Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3137302e37382e38302e302f32322d3232203d3e20323633303733.roa
File:                     3137302e37382e38302e302f32322d3232203d3e20323633303733.roa (raw, json)
Hash identifier:          nzxeZF7As1atU0NyZoFDwkRE+Qo2nx0ArXHuDwVh2aQ=
Subject key identifier:   BE:AD:A1:EE:31:AC:BC:BC:98:16:B1:21:59:3C:96:3B:E1:7F:8C:34
Certificate issuer:       /CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
Certificate serial:       64E63E3F17E083C6E68BF3D7EEF662160C3B4683
Authority key identifier: 93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3137302e37382e38302e302f32322d3232203d3e20323633303733.roa
Signing time:             Wed 03 Apr 2024 21:13:23 +0000
ROA not before:           Wed 03 Apr 2024 21:08:23 +0000
ROA not after:            Wed 02 Apr 2025 21:13:23 +0000
asID:                     263073
IP address blocks:        170.78.80.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl
                          rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:e6:3e:3f:17:e0:83:c6:e6:8b:f3:d7:ee:f6:62:16:0c:3b:46:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
        Validity
            Not Before: Apr  3 21:08:23 2024 GMT
            Not After : Apr  2 21:13:23 2025 GMT
        Subject: CN=BEADA1EE31ACBCBC9816B121593C963BE17F8C34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:65:b9:df:ca:b8:73:42:cc:a0:22:ac:7e:2a:
                    7f:7c:4f:83:60:e1:87:99:92:bd:34:e3:ba:73:ec:
                    61:f1:5b:f5:7b:25:fc:c5:4d:b9:05:4f:a0:77:81:
                    37:97:dd:e2:71:05:5e:9e:0f:45:f0:ad:a1:b6:b6:
                    2e:38:f9:14:b8:bc:33:75:a2:ad:70:ca:bf:37:28:
                    3d:32:e6:5f:25:81:f5:18:9a:78:18:3d:24:f4:41:
                    c9:0f:7a:6d:a9:73:8c:de:e6:65:c1:a3:f9:4b:3d:
                    a5:68:25:09:ad:a4:f1:a7:6c:e3:00:d5:21:fe:de:
                    b4:3b:30:86:68:16:57:2c:92:da:d5:65:ec:b6:43:
                    84:42:5e:84:d9:5a:b1:77:9f:2f:1f:65:20:7e:28:
                    2a:06:f0:a5:d0:01:e1:03:79:68:00:e9:68:43:49:
                    8f:49:21:90:4e:99:92:0a:82:6c:e1:23:62:5e:7d:
                    b6:9d:a8:dc:16:2b:f7:f9:44:55:1b:ee:31:dd:dc:
                    22:ee:ee:43:84:07:9b:40:ee:95:63:d0:9a:a1:b2:
                    72:54:3a:4b:f7:3c:3f:d9:d4:71:58:2e:b9:ab:5c:
                    58:de:47:02:13:0d:b0:65:8e:0f:98:bf:55:c5:0c:
                    a0:4c:52:f6:78:12:11:d2:69:5a:88:94:85:3b:af:
                    21:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:AD:A1:EE:31:AC:BC:BC:98:16:B1:21:59:3C:96:3B:E1:7F:8C:34
            X509v3 Authority Key Identifier:
                keyid:93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3137302e37382e38302e302f32322d3232203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:82:0a:77:9d:64:71:de:b0:df:8d:39:a1:1c:07:4a:14:40:
         d7:c2:e5:75:97:ef:b4:e3:88:82:c1:9b:e3:65:3e:8b:f0:96:
         8d:f5:9c:2e:95:8b:ed:b2:38:9c:01:f9:7b:4a:24:26:10:0e:
         6c:2f:76:5b:24:4d:12:3a:c9:05:1c:78:e6:e6:c7:c5:2d:03:
         ae:64:80:8c:65:96:4a:98:e9:a2:90:9f:1c:54:df:4f:99:23:
         8e:2d:e3:3b:77:63:24:e7:00:cb:80:f6:63:ec:9f:f4:2a:a8:
         2f:fa:40:c0:c8:29:2f:64:b7:45:60:86:ad:e4:9e:53:b7:f8:
         e8:01:8d:da:18:8a:7e:20:29:ba:80:95:8e:4b:9e:3e:2e:b9:
         02:c5:53:2a:fd:a1:dd:97:3c:8c:c4:2c:40:2a:af:c1:32:83:
         30:88:27:95:e3:d3:35:fd:43:30:8f:75:97:b1:27:66:d6:73:
         ee:2c:b1:4d:b2:63:7c:d3:92:ba:53:f2:b4:fd:cf:fa:9f:78:
         74:db:a7:05:91:42:cb:d3:69:75:69:33:1a:1a:df:e3:68:13:
         ea:a5:fe:f4:f2:51:c3:77:60:41:89:64:fd:1b:88:a9:b2:2c:
         05:58:3d:bf:9b:f1:36:b9:44:2d:0c:18:0f:af:73:4d:4c:99:
         e2:75:fd:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:44 2024 by rpki-client on console-fra.rpki-client.org