Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e35322e302e302f31352d3234203d3e203238353733.roa
File:                     3230312e35322e302e302f31352d3234203d3e203238353733.roa (raw, json)
Hash identifier:          V97TcP3051DjQAAg+Vbd+Wi+q0ZUx6W2JorEoUTiNUw=
Subject key identifier:   79:E5:0E:DF:DD:BD:04:D4:5F:3D:D9:D9:79:49:51:28:C7:81:C9:61
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       603616685019D479D1336D6814A4D30BA39B52D8
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e35322e302e302f31352d3234203d3e203238353733.roa
Signing time:             Wed 03 Apr 2024 18:31:43 +0000
ROA not before:           Wed 03 Apr 2024 18:26:43 +0000
ROA not after:            Wed 02 Apr 2025 18:31:43 +0000
asID:                     28573
IP address blocks:        201.52.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:36:16:68:50:19:d4:79:d1:33:6d:68:14:a4:d3:0b:a3:9b:52:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Apr  3 18:26:43 2024 GMT
            Not After : Apr  2 18:31:43 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f3:a8:bf:15:56:96:2e:8f:26:df:b6:ca:cb:
                    8b:4a:23:e7:b6:0a:de:78:17:31:b2:28:1f:2f:47:
                    a9:9c:77:e0:91:d6:ee:ab:e0:a3:e0:a4:9f:3f:aa:
                    27:74:15:cd:ca:6b:a9:4c:e0:09:c1:26:db:3e:81:
                    c1:a8:81:c5:97:16:a7:c9:9e:3e:90:d1:61:17:2d:
                    ad:a3:93:28:7c:c4:7b:9a:3e:20:8a:98:3f:a5:a0:
                    7a:03:88:52:2d:4e:09:07:0c:b4:cc:73:ef:5f:12:
                    6b:e0:1e:e9:ae:e2:05:06:8b:11:81:0e:49:d8:54:
                    92:41:2b:77:dd:d4:2f:90:5b:2a:8f:ad:7d:d0:65:
                    8d:21:1e:7b:12:31:7d:da:4e:fc:af:09:1e:48:16:
                    aa:ed:9d:04:00:0d:56:fa:b4:9c:32:89:a8:14:43:
                    de:d6:5d:9f:b2:18:4a:03:79:99:93:19:85:8b:42:
                    95:6c:63:ce:ba:41:09:d4:e2:c4:04:12:bf:b5:61:
                    84:a0:43:7a:12:53:89:1b:74:16:b0:d8:15:e4:88:
                    68:73:6e:e8:33:1e:5a:a9:34:32:0b:cf:6d:0c:26:
                    1c:1b:7e:d0:94:f9:37:12:80:f1:88:a5:91:1c:5f:
                    d0:24:a6:36:7c:80:54:7c:fe:06:ca:6c:f3:61:30:
                    8d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E5:0E:DF:DD:BD:04:D4:5F:3D:D9:D9:79:49:51:28:C7:81:C9:61
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e35322e302e302f31352d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.52.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         62:ae:5a:7b:a7:38:01:3a:0f:81:0f:39:ad:a7:7a:d5:4f:74:
         cc:91:f3:65:7b:3b:f4:8f:22:25:3d:72:57:13:54:b0:e1:b7:
         8b:b9:7e:eb:bf:2d:ba:cf:51:08:d0:b8:2e:db:36:a7:09:8c:
         76:da:b8:69:40:fe:7d:dc:7b:dc:f1:0c:9c:1b:38:65:45:e8:
         31:86:ed:d0:b1:bd:31:c0:2e:ba:e0:cd:83:2a:c4:ea:09:16:
         9a:98:02:0b:9d:b9:01:72:c7:63:44:19:d1:e6:e9:6e:d3:be:
         95:0a:3f:59:88:53:4c:67:d0:85:bf:04:f9:a2:12:3d:e5:6c:
         67:1e:eb:e3:d0:97:93:df:72:87:bf:12:8c:1e:8d:16:f1:b3:
         a0:9c:ba:a0:2b:e6:0b:ef:dd:9b:b9:a2:15:a3:60:4a:85:ce:
         16:8f:df:33:e8:64:48:2a:5f:8e:d3:12:2c:23:3b:86:07:cd:
         25:4e:c6:16:eb:55:ac:4b:0f:40:42:a9:a2:7a:27:fc:28:85:
         92:9b:55:a6:03:0d:68:5c:18:15:ed:d4:f8:8f:bd:2f:09:f6:
         f3:76:42:79:5d:23:6f:fd:2a:03:c9:fd:e1:14:d0:ca:39:ac:
         16:54:4a:7a:3a:d1:82:b2:9e:a7:17:68:ab:9c:67:3f:c9:46:
         24:c9:77:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:14 2024 by rpki-client on console-fra.rpki-client.org