Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e35322e302e302f31352d3234203d3e203238353733.roa
File:                     3230312e35322e302e302f31352d3234203d3e203238353733.roa (raw, json)
Hash identifier:          8sH5M6xDN7v3TcnbuKI7ze7EeTWBFYhmz2HCqyL/vwM=
Subject key identifier:   DC:15:E2:3E:F4:1A:A6:62:3C:40:8F:43:39:4F:98:02:60:39:1F:45
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       19FF0EA86C748816BE2DFE49EB2EC33999D1D6D6
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e35322e302e302f31352d3234203d3e203238353733.roa
Signing time:             Wed 05 Mar 2025 19:00:13 +0000
ROA not before:           Wed 05 Mar 2025 18:55:13 +0000
ROA not after:            Wed 04 Mar 2026 19:00:13 +0000
asID:                     28573
IP address blocks:        201.52.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 13:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:ff:0e:a8:6c:74:88:16:be:2d:fe:49:eb:2e:c3:39:99:d1:d6:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Mar  5 18:55:13 2025 GMT
            Not After : Mar  4 19:00:13 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c1:8c:be:a4:9d:68:46:fd:a3:c5:a2:61:45:
                    41:cd:b8:56:df:0f:e4:e6:26:47:8f:22:39:81:52:
                    fc:da:e6:f5:65:16:5a:77:37:72:e6:7a:c2:48:2e:
                    cf:77:91:27:0c:df:18:01:e0:30:29:63:09:c7:94:
                    77:c5:58:57:f6:fc:a9:8e:be:18:9b:12:98:f6:dd:
                    b4:93:f4:97:e1:eb:e0:17:0c:a3:67:62:0a:a3:6d:
                    6b:57:a0:27:30:ce:0a:89:ba:50:b4:d9:a9:32:d7:
                    7e:b1:d6:7a:3f:f8:67:e0:54:7b:19:86:8c:c7:b5:
                    40:83:4a:a6:a0:bf:84:40:7c:7f:0b:9d:49:d4:d1:
                    0d:9a:fd:06:89:05:4a:4e:b6:d9:cd:b0:13:40:ea:
                    00:79:2f:c7:e8:60:ff:82:fc:f1:00:e1:35:90:70:
                    65:e3:f5:2d:78:a9:9f:8b:15:08:10:bc:17:04:2e:
                    80:ab:74:4a:89:97:af:4a:8e:37:e6:63:56:42:f5:
                    a6:9e:81:04:74:26:17:41:c1:3c:38:01:7d:60:63:
                    0c:46:2e:91:b9:68:6f:42:42:9e:1d:e0:b1:cd:58:
                    11:1b:ad:8f:1f:da:98:ec:50:c5:39:51:ae:ec:20:
                    be:98:16:ac:c6:51:51:6e:5c:15:3a:2e:0b:fb:ca:
                    7f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:15:E2:3E:F4:1A:A6:62:3C:40:8F:43:39:4F:98:02:60:39:1F:45
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e35322e302e302f31352d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.52.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         14:56:fb:3e:a0:00:99:35:98:5c:eb:86:72:69:9c:43:ba:f4:
         e5:2c:fe:af:23:e5:7f:2e:fa:41:75:42:cf:9b:29:88:f5:6c:
         1b:0b:1d:61:bf:fc:cf:72:62:d7:66:29:46:84:54:43:c4:a7:
         5b:ab:08:6a:46:a8:88:fa:72:c2:a5:ea:fc:a0:ee:42:e0:a9:
         43:72:a0:22:19:ec:c9:87:cb:2e:12:a0:31:b5:4e:77:46:d1:
         c0:56:81:3f:1b:3f:87:d1:64:e3:88:c6:91:57:e6:cd:bd:79:
         47:d8:b8:a6:21:90:ca:2f:bb:aa:dc:80:14:2d:09:43:7b:64:
         99:66:4b:54:30:1e:f1:c5:0d:7a:2d:8b:3e:0c:9f:81:4c:dc:
         0a:7a:16:c4:05:2b:5c:6c:46:19:4c:75:22:2a:7c:4a:d6:e8:
         ce:8d:bc:05:73:32:d2:18:5a:df:7f:ad:3b:d1:e8:ec:18:6e:
         3a:e4:e6:9c:2c:b9:8f:59:f7:f1:11:88:93:15:70:ab:28:1d:
         7f:d9:9f:3a:b1:b9:84:8c:ff:15:e4:26:08:4a:d9:8d:47:60:
         4c:c7:54:59:64:1f:1b:2f:41:24:18:7f:80:37:60:1a:37:d9:
         1c:b7:fa:58:4b:41:fe:d3:f5:42:98:c9:b3:3d:56:ee:2c:93:
         30:e5:9f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:31:06 2025 by rpki-client