Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e35352e3232342e302f32302d3234203d3e203238353733.roa
File:                     3230312e35352e3232342e302f32302d3234203d3e203238353733.roa (raw, json)
Hash identifier:          sUoMLI5yvRjT1SUcVmdGMJehpvCsNNbUHM1yJJwJVsQ=
Subject key identifier:   8B:EC:EE:2A:CF:BD:55:CC:3E:79:F4:3A:A4:B3:AD:1D:3A:24:3C:76
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       1EA7211E5F56BE33ED385E0180967AC248F82F18
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e35352e3232342e302f32302d3234203d3e203238353733.roa
Signing time:             Wed 03 Apr 2024 18:31:43 +0000
ROA not before:           Wed 03 Apr 2024 18:26:43 +0000
ROA not after:            Wed 02 Apr 2025 18:31:43 +0000
asID:                     28573
IP address blocks:        201.55.224.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:a7:21:1e:5f:56:be:33:ed:38:5e:01:80:96:7a:c2:48:f8:2f:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Apr  3 18:26:43 2024 GMT
            Not After : Apr  2 18:31:43 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:55:53:97:c8:e6:dd:b9:5f:65:2a:24:30:92:
                    fc:e6:ab:ac:42:fb:45:19:b8:54:c7:52:e5:87:67:
                    e1:35:3b:f7:fd:0e:7c:b8:c1:f6:1a:51:56:e5:0f:
                    e5:69:29:7f:82:f4:9a:bd:5f:17:33:e0:b0:53:be:
                    e0:89:70:09:6a:7e:17:94:46:a8:12:f1:8f:d0:5e:
                    68:15:f1:ec:07:85:24:e1:90:62:6d:f5:43:f2:b2:
                    93:85:a4:91:7d:b2:79:29:00:8d:dc:00:3a:5d:ac:
                    0c:4a:64:db:01:08:33:ce:22:61:7f:13:79:2b:8a:
                    03:df:42:a1:a5:e2:32:5e:cf:21:0e:9a:1f:fb:c8:
                    c4:2a:74:87:ce:41:9e:0d:a3:52:b7:c5:a3:db:4e:
                    e1:f4:a3:0f:54:c2:ad:28:5a:f5:5c:61:5f:23:5d:
                    98:6a:07:5d:f2:73:14:80:e5:dd:08:bb:5f:0d:3e:
                    58:34:6e:5f:13:ba:0b:12:ec:09:c4:e0:43:3e:51:
                    ca:4e:c7:00:50:55:16:cf:d6:b2:2e:08:81:a6:77:
                    8e:a3:ad:f0:59:ed:78:0d:19:89:c8:90:21:d6:f2:
                    4b:bf:0c:3b:3e:12:88:eb:f6:5b:e4:97:35:6b:0b:
                    44:fe:e3:00:fa:6c:87:89:e9:f7:0a:50:fb:ee:b9:
                    47:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:EC:EE:2A:CF:BD:55:CC:3E:79:F4:3A:A4:B3:AD:1D:3A:24:3C:76
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e35352e3232342e302f32302d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.55.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         98:6d:dd:f7:69:19:a9:d1:79:f7:c7:29:d6:e4:56:a2:50:ea:
         ba:3d:80:4c:f9:1f:f4:69:f6:81:d6:0f:75:c0:8e:75:a0:1a:
         14:97:5a:e8:07:55:70:21:e9:23:a5:1f:33:e2:ea:a4:7e:fe:
         72:df:e2:b1:f8:d5:06:2c:64:ba:bc:d0:76:c3:ba:28:8a:10:
         4a:15:4c:38:5d:83:ac:99:21:36:c4:3f:cd:d1:a0:d0:75:ec:
         e5:ff:67:f6:ef:e7:47:48:91:be:2c:80:fc:8b:96:ed:b1:30:
         47:92:8c:7d:7a:c1:e2:92:b6:b0:f0:14:c8:8a:33:47:49:ef:
