Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e36322e39362e302f31392d3234203d3e203238353733.roa
File:                     3230312e36322e39362e302f31392d3234203d3e203238353733.roa (raw, json)
Hash identifier:          gVpsAoA/AxgyRjRZ0cIDPA2RAUqBZYAftLZqmUCA/QU=
Subject key identifier:   AF:4B:1C:12:9B:88:85:F2:D6:98:17:5F:54:7B:9F:A3:CE:22:D0:D9
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       2C25954A3EE7ACEAFF2CBF8A38511B1D747F88E2
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e36322e39362e302f31392d3234203d3e203238353733.roa
Signing time:             Wed 03 Apr 2024 18:31:42 +0000
ROA not before:           Wed 03 Apr 2024 18:26:42 +0000
ROA not after:            Wed 02 Apr 2025 18:31:42 +0000
asID:                     28573
IP address blocks:        201.62.96.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:25:95:4a:3e:e7:ac:ea:ff:2c:bf:8a:38:51:1b:1d:74:7f:88:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Apr  3 18:26:42 2024 GMT
            Not After : Apr  2 18:31:42 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:34:8e:5b:9d:fc:dd:b2:5f:64:ad:53:95:34:
                    49:be:2f:82:69:29:56:71:d2:95:c3:9b:12:37:c8:
                    bb:75:01:2f:e4:80:20:5e:6b:5f:76:a9:42:b5:02:
                    e8:25:51:70:11:be:d5:04:d0:bc:10:bc:07:1e:a4:
                    a5:d5:86:56:1c:36:2c:cb:bf:ac:a5:be:4f:1f:3c:
                    d4:cb:9a:35:32:93:5b:ad:55:a1:8a:83:d1:06:58:
                    11:c3:10:f2:ff:0d:27:a8:d2:c8:05:42:14:7d:f7:
                    ee:c4:8b:ae:2e:44:f3:7e:5a:42:9b:71:fb:b6:bf:
                    6e:d3:ad:27:11:d2:09:24:fb:de:2a:43:61:ef:a3:
                    b5:5a:8a:e2:39:7d:70:b9:a0:d9:3d:4d:d6:38:99:
                    4a:bf:8c:72:75:a0:28:41:ec:4d:9a:76:79:46:91:
                    11:b1:54:02:22:20:e5:a2:fa:2a:08:47:95:93:6c:
                    b3:30:7c:6d:4c:c2:3d:1e:cc:82:85:4c:61:65:20:
                    70:e9:61:d3:07:86:92:c0:d2:91:47:5f:10:e2:6a:
                    8a:93:3f:4e:4e:fb:25:d9:9d:fa:18:8a:74:e9:87:
                    59:10:b9:d7:71:66:4b:57:81:ce:65:7e:2a:60:ee:
                    c5:e6:32:15:63:df:d4:a6:d9:8e:fa:e3:c0:78:7b:
                    dd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:4B:1C:12:9B:88:85:F2:D6:98:17:5F:54:7B:9F:A3:CE:22:D0:D9
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e36322e39362e302f31392d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.62.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5e:b6:9c:75:12:74:60:01:07:c9:72:36:15:03:dc:74:cf:85:
         04:27:e9:6b:e2:9b:59:94:e2:08:0d:92:a2:ab:79:b5:2d:7a:
         ad:ae:d6:c0:5e:a7:3f:c4:23:8f:cc:8b:dc:95:1b:eb:d0:22:
         f5:69:56:04:38:e0:c4:96:4d:7b:7c:11:d5:d4:2f:37:12:42:
         f8:3e:da:e7:d1:58:30:22:3c:13:d0:6c:65:73:e3:11:e7:68:
         3c:ad:16:b3:32:47:de:eb:e0:8c:0f:bf:fe:a3:74:77:89:66:
         63:03:ae:1c:6e:14:c5:7b:8b:a7:63:cf:95:3b:b3:2f:21:3f:
         c1:ed:db:2a:da:94:78:bb:11:68:d3:32:df:4a:0c:0c:ee:de:
         c4:b9:99:fe:6a:80:19:76:99:03:b9:47:19:3b:58:76:e2:47:
         e5:6b:85:87:f2:73:d8:10:58:00:29:63:c8:c5:47:e4:ad:45:
         d5:98:5e:b7:25:9e:cb:d0:93:1b:d9:b9:51:34:a5:58:77:ab:
         53:37:4d:c5:5d:37:c1:40:bf:2e:8d:61:ba:76:7a:36:b9:e0:
         af:3d:94:a1:61:30:93:24:70:e7:0b:02:cd:0a:06:98:d2:80:
         d9:ed:78:bf:3a:d6:9a:27:dc:be:1a:a5:20:d5:f5:c0:e5:9c:
         23:72:90:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:14 2024 by rpki-client on console-fra.rpki-client.org