Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e37362e31362e302f32302d3234203d3e203238353733.roa
File:                     3230312e37362e31362e302f32302d3234203d3e203238353733.roa (raw, json)
Hash identifier:          /QeM9NOYoF4Sig6muD+Hel63/QxxSAK0zCzyo+XOj50=
Subject key identifier:   98:0B:01:B7:F4:E5:03:48:33:CF:CF:BC:5A:28:DB:32:3C:69:05:70
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       7563664C5428945ACCBC8AFF56D4F89E3E8A8D74
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e37362e31362e302f32302d3234203d3e203238353733.roa
Signing time:             Wed 05 Mar 2025 19:00:08 +0000
ROA not before:           Wed 05 Mar 2025 18:55:08 +0000
ROA not after:            Wed 04 Mar 2026 19:00:08 +0000
asID:                     28573
IP address blocks:        201.76.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 13:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:63:66:4c:54:28:94:5a:cc:bc:8a:ff:56:d4:f8:9e:3e:8a:8d:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Mar  5 18:55:08 2025 GMT
            Not After : Mar  4 19:00:08 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c8:ed:76:b4:96:f5:f8:c9:27:a3:04:47:54:
                    c8:dc:f8:73:58:1b:b4:44:e5:1a:43:47:ad:30:07:
                    ce:b8:33:60:37:ba:66:2d:48:1b:6a:e1:a9:62:92:
                    26:3d:b5:b9:c9:de:4c:96:43:f2:fb:c9:38:e9:e4:
                    a4:63:77:8b:6c:7a:02:6d:29:9f:68:e3:3f:77:3c:
                    8a:1f:49:5b:56:28:94:ea:b9:d9:57:67:a2:2a:5f:
                    36:7e:29:72:17:a1:4c:ca:31:e5:03:e7:0c:67:57:
                    15:ba:26:24:11:3e:10:c9:c3:f8:46:91:2a:fb:bd:
                    90:b4:c8:3d:14:0b:51:d0:f8:d0:bd:96:6f:0b:af:
                    5d:4e:8c:86:dd:eb:3e:99:96:d7:c3:d4:17:63:8b:
                    20:8e:14:9a:6a:81:79:38:72:dc:a0:3a:c6:9f:23:
                    c6:e5:d5:76:83:df:39:96:53:8e:da:00:55:31:b9:
                    13:f8:1a:0c:0d:1b:d2:9b:26:e4:7e:75:0b:37:fb:
                    34:3e:c1:c3:ad:17:7f:8a:6a:c1:84:4b:a1:7f:54:
                    31:16:e0:46:d5:ab:00:0d:09:ee:d1:c8:94:cb:a9:
                    e8:f8:2a:77:21:b4:c8:13:81:26:8b:ee:84:ff:41:
                    96:0f:c7:53:e5:c1:c4:89:3a:56:98:bb:70:92:dc:
                    d3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:0B:01:B7:F4:E5:03:48:33:CF:CF:BC:5A:28:DB:32:3C:69:05:70
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e37362e31362e302f32302d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.76.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         53:1c:f4:51:a8:ad:4a:87:78:2d:07:a8:bb:fb:c7:95:a3:8e:
         b2:95:6c:e9:ad:20:86:8e:82:69:ad:e7:e4:5a:09:e6:05:e2:
         e9:9c:ce:20:22:97:30:a5:fc:74:91:3c:6b:40:cc:7e:32:e7:
         a3:48:80:24:a2:91:d8:09:e3:c6:7a:e1:6a:12:a6:1f:ca:64:
         2b:da:74:85:af:62:a0:c0:0d:8e:44:d5:03:4c:8a:7f:dd:70:
         fe:ab:4a:36:1b:0a:38:da:05:84:e7:f6:ff:de:a2:5c:72:31:
         6f:bd:11:0a:98:dc:ac:1e:b8:e1:50:df:d9:84:6c:eb:d0:d8:
         d9:d3:aa:a1:fe:be:f1:e5:85:47:72:09:08:1b:f9:cf:af:11:
         92:de:79:0a:9f:e2:40:8b:f4:35:3a:0f:2d:39:4a:2f:eb:5c:
         45:42:4f:fc:12:ad:ba:88:22:26:d3:0a:db:ac:64:4d:73:13:
         4e:c3:5b:d6:b3:32:64:72:81:b2:ad:f7:4a:10:5a:98:3b:0d:
         b5:49:34:3c:2a:45:91:2b:a8:33:c4:27:62:fe:5a:d1:8e:16:
         81:fa:68:c0:b0:ca:0c:3a:e5:0f:c2:3a:51:fc:b1:db:10:7f:
         37:49:15:3b:12:f5:0f:fb:1d:c8:f2:c3:59:52:8b:ba:8a:44:
         fd:2f:d3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:32:23 2025 by rpki-client