Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e37372e36342e302f32302d3234203d3e203238353733.roa
File:                     3230312e37372e36342e302f32302d3234203d3e203238353733.roa (raw, json)
Hash identifier:          IvTPp5qIJhqto5+hRoqKAg7nD89W8/VIyNioOg3nf0w=
Subject key identifier:   46:B7:7C:3B:B4:69:9E:8B:AF:98:2D:51:F7:24:A9:67:12:F0:04:41
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       154B908A9DCFE4068FA8999E9A5FBA598264283A
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e37372e36342e302f32302d3234203d3e203238353733.roa
Signing time:             Wed 03 Apr 2024 18:31:44 +0000
ROA not before:           Wed 03 Apr 2024 18:26:44 +0000
ROA not after:            Wed 02 Apr 2025 18:31:44 +0000
asID:                     28573
IP address blocks:        201.77.64.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:4b:90:8a:9d:cf:e4:06:8f:a8:99:9e:9a:5f:ba:59:82:64:28:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Apr  3 18:26:44 2024 GMT
            Not After : Apr  2 18:31:44 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d0:93:6a:15:88:12:03:8e:79:0b:a5:4f:12:
                    c8:bb:df:9f:2d:73:71:8d:94:56:0a:bf:55:4a:69:
                    57:b2:8b:d3:06:03:ee:37:22:b1:40:cb:8b:97:b8:
                    9d:65:18:d0:a4:4b:d7:02:04:f2:03:c6:9c:24:73:
                    50:4b:f1:99:c3:69:ce:da:65:00:ef:97:13:9f:97:
                    12:54:c6:76:95:fe:30:a4:b4:f0:19:05:4c:6f:4d:
                    c8:49:78:b2:43:0b:78:ea:13:c0:55:93:60:aa:0c:
                    08:e9:e9:de:36:01:2e:e1:ae:b5:ca:aa:2e:a4:c5:
                    14:c0:56:e0:e2:9c:65:c3:36:ca:96:b5:31:6b:de:
                    a5:34:45:46:66:9f:14:9c:b9:69:0f:39:5d:14:48:
                    3c:39:7d:bb:bb:94:bb:07:2b:16:65:42:95:4f:54:
                    bc:8f:55:f3:97:1d:10:2c:d0:c9:2a:3e:05:5b:20:
                    c1:dd:a0:5e:ba:ef:e0:60:ea:c9:9a:95:7b:81:0f:
                    bf:d3:92:ce:19:30:bf:f7:00:51:69:d6:5a:4b:20:
                    6d:52:3a:08:3e:0e:0c:ba:d0:87:da:a6:42:16:cf:
                    68:4b:94:4b:88:73:48:48:55:4b:a4:8b:ba:9b:e0:
                    ce:a7:49:a6:6c:8b:56:62:90:32:51:b5:f8:73:f6:
                    fa:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:B7:7C:3B:B4:69:9E:8B:AF:98:2D:51:F7:24:A9:67:12:F0:04:41
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e37372e36342e302f32302d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.77.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         45:6a:62:c3:85:9d:84:23:06:e0:29:79:7a:24:9b:84:0c:1b:
         e7:0b:77:3c:03:fb:46:fd:77:49:e8:1d:a9:c7:f0:1a:05:98:
         2b:c5:1c:0d:62:1a:47:0a:b1:47:d5:d9:4d:20:54:33:c4:2a:
         f0:e6:2c:9a:01:ed:6a:f9:a8:96:13:55:d5:c1:7f:f9:70:74:
         3d:f5:19:36:32:3a:78:d7:ba:4f:7e:77:32:dc:8a:f2:c0:ac:
         68:63:b4:80:90:94:1b:ec:71:63:ae:ed:b1:11:ec:6d:fd:12:
         a3:e1:88:bd:56:25:81:f1:d0:8c:68:88:c1:66:9c:f4:d2:80:
         81:ce:11:44:f0:3b:a7:cc:5b:c7:08:cd:0e:73:10:9d:42:93:
         2e:7e:d7:e7:fd:17:91:ee:27:aa:6b:38:a3:1f:1f:00:54:13:
         08:f2:3b:96:7b:e7:95:0d:dd:e7:56:46:e4:a4:eb:d2:f7:f5:
         ac:40:4b:c4:5c:27:7b:ce:9f:46:9e:7f:fe:2e:fd:43:6a:3e:
         5a:88:5a:00:d7:5e:cd:71:43:8f:4f:42:a5:49:4c:f0:c7:57:
         1f:df:1c:15:3e:ba:a4:58:91:19:83:bc:24:0e:17:ee:21:76:
         34:9c:2f:5d:d1:db:69:27:11:c7:00:81:29:93:44:4e:da:66:
         94:23:22:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:14 2024 by rpki-client on console-fra.rpki-client.org