Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3133382e302e3139392e302f32342d3234203d3e20323633303733.roa
File:                     3133382e302e3139392e302f32342d3234203d3e20323633303733.roa (raw, json)
Hash identifier:          +Gtd4FfeDJHXt0LpU3jI+lQBTS/j91NAtJKCxyIspUk=
Subject key identifier:   8F:83:AF:67:EB:7A:37:0B:E2:CC:A8:61:1A:92:74:7D:49:84:1D:CE
Certificate issuer:       /CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
Certificate serial:       24CD4915CC7CC49DFBB71BDF3E6184BD023FEEAF
Authority key identifier: 93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3133382e302e3139392e302f32342d3234203d3e20323633303733.roa
Signing time:             Fri 28 Mar 2025 15:10:29 +0000
ROA not before:           Fri 28 Mar 2025 15:05:29 +0000
ROA not after:            Fri 27 Mar 2026 15:10:29 +0000
asID:                     263073
IP address blocks:        138.0.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl
                          rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 03:23:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:cd:49:15:cc:7c:c4:9d:fb:b7:1b:df:3e:61:84:bd:02:3f:ee:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
        Validity
            Not Before: Mar 28 15:05:29 2025 GMT
            Not After : Mar 27 15:10:29 2026 GMT
        Subject: CN=8F83AF67EB7A370BE2CCA8611A92747D49841DCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:47:10:aa:91:74:3f:ca:92:a6:57:34:17:38:
                    b8:41:b3:43:5f:8c:87:36:31:13:60:e4:2a:f1:bb:
                    36:c9:47:c2:e9:ac:82:86:5a:89:e2:e2:24:e4:21:
                    e9:c2:76:70:24:d5:df:a4:49:68:20:ba:df:bb:3c:
                    a9:10:18:c5:11:45:71:c4:c2:90:1e:95:fe:6e:c0:
                    09:67:00:d2:56:fc:86:17:22:89:1f:f4:08:7c:4f:
                    46:f1:92:11:e9:22:fd:31:3f:4c:6d:24:ec:f9:11:
                    3f:39:7f:f7:9c:04:80:42:74:56:78:d6:17:86:93:
                    85:61:3a:b8:65:b4:86:3e:6b:f2:ad:00:c2:93:e5:
                    1f:4c:2b:42:ff:3c:a4:0b:c8:03:a3:9d:2a:a2:06:
                    82:3c:41:12:c7:35:4d:6d:85:06:d0:24:5c:fd:55:
                    36:58:b0:6c:4d:ec:8f:7b:b1:42:06:6b:d3:2a:6e:
                    ff:95:31:56:7f:ec:b9:97:1f:9d:56:1a:05:af:9f:
                    03:f2:0d:b7:fe:39:88:9d:c6:5c:c8:f8:86:31:7f:
                    fa:d8:d4:62:c5:9c:6e:c0:5b:5a:ed:70:86:3a:63:
                    27:dc:4a:9d:77:b3:70:14:86:f8:46:44:d3:81:f3:
                    5d:1c:e8:ef:a2:79:7a:99:d4:93:dc:2b:cb:c0:d3:
                    87:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:83:AF:67:EB:7A:37:0B:E2:CC:A8:61:1A:92:74:7D:49:84:1D:CE
            X509v3 Authority Key Identifier:
                keyid:93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3133382e302e3139392e302f32342d3234203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:11:71:77:1f:89:c0:04:f8:a0:e8:0b:f2:14:ed:81:67:a8:
         27:8a:3d:e0:38:d9:7b:9e:1c:f0:e1:46:31:4d:10:58:99:fd:
         42:89:1f:f2:90:2c:6a:31:0a:37:e3:82:13:ed:71:0b:58:48:
         2c:1c:d6:a7:50:ae:18:13:fa:62:b5:db:49:eb:07:69:11:39:
         59:a2:d3:e7:d5:33:0a:1e:71:cf:a7:ad:4c:57:b1:80:41:8e:
         47:01:a3:b4:c4:d6:a7:51:0f:d4:4a:c7:3f:41:45:45:df:bd:
         de:b4:d6:37:ab:b5:0e:4e:5f:05:fa:ee:43:3a:7c:01:0d:ab:
         05:7a:d5:fa:b7:93:05:94:65:8e:68:f0:5a:a9:af:70:87:c9:
         c1:12:62:37:50:51:0a:c4:17:82:69:02:b4:00:dd:4a:cd:1e:
         e0:d7:cc:51:94:14:76:63:aa:4b:25:51:cc:80:c2:94:d2:e0:
         4b:5e:dc:98:59:10:d8:7a:05:59:58:86:91:df:26:0d:f6:c3:
         ab:6d:65:2f:53:e1:36:4a:e8:84:f7:ce:14:f3:e0:46:62:a6:
         7d:1c:d1:42:b9:17:2d:75:54:01:54:db:3e:9b:d4:6a:c9:a7:
         e9:1b:65:b6:71:7b:17:a4:a0:8c:c6:30:5c:f0:5e:47:f6:fe:
         8f:ba:fe:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:04:19 2025 by rpki-client