b0:af:29:0b:ca:e9:a5:78:e1:84:26:7b:01:48:2a:d8:6e:0b:
         22:79:9e:92:86:67:67:fa:90:39:0a:3d:d4:d1:cf:60:09:84:
         e2:c7:06:cc:8c:ee:de:26:13:5b:b5:a0:33:74:4a:82:4c:0b:
         da:f0:12:a6:f1:a9:76:69:42:90:d1:82:bd:92:02:5d:d8:79:
         cc:72:58:a2:4e:ce:04:c9:03:6c:8e:86:cf:08:d0:a0:b0:8d:
         41:04:bf:f0:26:b1:76:d6:25:3b:32:23:6e:3c:d2:99:55:b5:
         c7:45:48:8b:d4:43:fa:5c:22:45:1f:4f:79:da:69:3e:5c:69:
         e3:35:ff:a0:af:5d:7b:18:85:ab:66:b8:40:3a:96:4b:e6:dc:
         f9:ac:5c:4d:54:44:b5:5d:3c:88:a0:b1:61:57:a9:27:4b:5d:
         91:42:cc:8f:bd:1e:9d:35:81:ef:77:7d:38:99:73:77:bd:07:
         86:30:e3:dc:5f:cd:3d:ba:61:20:79:9c:67:0e:00:c2:30:96:
         b5:63:61:e7:1a:6a:4b:09:65:4d:b3:f1:d8:b0:61:c3:5b:46:
         65:07:85:91:99:88:83:4e:b9:ed:f3:a0:97:aa:84:5f:7a:9e:
         ae:74:22:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:14 2024 by rpki-client on console-fra.rpki-client.org