Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e37342e302e302f31352d3234203d3e203238353733.roa
File:                     3230312e37342e302e302f31352d3234203d3e203238353733.roa (raw, json)
Hash identifier:          ynU3iA1qXK/qaxoh31f7eNPC4sBUHfTWoC49Aop5E3k=
Subject key identifier:   DF:CA:ED:C6:60:88:B0:22:38:70:2B:B0:40:5C:85:D2:4B:D5:EC:9B
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       1FB17C3409F2D02376866F4C83A3933E440116D0
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e37342e302e302f31352d3234203d3e203238353733.roa
Signing time:             Wed 03 Apr 2024 18:31:47 +0000
ROA not before:           Wed 03 Apr 2024 18:26:47 +0000
ROA not after:            Wed 02 Apr 2025 18:31:47 +0000
asID:                     28573
IP address blocks:        201.74.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:b1:7c:34:09:f2:d0:23:76:86:6f:4c:83:a3:93:3e:44:01:16:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Apr  3 18:26:47 2024 GMT
            Not After : Apr  2 18:31:47 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:68:2a:7c:bc:8e:3f:c4:b4:d5:56:83:9a:0b:
                    4e:92:8e:6a:0c:d0:f4:0f:41:9d:55:d9:94:14:9d:
                    1a:1f:d4:06:56:ad:1e:31:bd:90:4c:3c:fc:6d:f5:
                    39:3e:12:ac:83:16:a1:1f:76:5d:32:9e:c5:be:92:
                    ad:4d:08:a3:eb:e8:d4:df:00:36:37:5f:94:81:c0:
                    80:87:f2:45:58:06:0f:28:6b:0c:c2:bb:40:55:50:
                    fc:e2:96:d4:f6:79:59:ce:ea:78:62:81:9c:d1:7d:
                    e0:11:cb:e7:0e:bf:6c:4d:0c:93:d5:6a:2f:2b:93:
                    96:39:6f:92:bc:87:9c:6e:2d:e6:57:35:8b:12:bc:
                    c6:f7:cb:78:b0:fc:af:3d:0a:06:1b:2a:78:64:f2:
                    a0:9d:cf:a4:a2:22:2f:c3:d0:ff:32:93:87:a5:d0:
                    d6:7a:b3:41:e4:b7:e9:4a:39:c3:c3:94:72:de:5c:
                    fb:92:1d:3f:72:43:ad:32:5d:e1:2f:d2:cb:02:ba:
                    fa:fe:ba:b5:29:d9:0e:c8:d6:3c:e6:9a:d4:2c:53:
                    a3:9d:70:bc:42:e5:20:bc:8b:fe:f2:27:39:f1:51:
                    1d:ca:b5:36:db:c9:9f:20:cd:21:6e:54:dc:b6:9e:
                    d5:2c:75:62:85:1e:59:af:6d:01:65:31:55:c7:90:
                    c2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:CA:ED:C6:60:88:B0:22:38:70:2B:B0:40:5C:85:D2:4B:D5:EC:9B
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e37342e302e302f31352d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.74.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         1b:11:a9:e0:5d:7b:ee:ad:75:14:6d:11:0c:d1:86:e6:27:15:
         3e:78:88:42:a5:1b:9c:ab:1f:4c:7c:21:75:5d:32:02:13:3b:
         38:d6:77:4e:38:a7:5e:65:4c:4e:8f:9f:97:cd:da:d5:df:e1:
         62:e7:1d:d5:f6:a4:7c:27:07:61:49:90:0d:ab:21:11:4f:33:
         16:3f:e9:85:77:51:4f:cf:5c:19:56:ae:ca:e4:25:79:23:c0:
         ce:db:d2:fe:25:c1:8a:2e:0d:d3:c7:63:5a:f4:25:08:84:bc:
         e7:ec:2c:68:59:a8:33:b6:54:4f:69:0f:66:fc:d5:6a:30:6d:
         06:d6:45:93:8d:e0:a0:af:b7:47:4e:55:6d:15:e1:2c:be:b7:
         89:94:ba:f1:c7:df:86:5b:a7:41:19:8b:9a:70:b0:05:aa:4c:
         1f:7e:da:c2:8e:34:08:ca:b3:9b:c3:55:56:f3:07:bd:8e:0f:
         dd:67:fd:68:1b:00:4d:c3:04:b0:4e:e2:a2:f5:b4:08:f3:c6:
         20:a8:ed:a9:f6:7e:e9:63:f5:f5:93:ab:c3:99:f1:5e:ab:c7:
         d2:79:5e:bd:62:0f:dc:29:b5:f2:50:2f:0a:7b:56:b6:ce:ef:
         a2:e8:cb:9a:5d:30:e0:1a:7c:ba:25:3e:6a:5c:20:33:ea:de:
         4a:39:5f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:14 2024 by rpki-client on console-ams.rpki-client.org