Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3133382e3231392e3234322e302f32342d3234203d3e20323633303733.roa
File:                     3133382e3231392e3234322e302f32342d3234203d3e20323633303733.roa (raw, json)
Hash identifier:          tJlrA1qiZUhbKKA86v9mT3lgPme9G8o6NkhBFXh7W2Y=
Subject key identifier:   E0:7F:78:F2:12:B6:BE:88:62:B6:B3:C1:E7:BF:AE:B0:94:53:A5:9A
Certificate issuer:       /CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
Certificate serial:       4D9AC3C8E9F796F0170D4F3365D8B15F98F2AC83
Authority key identifier: 93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3133382e3231392e3234322e302f32342d3234203d3e20323633303733.roa
Signing time:             Wed 03 Apr 2024 21:13:29 +0000
ROA not before:           Wed 03 Apr 2024 21:08:29 +0000
ROA not after:            Wed 02 Apr 2025 21:13:29 +0000
asID:                     263073
IP address blocks:        138.219.242.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl
                          rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:9a:c3:c8:e9:f7:96:f0:17:0d:4f:33:65:d8:b1:5f:98:f2:ac:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
        Validity
            Not Before: Apr  3 21:08:29 2024 GMT
            Not After : Apr  2 21:13:29 2025 GMT
        Subject: CN=E07F78F212B6BE8862B6B3C1E7BFAEB09453A59A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:6e:14:7f:15:33:c0:84:4c:10:38:63:a7:76:
                    c4:a1:be:b2:db:c9:1a:de:8f:9c:1b:12:e1:8a:30:
                    4a:cb:ef:bc:fb:fb:50:e0:a1:a9:08:26:83:f2:71:
                    85:d2:d7:53:f1:fc:11:91:5b:42:73:9a:9d:8b:7c:
                    05:9b:6e:41:8a:de:4d:fa:15:d5:76:bc:9e:6b:1b:
                    53:e0:23:07:89:40:ab:33:a2:10:b0:c8:08:9d:0d:
                    b7:6e:b1:5b:1a:5a:86:c8:9e:e1:c4:56:78:fd:1d:
                    0c:3a:0f:cf:80:09:f0:10:48:50:52:56:9e:cd:dd:
                    c1:f8:da:b8:2a:5b:66:3c:af:b8:51:af:44:d3:41:
                    13:d1:37:65:9b:27:93:9c:54:ff:fa:aa:c4:cb:b4:
                    18:e2:10:39:e9:23:04:a0:74:a2:86:65:78:53:39:
                    90:6b:83:c5:47:eb:f6:88:0e:b2:31:64:cf:c2:da:
                    8d:b6:ef:c7:0d:fe:b9:85:81:f9:86:3a:f0:f9:ad:
                    ef:6d:e5:f7:6a:16:07:a6:b6:61:81:2e:90:b9:af:
                    0f:8b:de:01:0b:32:34:b6:78:fb:8c:74:18:f5:90:
                    21:9f:1f:37:e0:9c:b4:3e:80:65:79:27:c2:0d:cf:
                    4f:3a:3e:62:21:31:2f:7b:02:98:e8:65:b3:70:15:
                    8c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:7F:78:F2:12:B6:BE:88:62:B6:B3:C1:E7:BF:AE:B0:94:53:A5:9A
            X509v3 Authority Key Identifier:
                keyid:93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3133382e3231392e3234322e302f32342d3234203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:29:29:a4:d5:d8:22:3e:ac:c2:5f:e3:46:a1:c1:cd:9f:65:
         2b:fa:b4:ae:f1:a6:1e:92:2b:78:08:e4:90:23:d1:0a:bb:b1:
         cb:7d:d2:23:f0:fb:78:66:80:1e:3e:e3:0e:bb:18:5a:80:21:
         6d:e7:49:34:65:02:7d:10:f8:68:f5:84:6f:4e:4b:8e:25:8b:
         93:25:0f:3c:9e:df:49:f0:05:0a:33:26:f8:93:12:2a:55:30:
         42:88:b9:08:90:64:f2:d4:bc:ef:3f:5e:74:4d:2f:df:aa:8d:
         0c:b7:94:28:de:5a:31:4b:91:c2:39:d8:bf:bb:19:91:ec:d8:
         27:d7:5b:2b:73:b2:5a:f5:4c:d8:b3:45:33:6a:e0:a1:35:7b:
         b3:10:b8:49:7f:9f:59:87:a0:b9:1a:8a:69:13:57:a1:e3:9c:
         a7:a0:ab:ff:a3:2b:46:fd:b0:60:30:36:9f:53:1a:0a:fd:b2:
         cf:2b:35:dc:ed:5e:1f:16:1a:f2:68:ca:c7:80:9a:92:37:79:
         2a:00:db:ce:78:9d:aa:5a:db:70:58:32:97:6d:14:15:03:14:
         8a:00:62:2c:d9:e3:1e:68:5b:1c:58:7c:4d:5a:52:ac:e9:cf:
         3e:4a:8f:16:ae:67:dc:2f:90:bd:71:60:c5:dd:f5:8d:27:d8:
         fd:67:b3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:08 2024 by rpki-client on console-ams.rpki-client.org