Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3133382e3231392e3234302e302f32322d3232203d3e20323633303733.roa
File:                     3133382e3231392e3234302e302f32322d3232203d3e20323633303733.roa (raw, json)
Hash identifier:          udvFBz5Jog9/ayEFAXEjUpG0dXFCxbhbs7Bmm5ieMA0=
Subject key identifier:   4B:00:D3:0F:77:7A:C5:9B:0D:55:EF:F4:81:CB:01:1D:6A:B8:62:25
Certificate issuer:       /CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
Certificate serial:       28AB00937D6E63D140E01B793F380EE545D23377
Authority key identifier: 93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3133382e3231392e3234302e302f32322d3232203d3e20323633303733.roa
Signing time:             Wed 03 Apr 2024 21:13:24 +0000
ROA not before:           Wed 03 Apr 2024 21:08:24 +0000
ROA not after:            Wed 02 Apr 2025 21:13:24 +0000
asID:                     263073
IP address blocks:        138.219.240.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl
                          rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:ab:00:93:7d:6e:63:d1:40:e0:1b:79:3f:38:0e:e5:45:d2:33:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
        Validity
            Not Before: Apr  3 21:08:24 2024 GMT
            Not After : Apr  2 21:13:24 2025 GMT
        Subject: CN=4B00D30F777AC59B0D55EFF481CB011D6AB86225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:55:63:bf:52:d7:dd:48:a8:8d:79:c4:9c:9d:
                    91:83:d9:e0:f4:7d:cc:b3:4f:51:8c:84:b4:ae:61:
                    a8:9d:bd:7c:8b:78:17:9f:59:4b:ed:0b:c7:93:52:
                    ed:88:ae:31:47:fc:16:15:9a:f8:2b:c6:04:62:80:
                    80:e1:80:ec:34:5a:ec:f4:a3:3c:92:83:7c:5b:c0:
                    94:49:28:bd:6c:a2:b8:10:d4:b8:f0:19:38:22:30:
                    61:45:99:8d:7b:a8:9b:16:f0:12:d6:83:f2:29:f8:
                    39:47:79:27:c4:14:21:55:70:45:02:e3:08:cc:21:
                    61:12:ed:f8:a3:cf:61:b1:44:cb:ba:03:f9:bb:e4:
                    f4:5f:83:ed:be:65:7b:e9:2f:9d:d5:8a:e6:52:e4:
                    84:1d:2f:a3:11:3d:bf:e9:34:60:bc:7c:bf:3c:0a:
                    00:25:8d:e4:a6:e1:cd:56:43:f3:82:57:72:e8:3f:
                    d5:a5:ed:f1:af:68:f3:da:90:41:c2:4d:62:21:ed:
                    96:b1:fd:ae:6d:df:12:dc:a6:ac:57:45:28:1d:9d:
                    95:bd:4f:b7:f3:74:b0:f5:9e:62:7f:2a:5b:02:98:
                    85:52:f3:f9:37:a0:4e:83:b7:33:73:37:a1:d2:48:
                    39:64:e3:28:42:a5:64:1d:98:61:48:a3:b9:7e:1f:
                    e5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:00:D3:0F:77:7A:C5:9B:0D:55:EF:F4:81:CB:01:1D:6A:B8:62:25
            X509v3 Authority Key Identifier:
                keyid:93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3133382e3231392e3234302e302f32322d3232203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:c8:9a:ff:cc:1d:35:47:d2:68:a1:e3:4f:1a:04:6d:ab:2e:
         75:1d:e3:5a:5b:0a:30:68:b8:0c:15:c4:47:a8:02:2d:5f:e0:
         7c:1a:0b:dc:2c:43:70:81:cc:fb:2c:26:3f:80:96:98:02:aa:
         9a:7a:47:d2:c5:a4:1d:10:a7:36:c4:76:9e:08:4f:5e:b5:d9:
         7a:06:03:7a:73:94:6d:b5:b2:87:b9:7d:58:b9:c4:c1:13:1f:
         8b:78:1c:96:e2:34:a0:ce:2f:68:d4:a2:a7:21:e2:5c:2b:b0:
         6c:82:8d:85:3a:bf:42:14:8e:f7:14:f9:da:1f:94:66:10:d8:
         b0:3a:03:40:b1:93:75:a8:46:4d:ca:96:96:42:7b:31:54:fb:
         d4:2c:8d:c9:c2:e4:4b:8e:af:9f:3f:a8:98:96:44:09:9b:07:
         c4:8a:19:1f:07:08:54:3e:43:64:e1:8e:05:fb:0d:eb:6a:bb:
         ee:d8:e5:f1:a3:82:54:0d:3b:61:d5:55:7c:6c:78:65:94:92:
         fa:53:1f:80:1a:eb:14:6a:ac:22:89:19:84:f9:91:11:51:f8:
         55:25:54:ae:79:86:0e:73:14:04:65:9f:ef:25:5c:27:e2:3f:
         26:25:3e:0e:37:e5:6c:78:85:e3:8b:49:4a:2f:e0:28:94:4f:
         2a:cc:ff:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:08 2024 by rpki-client on console-ams.rpki-client.org