Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/323830343a3134633a3a2f33312d3634203d3e203238353733.roa
File:                     323830343a3134633a3a2f33312d3634203d3e203238353733.roa (raw, json)
Hash identifier:          8UqyXf/45hOXQcUrQ5r0hqNZq/cOzS7gnij5TOnZJqQ=
Subject key identifier:   68:17:F8:BE:77:73:21:CF:39:D4:C3:93:D3:11:46:BF:6F:44:A8:F0
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       7B79B71F9A3B4D013020FAF153DA725353222592
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/323830343a3134633a3a2f33312d3634203d3e203238353733.roa
Signing time:             Wed 03 Apr 2024 18:31:45 +0000
ROA not before:           Wed 03 Apr 2024 18:26:45 +0000
ROA not after:            Wed 02 Apr 2025 18:31:45 +0000
asID:                     28573
IP address blocks:        2804:14c::/31 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:79:b7:1f:9a:3b:4d:01:30:20:fa:f1:53:da:72:53:53:22:25:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Apr  3 18:26:45 2024 GMT
            Not After : Apr  2 18:31:45 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:47:7b:f6:40:cd:9a:4d:c9:3c:b5:76:05:96:
                    34:ab:15:4a:3f:c9:15:b4:53:08:79:21:70:84:42:
                    61:c6:2e:9e:cc:92:6c:5d:ba:68:db:d3:6c:b5:93:
                    60:e2:c6:b9:bd:b4:75:ee:f1:8a:b9:73:e5:05:68:
                    0e:2b:58:11:b2:dc:ba:28:8a:55:8d:37:d2:e0:22:
                    6c:ae:11:db:b9:8f:25:4f:69:d8:e5:f9:fd:02:17:
                    76:9c:69:e4:24:a7:26:e8:54:71:57:dc:40:4e:df:
                    13:31:78:d7:36:08:40:f7:f5:13:d9:c2:4a:e3:07:
                    70:fd:4c:74:be:94:a2:8b:67:d2:6f:e1:67:f1:98:
                    4d:3d:f4:70:35:8d:6d:9d:50:3c:46:4c:b2:ef:a8:
                    09:6c:46:af:04:88:e1:1f:e3:6f:7e:08:5d:68:4c:
                    aa:97:17:61:72:25:23:e0:9e:2a:35:7d:c6:ff:03:
                    d2:79:29:5e:6d:e8:38:57:81:af:1b:10:d8:27:97:
                    7c:41:e7:04:d9:4a:d7:ce:91:bc:1b:67:23:54:52:
                    00:8d:d5:f3:33:70:18:c3:85:1d:94:fc:23:04:38:
                    04:67:c7:c9:df:c5:22:eb:c9:a4:eb:7e:af:14:00:
                    8f:1e:c4:bd:10:5a:4e:e7:f5:1b:e8:ed:32:37:86:
                    6c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:17:F8:BE:77:73:21:CF:39:D4:C3:93:D3:11:46:BF:6F:44:A8:F0
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/323830343a3134633a3a2f33312d3634203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14c::/31

    Signature Algorithm: sha256WithRSAEncryption
         58:2f:af:ee:57:2b:f7:91:05:8b:c4:15:dc:23:94:ff:56:d9:
         5c:14:f1:c9:c4:29:60:5c:2c:b2:7e:7a:47:a1:cf:6d:e1:81:
         d2:ef:0b:1b:59:4d:cd:e0:e6:34:54:60:ba:62:1d:16:32:35:
         58:05:55:fd:e4:20:2f:95:ad:e5:24:a7:57:72:23:19:45:8f:
         e8:be:8c:43:ff:24:a5:7b:d3:a8:6b:41:62:dd:0d:d5:a2:ca:
         0e:82:f7:69:72:d1:cb:cc:f0:ca:75:d5:31:1b:89:7c:2e:a2:
         78:b2:3e:51:3c:86:a2:4c:7b:27:90:a2:2e:18:0d:44:66:d2:
