Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e37362e31362e302f32302d3234203d3e203238353733.roa
File:                     3230312e37362e31362e302f32302d3234203d3e203238353733.roa (raw, json)
Hash identifier:          uhKBndwRtckhDfYommIPBu2Ia28OTinIT2/UeJgbkNk=
Subject key identifier:   F2:ED:10:09:EC:D9:E5:8C:B8:D9:ED:A1:0B:92:0C:87:82:36:C4:64
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       0F2970C7C6629BED1C76C65E6E6E2EB587FD7A42
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e37362e31362e302f32302d3234203d3e203238353733.roa
Signing time:             Wed 03 Apr 2024 18:31:48 +0000
ROA not before:           Wed 03 Apr 2024 18:26:48 +0000
ROA not after:            Wed 02 Apr 2025 18:31:48 +0000
asID:                     28573
IP address blocks:        201.76.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:29:70:c7:c6:62:9b:ed:1c:76:c6:5e:6e:6e:2e:b5:87:fd:7a:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Apr  3 18:26:48 2024 GMT
            Not After : Apr  2 18:31:48 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d8:b0:a9:40:84:bd:68:e8:e5:3d:a7:90:3e:
                    dd:8e:a3:cb:f3:bf:eb:f5:25:47:30:c8:c2:44:65:
                    36:75:ab:12:d4:2d:27:0d:f2:52:38:66:29:4e:d2:
                    13:ce:32:43:02:ab:6b:9d:b1:75:29:6a:37:0f:af:
                    ce:32:b7:4c:a4:1e:d6:5e:d2:e7:93:bc:b3:3d:da:
                    58:d5:18:28:91:b2:36:44:6b:d8:0e:00:27:e7:d9:
                    93:bf:9e:06:f0:81:68:62:44:14:57:fe:11:fa:ba:
                    56:ea:09:a4:63:1a:ee:4f:3e:cf:e2:55:4c:6f:b3:
                    83:76:80:a1:de:ed:a9:c3:82:f9:7a:12:c1:87:6f:
                    0c:e5:28:c9:eb:d0:ce:64:c1:4a:82:aa:bf:93:d2:
                    f5:94:d4:30:64:12:1c:c4:4b:a9:c3:13:e0:81:7d:
                    41:e9:6f:30:fe:56:a3:7e:40:bb:68:f9:eb:7c:0c:
                    cd:ad:41:9f:75:a0:9d:2a:c0:56:49:3e:cf:79:c9:
                    55:f9:a6:e2:b8:69:1a:2e:e5:2d:a2:6f:85:d6:57:
                    a9:a7:77:07:ad:ea:c9:38:fd:72:a0:f5:69:af:71:
                    20:e4:21:2f:68:9f:d1:ac:eb:16:3f:97:68:9b:88:
                    b6:cc:58:57:ae:c7:d7:cb:72:45:eb:31:ca:6d:5f:
                    e1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:ED:10:09:EC:D9:E5:8C:B8:D9:ED:A1:0B:92:0C:87:82:36:C4:64
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e37362e31362e302f32302d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.76.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         28:53:61:e4:65:1f:5a:1f:dd:8d:9d:66:dc:80:fa:05:92:cc:
         20:7d:2c:a3:c2:cd:d8:5a:4d:c8:7d:ee:37:97:a5:f6:82:1f:
         25:c4:b6:38:6b:b4:85:8b:dc:35:68:5c:f9:c0:61:aa:83:66:
         2b:52:21:dd:8e:01:db:68:58:da:fc:59:7f:da:91:ad:4e:c4:
         bd:5a:f7:e7:f6:ff:11:80:1e:b8:db:a2:3e:37:f2:ad:3c:d8:
         61:d4:5d:60:e3:d6:13:3b:f9:5c:17:1c:de:e8:de:a5:d9:3a:
         ca:b3:a1:d7:d9:f8:55:90:22:89:0b:c9:76:15:bb:95:d7:55:
         85:ee:53:e8:27:e8:a6:33:79:24:71:d0:93:79:3f:ce:43:4a:
         17:1c:9e:68:e1:dc:97:58:5c:a9:fa:2e:20:84:55:a7:ef:46:
         75:d2:3e:1f:80:d3:03:77:f0:97:fa:b5:f2:29:01:c4:00:1c:
         4c:c5:db:3b:ad:a0:03:ee:c8:b2:68:39:4b:a7:ea:31:17:98:
         15:36:1b:45:f0:15:aa:64:d5:d5:6d:dd:c8:4b:6d:3d:4c:ca:
         d9:d4:01:34:66:7e:c7:b1:7d:75:ac:ce:57:bc:a7:31:cf:c4:
         e6:51:d4:e6:bd:d0:cd:1d:36:1b:f7:12:d5:fe:fe:19:ce:3d:
         a4:5f:11:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:14 2024 by rpki-client on console-fra.rpki-client.org