Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e37342e302e302f31352d3234203d3e203238353733.roa
File:                     3230312e37342e302e302f31352d3234203d3e203238353733.roa (raw, json)
Hash identifier:          3OVL0UFQDO7pZi673nlMWKMd+QaYY8udKvPTJFRBXcE=
Subject key identifier:   49:88:30:A3:CC:84:67:85:E4:E2:2C:95:00:61:FF:B4:6F:80:60:03
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       3533B0775A160507FB439A9EEF254D7D82186D92
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e37342e302e302f31352d3234203d3e203238353733.roa
Signing time:             Wed 05 Mar 2025 19:00:12 +0000
ROA not before:           Wed 05 Mar 2025 18:55:12 +0000
ROA not after:            Wed 04 Mar 2026 19:00:12 +0000
asID:                     28573
IP address blocks:        201.74.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 13:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:33:b0:77:5a:16:05:07:fb:43:9a:9e:ef:25:4d:7d:82:18:6d:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Mar  5 18:55:12 2025 GMT
            Not After : Mar  4 19:00:12 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fc:e0:10:11:a4:f3:ac:90:b3:ee:e7:75:81:
                    1b:0b:70:47:41:55:c0:20:5d:16:b8:89:ce:bb:73:
                    29:d7:cf:01:48:ba:64:b9:e2:46:7d:2e:b4:d2:8d:
                    1b:26:1d:78:6f:85:ce:d0:39:8e:a3:19:32:e1:f3:
                    32:fa:8c:9f:17:65:27:19:e7:73:c5:dd:3e:81:bb:
                    65:9f:f7:88:fe:38:2a:ac:ae:89:1b:51:04:c1:61:
                    43:62:de:55:c5:1b:63:a3:f6:0e:25:3c:05:77:09:
                    43:12:89:54:bc:ed:c3:69:5f:8b:ce:34:b3:a1:2a:
                    0e:65:bd:58:ff:f9:ad:86:34:6a:98:f4:f9:ca:17:
                    e5:6a:d6:3c:de:e8:3e:ff:17:37:26:01:93:c8:ef:
                    08:67:4f:8a:8e:73:bb:e6:c6:aa:dd:2d:78:2a:ec:
                    64:e2:ef:a5:fc:74:04:f4:16:fa:4d:40:81:66:31:
                    fd:3b:b4:e3:10:28:96:18:b3:25:2b:17:de:3b:2e:
                    85:2f:8e:6f:89:2a:d6:e0:72:b6:bb:56:c9:a1:54:
                    52:49:38:bf:7e:80:19:36:09:61:b5:fd:54:1e:29:
                    04:2e:a0:dc:38:de:88:8d:f4:6a:fd:92:cf:6c:f9:
                    f6:5a:de:c2:cb:f2:e8:b2:19:d0:ce:99:70:55:66:
                    7e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:88:30:A3:CC:84:67:85:E4:E2:2C:95:00:61:FF:B4:6F:80:60:03
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e37342e302e302f31352d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.74.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         0c:db:af:42:ea:f8:aa:46:a9:d2:ce:dd:8f:72:c5:a4:97:b5:
         4e:fe:22:a9:0c:15:18:22:a6:69:44:f2:2e:86:7e:3b:0b:22:
         04:d8:1f:2d:77:41:1c:ee:9b:2d:dd:ba:60:00:87:72:f8:60:
         d4:b9:8d:46:fd:85:83:85:33:26:d8:67:51:76:cd:7b:98:38:
         c8:6d:e4:16:da:27:d0:7b:c6:fd:42:84:c1:11:f9:33:6a:b7:
         02:fe:77:f0:24:e4:79:e5:6c:5a:be:f3:3a:8a:98:af:7d:62:
         8f:9c:ac:6c:f7:ce:35:c5:1e:a6:f8:1a:be:50:31:3a:da:bc:
         5e:b9:fa:b5:cd:ec:69:19:35:9f:bc:83:3f:be:bf:c9:b7:40:
         cf:34:b7:10:7a:5f:f3:95:a4:11:45:3e:cb:19:08:1b:5a:38:
         b5:35:6f:eb:57:a7:6b:bc:41:dc:fb:d4:fe:0b:2f:ea:0f:9c:
         ea:69:0c:fc:95:83:82:80:e2:8d:98:51:91:48:eb:70:9b:85:
         08:90:4e:02:d5:b3:db:cb:3d:64:d4:a9:bf:b4:15:07:09:aa:
         d0:52:d8:53:91:34:5d:2e:66:66:7f:77:5e:cc:e5:42:f0:1d:
         ef:e9:13:57:de:b3:ce:74:51:14:ba:c6:72:c6:59:ad:da:9a:
         4f:f4:99:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:32 2025 by rpki-client