Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3136342e3136332e31322e302f32332d3233203d3e20323633303733.roa
File:                     3136342e3136332e31322e302f32332d3233203d3e20323633303733.roa (raw, json)
Hash identifier:          HXHaUm9pTFJ4ZBAlGItv5MV9wfvp7fe50omEh1S17+I=
Subject key identifier:   F5:CF:3E:A7:59:61:F4:C2:E6:C2:21:BC:13:A9:E3:D4:E9:86:15:15
Certificate issuer:       /CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
Certificate serial:       181209E3B7D80717DA0BC6CFC704E91A2057054A
Authority key identifier: 93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3136342e3136332e31322e302f32332d3233203d3e20323633303733.roa
Signing time:             Mon 24 Mar 2025 12:10:28 +0000
ROA not before:           Mon 24 Mar 2025 12:05:28 +0000
ROA not after:            Mon 23 Mar 2026 12:10:28 +0000
asID:                     263073
IP address blocks:        164.163.12.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl
                          rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 03:23:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:12:09:e3:b7:d8:07:17:da:0b:c6:cf:c7:04:e9:1a:20:57:05:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
        Validity
            Not Before: Mar 24 12:05:28 2025 GMT
            Not After : Mar 23 12:10:28 2026 GMT
        Subject: CN=F5CF3EA75961F4C2E6C221BC13A9E3D4E9861515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:79:25:07:18:bc:b9:c1:be:2f:5a:ad:51:01:
                    37:45:74:49:1c:8a:c1:ef:26:a9:22:c4:7b:22:c8:
                    bb:d3:09:44:11:76:e3:11:3f:0a:41:9c:b5:8c:0d:
                    c6:23:b1:9e:0a:03:7a:ea:84:5f:19:31:8f:df:30:
                    4e:47:b1:0a:25:15:89:1b:10:1d:ef:6b:d1:25:8c:
                    0f:cd:ee:66:1a:e9:a3:69:d4:61:e8:f2:11:39:b3:
                    b2:c5:20:91:03:85:c3:06:3d:f3:6e:8f:ec:d2:f3:
                    ec:c0:1d:b5:da:b4:c6:cc:93:96:79:86:08:7b:e9:
                    33:bd:16:81:45:01:1f:02:07:08:54:ab:95:32:96:
                    7b:2a:1f:6b:90:35:ac:b5:76:9f:da:db:4e:53:4a:
                    1b:cf:42:9d:6a:e4:4a:c0:51:81:7e:63:55:ee:03:
                    40:7d:14:2b:58:bc:b2:47:49:8d:65:a1:07:22:7d:
                    d8:c6:ed:d2:a4:21:14:07:ca:ca:26:8a:e4:03:73:
                    c9:6b:5d:50:7c:33:47:1f:c3:9b:1f:c2:37:4a:7e:
                    63:34:0c:43:8d:9a:6b:a6:58:6b:5a:0a:9d:70:d4:
                    2d:eb:17:f8:44:6f:30:d5:f5:e0:0c:b6:a5:ae:2f:
                    cb:f1:20:ff:d0:7e:ce:91:24:42:9d:d8:15:39:f5:
                    82:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:CF:3E:A7:59:61:F4:C2:E6:C2:21:BC:13:A9:E3:D4:E9:86:15:15
            X509v3 Authority Key Identifier:
                keyid:93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3136342e3136332e31322e302f32332d3233203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:a8:4a:29:7d:ec:2a:d2:4b:f5:2f:a8:fd:0d:be:ac:c9:3e:
         90:1c:51:39:29:3b:aa:36:a4:1c:81:80:6b:87:fe:b4:d7:de:
         49:c5:4c:96:38:c0:22:9f:ad:a7:95:c2:f4:eb:2a:84:5a:63:
         60:2e:d1:e0:5c:83:04:46:f2:67:fd:12:ce:47:a8:e5:e2:94:
         9a:cb:3c:b9:34:fe:5d:c8:2c:c2:dc:3b:7c:8b:dc:e3:1d:87:
         db:d8:1c:79:02:cc:0f:4d:e3:3f:34:b5:12:43:77:d0:35:04:
         41:21:bd:6a:65:88:8d:0b:0a:5c:09:82:3e:fa:19:78:8e:59:
         01:55:0b:1a:ea:06:7f:8a:23:ce:0f:a9:69:e5:df:78:3d:33:
         75:03:83:13:fa:64:48:fa:9f:56:12:b5:29:98:c6:83:05:83:
         a9:66:be:c6:94:ed:b2:5b:db:cf:98:b3:83:13:99:bd:e8:6f:
         93:88:fa:c6:c3:8e:0b:b9:28:5e:6d:a5:7c:1b:f9:dd:c1:16:
         49:7e:f6:a5:53:fb:cb:49:9e:7e:4f:fe:15:ef:79:39:80:9a:
         da:c8:8b:0a:63:48:76:7c:ec:32:3a:14:8f:b5:9c:e4:bc:5a:
         8e:cb:a1:9f:19:b5:68:76:0b:c0:ef:b3:08:cf:fa:db:7b:1f:
         fa:c5:8b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:46:52 2025 by rpki-client