Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e362e302e302f31362d3234203d3e203238353733.roa
File:                     3230312e362e302e302f31362d3234203d3e203238353733.roa (raw, json)
Hash identifier:          OKqZpoVnicRZXh1B7Nj1i1P5xFves8Er+0yWnSfNOT0=
Subject key identifier:   F0:64:40:CE:E6:67:FA:6E:D4:00:F8:9E:ED:48:1C:2B:90:C2:F7:43
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       6B1E2CE0EE79F983CFA00F4BE24FAB9167A40733
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e362e302e302f31362d3234203d3e203238353733.roa
Signing time:             Wed 03 Apr 2024 18:31:48 +0000
ROA not before:           Wed 03 Apr 2024 18:26:48 +0000
ROA not after:            Wed 02 Apr 2025 18:31:48 +0000
asID:                     28573
IP address blocks:        201.6.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:1e:2c:e0:ee:79:f9:83:cf:a0:0f:4b:e2:4f:ab:91:67:a4:07:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Apr  3 18:26:48 2024 GMT
            Not After : Apr  2 18:31:48 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3b:5d:c6:ca:2a:dc:79:af:d3:cb:cc:18:f9:
                    ed:5f:f6:14:ff:03:44:ff:21:cb:29:04:ba:dc:6b:
                    70:c8:c9:6a:a0:2d:50:1b:76:85:ce:d8:c5:dc:bd:
                    9a:81:bd:e3:05:f0:9c:57:6f:4b:23:e1:21:13:06:
                    86:84:b2:ec:be:a7:d4:91:ea:8d:20:84:6a:b0:5a:
                    ca:d2:8a:0d:10:19:ae:a2:6c:36:21:00:5d:72:09:
                    40:bf:1d:36:76:58:6a:68:93:e2:f7:0d:c8:41:cc:
                    72:24:68:95:47:fe:93:8d:2f:4e:10:ac:d0:36:ae:
                    c2:78:06:56:f7:54:fe:68:ea:8d:e8:34:8f:bb:b0:
                    48:ef:ed:95:79:7f:fc:6d:34:16:26:a7:df:f9:0c:
                    d4:d4:49:b8:c8:43:56:8a:b2:24:27:22:56:4c:c1:
                    99:b7:22:d1:cb:16:4b:a6:e6:b5:33:ee:3a:e8:ff:
                    87:2c:1f:e3:5b:84:83:d9:af:a3:78:c0:5e:dd:5a:
                    b4:cd:ad:b1:d3:c7:7b:e9:7a:52:95:61:bf:60:3e:
                    c7:33:6a:88:7f:c4:c9:79:9a:54:f2:25:99:ea:dd:
                    e1:75:83:02:d8:92:bf:53:cd:81:0c:b6:fc:de:6e:
                    50:17:cc:7a:2f:bf:08:0c:ee:70:92:09:52:fd:2e:
                    68:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:64:40:CE:E6:67:FA:6E:D4:00:F8:9E:ED:48:1C:2B:90:C2:F7:43
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e362e302e302f31362d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.6.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9d:9b:e5:29:54:a6:9f:44:fd:04:77:a9:53:90:29:61:be:ee:
         c3:b9:7d:cc:e8:e6:6d:5e:ae:d0:7e:20:1e:b2:1e:58:8b:0f:
         10:7e:4f:79:ea:9b:ef:7b:8a:06:68:12:db:7d:2c:7f:ff:a4:
         e6:32:5f:ff:e6:7d:e5:bd:21:dc:71:85:01:31:04:8c:6a:51:
         c5:f1:e2:92:dc:0f:ef:30:cf:22:fb:e8:4c:a4:56:2b:c1:b3:
         3a:17:d2:03:04:ca:0f:5a:0a:b9:23:b8:85:c7:9f:4b:5d:89:
         ba:54:d2:83:ba:1c:d7:13:d3:63:3c:10:1b:69:7b:d4:13:a0:
         f5:40:55:a3:cd:83:7f:3a:89:6f:34:48:6c:59:3a:31:81:a7:
         55:95:1a:41:b3:7f:58:7c:77:62:84:c2:90:e2:e7:61:40:43:
         05:37:ec:e1:58:b7:de:82:b6:cd:e1:be:ea:32:8f:88:38:2e:
         e3:07:1f:93:be:8d:79:80:61:9c:28:c2:fc:bb:d4:fa:6c:64:
         40:db:36:a2:93:a3:95:f0:d6:46:ca:7c:28:c2:29:47:df:3c:
         97:b0:bb:f4:e1:e6:7b:e6:9f:d3:90:02:9f:23:af:2e:ea:5c:
         de:ad:db:2f:aa:46:4b:45:93:51:1e:5a:8e:2d:b5:c9:22:56:
         79:ba:9a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:14 2024 by rpki-client on console-fra.rpki-client.org