Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e33372e302e302f31362d3234203d3e203238353733.roa
File:                     3230312e33372e302e302f31362d3234203d3e203238353733.roa (raw, json)
Hash identifier:          IWJ9TS1xsilv8Gxm6Wg9hUOPiw2cz7qQ7U84hQnd4gU=
Subject key identifier:   CF:5A:3F:68:7A:4F:94:AC:F6:22:F6:51:9D:D3:BD:9C:7D:C0:5F:25
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       4B86E469378A476DFB90343D5C37C14B9A4F29E1
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e33372e302e302f31362d3234203d3e203238353733.roa
Signing time:             Wed 05 Mar 2025 19:00:09 +0000
ROA not before:           Wed 05 Mar 2025 18:55:09 +0000
ROA not after:            Wed 04 Mar 2026 19:00:09 +0000
asID:                     28573
IP address blocks:        201.37.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 13:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:86:e4:69:37:8a:47:6d:fb:90:34:3d:5c:37:c1:4b:9a:4f:29:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Mar  5 18:55:09 2025 GMT
            Not After : Mar  4 19:00:09 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:51:7c:2d:5d:3b:ad:2b:e5:26:2e:89:3c:fe:
                    94:26:b4:22:7c:83:82:15:59:71:fe:af:fc:bd:6e:
                    87:73:1e:90:1c:a1:c1:5b:76:d8:f3:a3:ad:9a:6d:
                    b2:37:fb:69:10:c0:2a:1d:cd:0d:75:ad:63:a5:e2:
                    16:12:72:19:bf:85:3d:12:a0:5a:48:75:d2:00:c1:
                    ca:3e:5c:5c:b1:19:ff:e3:07:ba:3b:b4:5f:f2:ff:
                    99:36:da:19:55:7c:a0:7b:fd:b0:e6:e0:3c:8f:7e:
                    d3:31:5b:a2:56:5c:6f:d3:6e:df:47:31:b5:0c:de:
                    90:a0:36:48:f6:1f:eb:df:90:b9:03:90:4f:67:af:
                    6a:26:2e:9d:96:50:4f:a0:44:29:e0:85:34:6f:2b:
                    84:71:99:57:7c:87:32:d4:d3:4d:8e:61:87:07:ab:
                    05:2e:76:ee:c5:5b:4a:68:6b:98:46:92:cf:19:49:
                    94:a6:ea:28:78:1a:8f:e5:18:9b:ee:a2:fc:39:c7:
                    e1:cd:23:a1:cf:8a:96:a3:fe:8f:f9:71:b9:5d:21:
                    f4:91:7c:77:54:d7:ca:26:92:d2:82:cb:69:b0:f2:
                    78:1b:84:d5:b0:bb:a3:a2:27:88:b6:28:1e:a1:87:
                    f4:50:29:96:f2:7c:ad:a6:91:45:8c:04:bf:33:cd:
                    6a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:5A:3F:68:7A:4F:94:AC:F6:22:F6:51:9D:D3:BD:9C:7D:C0:5F:25
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e33372e302e302f31362d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.37.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b1:e3:3e:a8:ef:60:c0:8e:ee:9d:bb:98:bf:5e:67:6a:5b:40:
         99:6f:b0:d1:fc:f5:b6:f8:66:92:b3:ea:15:b2:31:e2:50:51:
         5b:fb:33:85:8d:75:3b:45:38:79:8e:f2:65:ae:b3:53:8f:6f:
         be:a3:47:33:8b:3c:f1:e2:3f:fe:f4:94:dc:cf:2d:2b:9d:a0:
         ce:fa:e9:0f:d8:8c:56:79:15:c6:34:55:df:07:7f:cd:f9:fc:
         7a:6f:17:24:c4:2e:41:62:a5:25:3e:31:7d:55:12:de:e8:92:
         55:64:ab:1e:dc:0d:5c:e0:e0:68:2e:2d:b6:1e:6c:ce:66:66:
         64:1e:52:f4:2d:a9:e2:0e:16:fb:29:6e:0c:e0:50:bd:08:c8:
         c5:f8:2a:ea:cc:1c:dd:5e:62:20:cd:60:d4:0a:f9:11:a4:fd:
         a1:5d:3d:c3:8e:85:a6:3f:35:53:6d:7f:7a:08:a0:79:eb:d3:
         d2:96:e5:e4:d4:d2:66:d9:14:10:64:76:ac:54:e0:97:30:9b:
         8c:43:9f:1f:60:09:33:b4:4b:13:00:7f:50:5e:8e:30:db:40:
         4b:44:1d:93:22:34:b3:3b:09:eb:57:ff:80:f1:9c:6d:07:e2:
         54:fe:62:0a:ec:71:33:2c:e2:1f:5a:a0:f7:ff:0d:d2:e4:13:
         6d:f3:42:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:28:07 2025 by rpki-client