         5a:94:ae:9e:e8:dd:6a:da:cc:d7:8f:20:9d:80:2d:4b:37:77:
         23:5b:c2:f2:f0:46:95:25:6d:71:a8:57:24:e1:48:a6:f0:74:
         3e:d4:cf:1c:84:12:03:9a:e9:b9:1e:6d:a6:66:b4:fd:47:20:
         fa:92:7b:4b:db:16:a2:78:cc:36:2e:ac:98:e6:6d:0b:66:0d:
         d3:a4:d9:1f:05:49:0b:24:46:2d:43:a1:36:7c:dc:9b:5c:c9:
         96:07:89:82:9c:8e:80:0a:8b:a4:d3:45:2d:01:cd:b7:ea:92:
         08:11:80:97:0d:5c:a8:a9:c2:bb:38:ce:b6:03:0e:13:12:63:
         fd:1e:bc:11
-----BEGIN CERTIFICATE-----
MIIHPjCCBiagAwIBAgIUe3m3H5o7TQEwIPrxU9pyU1MiJZIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZBMDJCNkY4RjREQkJEOThBQzlBOUQwQzc3QjA1MjFE
NUE2QkQwQTAeFw0yNDA0MDMxODI2NDVaFw0yNTA0MDIxODMxNDVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDc0NzdCRjY0MENEOUE0REM5
M0NCNTc2MDU5NjM0QUIxNTRBM0ZDOTE1QjQ1MzA4NzkyMTcwODQ0MjYxQzYyRTlF
Q0M5MjZDNURCQTY4REJEMzZDQjU5MzYwRTJDNkI5QkRCNDc1RUVGMThBQjk3M0U1
MDU2ODBFMkI1ODExQjJEQ0JBMjg4QTU1OEQzN0QyRTAyMjZDQUUxMURCQjk4RjI1
NEY2OUQ4RTVGOUZEMDIxNzc2OUM2OUU0MjRBNzI2RTg1NDcxNTdEQzQwNEVERjEz
MzE3OEQ3MzYwODQwRjdGNTEzRDlDMjRBRTMwNzcwRkQ0Qzc0QkU5NEEyOEI2N0Qy
NkZFMTY3RjE5ODREM0RGNDcwMzU4RDZEOUQ1MDNDNDY0Q0IyRUZBODA5NkM0NkFG
MDQ4OEUxMUZFMzZGN0UwODVENjg0Q0FBOTcxNzYxNzIyNTIzRTA5RTJBMzU3REM2
RkYwM0QyNzkyOTVFNkRFODM4NTc4MUFGMUIxMEQ4Mjc5NzdDNDFFNzA0RDk0QUQ3
Q0U5MUJDMUI2NzIzNTQ1MjAwOERENUYzMzM3MDE4QzM4NTFEOTRGQzIzMDQzODA0
NjdDN0M5REZDNTIyRUJDOUE0RUI3RUFGMTQwMDhGMUVDNEJEMTA1QTRFRTdGNTFC
RThFRDMyMzc4NjZDNTEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA10d79kDNmk3JPLV2BZY0qxVKP8kVtFMIeSFwhEJhxi6ezJJsXbpo
29NstZNg4sa5vbR17vGKuXPlBWgOK1gRsty6KIpVjTfS4CJsrhHbuY8lT2nY5fn9
Ahd2nGnkJKcm6FRxV9xATt8TMXjXNghA9/UT2cJK4wdw/Ux0vpSii2fSb+Fn8ZhN
PfRwNY1tnVA8Rkyy76gJbEavBIjhH+NvfghdaEyqlxdhciUj4J4qNX3G/wPSeSle
beg4V4GvGxDYJ5d8QecE2UrXzpG8G2cjVFIAjdXzM3AYw4UdlPwjBDgEZ8fJ38Ui
68mk636vFACPHsS9EFpO5/Ub6O0yN4ZsUQIDAQABo4ICTDCCAkgwHQYDVR0OBBYE
FGgX+L53cyHPOdTDk9MRRr9vRKjwMB8GA1UdIwQYMBaAFF+gK2+PTbvZismp0Md7
BSHVpr0KMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZRQXF5WXlHTFd4eFJi
SDVLY3BoejUxNzlkd2NCcThoWU5jMVFzaWFrTUwyLzEvNUZBMDJCNkY4RjREQkJE
OThBQzlBOUQwQzc3QjA1MjFENUE2QkQwQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS81RkEwMkI2RjhGNERCQkQ5OEFDOUE5RDBDNzdCMDUyMUQ1QTZC
RDBBLmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GUUFxeVl5R0xXeHhSYkg1S2Nw
aHo1MTc5ZHdjQnE4aFlOYzFRc2lha01MMi8xLzMyMzgzMDM0M2EzMTM0NjMzYTNh
MmYzMzMxMmQzNjM0MjAzZDNlMjAzMjM4MzUzNzMzLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUBKAQBTDAN
BgkqhkiG9w0BAQsFAAOCAQEAWC+v7lcr95EFi8QV3COU/1bZXBTxycQpYFwssn56
R6HPbeGB0u8LG1lNzeDmNFRgumIdFjI1WAVV/eQgL5Wt5SSnV3IjGUWP6L6MQ/8k
pXvTqGtBYt0N1aLKDoL3aXLRy8zwynXVMRuJfC6ieLI+UTyGokx7J5CiLhgNRGbS
WpSunujdatrM148gnYAtSzd3I1vC8vBGlSVtcahXJOFIpvB0PtTPHIQSA5rpuR5t
pma0/Ucg+pJ7S9sWonjMNi6smOZtC2YN06TZHwVJCyRGLUOhNnzcm1zJlgeJgpyO
gAqLpNNFLQHNt+qSCBGAlw1cqKnCuzjOtgMOExJj/R68EQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:14 2024 by rpki-client on console-fra.rpki-client.org