Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e39342e3136302e302f31392d3234203d3e203238353733.roa
File:                     3230312e39342e3136302e302f31392d3234203d3e203238353733.roa (raw, json)
Hash identifier:          RS2nIVtZa5CO5EXNPisaOfUVb1rdHIAmQMJBE6RQIzw=
Subject key identifier:   0B:4E:C2:C0:0C:D6:35:F5:C6:80:25:C3:63:DA:A5:EB:B7:4A:7B:31
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       5C5866ABAB5A8CF445FA6323398B69247AF8B4B9
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e39342e3136302e302f31392d3234203d3e203238353733.roa
Signing time:             Wed 03 Apr 2024 18:31:43 +0000
ROA not before:           Wed 03 Apr 2024 18:26:43 +0000
ROA not after:            Wed 02 Apr 2025 18:31:43 +0000
asID:                     28573
IP address blocks:        201.94.160.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:58:66:ab:ab:5a:8c:f4:45:fa:63:23:39:8b:69:24:7a:f8:b4:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Apr  3 18:26:43 2024 GMT
            Not After : Apr  2 18:31:43 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a8:17:f5:37:3b:1f:11:67:9f:60:ab:c4:1c:
                    ad:3b:ff:d9:98:bc:3c:5d:47:61:a9:d9:79:e5:e3:
                    48:9b:9f:e6:09:9f:72:54:dc:d1:15:42:3d:a7:8c:
                    51:a4:5b:fb:fd:eb:52:2f:b7:1d:0d:d3:fa:1c:05:
                    76:8d:2c:36:93:93:92:df:cf:e9:e8:9f:9e:d7:20:
                    1e:62:e8:70:50:cb:3c:b6:c5:be:fe:f1:6e:e5:b0:
                    87:f7:6c:80:38:41:2c:e0:e7:2c:f5:d1:ed:4e:d5:
                    ee:74:7a:27:4d:98:46:21:a6:f4:56:ea:ba:f5:f3:
                    e3:5b:c4:c2:07:6c:26:a4:c5:af:de:0b:98:c4:10:
                    ee:c9:87:7c:8b:90:17:d4:c1:ec:4f:48:3c:a3:9c:
                    d0:75:9b:6b:4a:b0:e3:ca:5f:d4:3c:b5:ee:2f:46:
                    d6:d3:f7:9d:03:11:d9:d6:6f:ff:ee:33:11:70:da:
                    5c:22:85:6e:cf:f3:fd:08:f0:2c:65:ba:1d:be:27:
                    53:2c:9e:69:63:3f:ac:ad:de:7f:de:74:96:9d:97:
                    ac:39:9e:f7:cc:74:ee:0d:b6:2d:4d:e8:e7:95:bf:
                    0e:c3:e6:95:d6:1a:a4:ad:dd:2e:fb:3d:62:a9:fb:
                    fb:a5:e8:3b:a4:9f:a6:72:07:b1:c8:5f:ab:e6:ca:
                    29:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:4E:C2:C0:0C:D6:35:F5:C6:80:25:C3:63:DA:A5:EB:B7:4A:7B:31
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e39342e3136302e302f31392d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.94.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         55:ad:a8:a7:91:24:bc:9e:d6:ae:35:7d:bc:76:29:e5:a6:d5:
         1c:03:9e:bd:56:bd:5b:1e:e0:16:63:1e:43:b2:f2:43:4f:12:
         59:0a:f1:8f:0e:01:58:45:c1:09:e7:2e:fb:4a:83:cd:88:8a:
         32:cc:de:3b:46:92:24:23:e2:d6:b7:ed:9f:f6:48:5b:f8:af:
         f4:d4:69:2e:e5:78:9e:ea:49:9f:a8:79:e8:f0:a7:03:20:98:
         f0:98:b9:ff:34:6a:6d:ce:6e:c0:57:6d:80:30:14:fd:0e:30:
         6a:ed:43:71:b7:bb:47:8b:29:39:85:f1:c0:e6:67:76:54:4d:
         f0:eb:6b:4f:fb:1a:da:67:2a:1e:26:b6:48:18:99:72:77:0b:
         43:a8:de:1d:fe:67:8f:ce:cd:10:13:72:86:da:be:bd:d8:99:
         1e:3e:0b:b5:55:fb:cf:67:b2:b4:37:7c:d2:99:4d:c3:f3:4f:
         c1:a9:e7:8a:e2:91:12:00:6b:32:52:fd:56:c8:33:57:78:18:
         67:89:f6:42:51:3d:c5:3f:69:ac:eb:50:6f:30:3c:d9:58:f3:
         73:14:0e:d7:20:f2:39:06:3a:96:b3:ff:a1:6c:38:e4:c9:e2:
         72:af:92:02:ee:64:f6:09:99:f8:df:b0:5f:f0:a1:8d:ee:fc:
         08:52:8b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:14 2024 by rpki-client on console-ams.rpki-client.org