         f7:da:8e:06:73:13:58:30:6d:9f:cf:fd:c0:f4:e1:4e:48:ff:
         c1:88:9a:01:08:8a:a1:40:53:ac:0b:52:ee:37:bc:e8:d3:d7:
         03:69:8f:70:40:68:70:ca:7f:e5:68:d8:78:25:c5:6e:c5:1c:
         bd:9c:31:eb:94:81:0e:1b:84:64:05:d8:6d:51:c0:97:44:c2:
         34:3c:52:5b:ec:a2:ad:14:b1:ef:fb:bb:4d:bc:22:10:c7:51:
         c7:42:3c:d7:bb:7d:40:f8:07:a0:c2:b2:fc:7d:1a:43:e8:41:
         57:23:fc:a8:be:96:eb:24:5d:d8:dd:2d:bd:8b:f8:a8:c3:81:
         19:76:72:38
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUHqchHl9WvjPtOF4BgJZ6wkj4LxgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZBMDJCNkY4RjREQkJEOThBQzlBOUQwQzc3QjA1MjFE
NUE2QkQwQTAeFw0yNDA0MDMxODI2NDNaFw0yNTA0MDIxODMxNDNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0U1NTUzOTdDOEU2RERCOTVG
NjUyQTI0MzA5MkZDRTZBQkFDNDJGQjQ1MTlCODU0Qzc1MkU1ODc2N0UxMzUzQkY3
RkQwRTdDQjhDMUY2MUE1MTU2RTUwRkU1NjkyOTdGODJGNDlBQkQ1RjE3MzNFMEIw
NTNCRUUwODk3MDA5NkE3RTE3OTQ0NkE4MTJGMThGRDA1RTY4MTVGMUVDMDc4NTI0
RTE5MDYyNkRGNTQzRjJCMjkzODVBNDkxN0RCMjc5MjkwMDhEREMwMDNBNURBQzBD
NEE2NERCMDEwODMzQ0UyMjYxN0YxMzc5MkI4QTAzREY0MkExQTVFMjMyNUVDRjIx
MEU5QTFGRkJDOEM0MkE3NDg3Q0U0MTlFMERBMzUyQjdDNUEzREI0RUUxRjRBMzBG
NTRDMkFEMjg1QUY1NUM2MTVGMjM1RDk4NkEwNzVERjI3MzE0ODBFNUREMDhCQjVG
MEQzRTU4MzQ2RTVGMTNCQTBCMTJFQzA5QzRFMDQzM0U1MUNBNEVDNzAwNTA1NTE2
Q0ZENkIyMkUwODgxQTY3NzhFQTNBREYwNTlFRDc4MEQxOTg5Qzg5MDIxRDZGMjRC
QkYwQzNCM0UxMjg4RUJGNjVCRTQ5NzM1NkIwQjQ0RkVFMzAwRkE2Qzg3ODlFOUY3
MEE1MEZCRUVCOTQ3NDUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzlVTl8jm3blfZSokMJL85qusQvtFGbhUx1Llh2fhNTv3/Q58uMH2
GlFW5Q/laSl/gvSavV8XM+CwU77giXAJan4XlEaoEvGP0F5oFfHsB4Uk4ZBibfVD
8rKThaSRfbJ5KQCN3AA6XawMSmTbAQgzziJhfxN5K4oD30KhpeIyXs8hDpof+8jE
KnSHzkGeDaNSt8Wj207h9KMPVMKtKFr1XGFfI12Yagdd8nMUgOXdCLtfDT5YNG5f
E7oLEuwJxOBDPlHKTscAUFUWz9ayLgiBpneOo63wWe14DRmJyJAh1vJLvww7PhKI
6/Zb5Jc1awtE/uMA+myHien3ClD77rlHRQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FIvs7irPvVXMPnn0OqSzrR06JDx2MB8GA1UdIwQYMBaAFF+gK2+PTbvZismp0Md7
BSHVpr0KMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZRQXF5WXlHTFd4eFJi
SDVLY3BoejUxNzlkd2NCcThoWU5jMVFzaWFrTUwyLzEvNUZBMDJCNkY4RjREQkJE
OThBQzlBOUQwQzc3QjA1MjFENUE2QkQwQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS81RkEwMkI2RjhGNERCQkQ5OEFDOUE5RDBDNzdCMDUyMUQ1QTZC
RDBBLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GUUFxeVl5R0xXeHhSYkg1S2Nw
aHo1MTc5ZHdjQnE4aFlOYzFRc2lha01MMi8xLzMyMzAzMTJlMzUzNTJlMzIzMjM0
MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzODM1MzczMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMk3
4DANBgkqhkiG9w0BAQsFAAOCAQEAmG3d92kZqdF598cp1uRWolDquj2ATPkf9Gn2
gdYPdcCOdaAaFJda6AdVcCHpI6UfM+LqpH7+ct/isfjVBixkurzQdsO6KIoQShVM
OF2DrJkhNsQ/zdGg0HXs5f9n9u/nR0iRviyA/IuW7bEwR5KMfXrB4pK2sPAUyIoz
R0nv99qOBnMTWDBtn8/9wPThTkj/wYiaAQiKoUBTrAtS7je86NPXA2mPcEBocMp/
5WjYeCXFbsUcvZwx65SBDhuEZAXYbVHAl0TCNDxSW+yirRSx7/u7TbwiEMdRx0I8
17t9QPgHoMKy/H0aQ+hBVyP8qL6W6yRd2N0tvYv4qMOBGXZyOA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:14 2024 by rpki-client on console-ams.rpki-client.org