Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3137302e37382e38302e302f32342d3234203d3e20323633303733.roa
File:                     3137302e37382e38302e302f32342d3234203d3e20323633303733.roa (raw, json)
Hash identifier:          g/clkZP/yYPX+u6ZxMS1QCAEQjBuIfasKigzv6yjqDs=
Subject key identifier:   F7:68:54:CF:0E:39:EE:B8:82:3A:6A:04:FA:31:96:AE:8F:60:54:6E
Certificate issuer:       /CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
Certificate serial:       4643609DB294BB1D224D0C5840C2E0B4754FEC22
Authority key identifier: 93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3137302e37382e38302e302f32342d3234203d3e20323633303733.roa
Signing time:             Wed 03 Apr 2024 21:13:31 +0000
ROA not before:           Wed 03 Apr 2024 21:08:31 +0000
ROA not after:            Wed 02 Apr 2025 21:13:31 +0000
asID:                     263073
IP address blocks:        170.78.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl
                          rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:43:60:9d:b2:94:bb:1d:22:4d:0c:58:40:c2:e0:b4:75:4f:ec:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
        Validity
            Not Before: Apr  3 21:08:31 2024 GMT
            Not After : Apr  2 21:13:31 2025 GMT
        Subject: CN=F76854CF0E39EEB8823A6A04FA3196AE8F60546E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:82:e9:ec:40:d3:27:51:47:0f:b8:56:ab:36:
                    bd:cb:e0:70:39:48:91:05:69:c2:89:a4:be:08:9a:
                    30:5b:02:18:ef:e3:f7:7f:54:54:86:e8:c7:c7:72:
                    01:a9:07:09:c4:f2:eb:a9:95:29:76:bf:1a:35:0c:
                    3c:96:fe:b6:6a:fa:73:13:b5:f5:d5:38:4a:e1:ae:
                    cd:b9:41:df:f5:a0:97:f2:47:81:58:95:a1:86:4e:
                    6a:d1:f7:08:ed:c7:c5:b5:74:bc:3a:b2:47:bd:e5:
                    d1:51:d3:dd:d2:e9:03:ed:76:b8:12:a2:08:c6:1b:
                    71:20:17:81:47:ad:ef:bc:0e:d9:2b:60:1e:ef:c2:
                    a3:b9:70:65:b8:4d:4f:c2:7f:90:63:e7:bf:94:e8:
                    ee:c0:94:67:72:99:74:78:54:bc:a3:22:5b:62:3b:
                    a1:78:89:81:ef:88:7a:60:85:c8:14:a4:05:c4:8f:
                    36:f8:30:19:eb:53:11:a6:ee:89:a5:e5:79:90:38:
                    94:cc:94:08:e0:68:68:96:73:dd:1f:84:cb:0f:90:
                    47:9d:3a:f7:e0:41:28:fb:ff:38:73:5c:a0:c8:9a:
                    b0:6b:96:d7:8e:7b:f7:c5:94:6f:9a:6c:ee:17:c4:
                    c7:0d:af:a4:75:ea:60:9d:df:83:3a:7b:d7:be:c8:
                    f5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:68:54:CF:0E:39:EE:B8:82:3A:6A:04:FA:31:96:AE:8F:60:54:6E
            X509v3 Authority Key Identifier:
                keyid:93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3137302e37382e38302e302f32342d3234203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:2c:4f:48:4c:54:db:15:28:aa:83:49:a5:91:2d:e1:3a:71:
         28:73:a5:e7:8a:2a:ad:a4:6a:6c:05:37:65:ce:44:79:88:cf:
         19:a3:10:1b:8f:cc:68:9c:7f:75:f5:35:13:cc:bb:21:d4:3f:
         a1:a2:14:fc:dd:fd:43:cd:c8:70:4d:c7:ac:5a:d2:01:15:60:
         9b:77:be:f3:2a:3d:68:8c:c0:dd:d3:6f:46:c7:ab:66:ff:84:
         8a:96:f9:47:dd:26:d1:6a:be:8e:4d:4c:a8:8b:7e:cd:a1:ef:
         82:c5:bb:c2:b2:f2:ee:a5:9c:7a:4f:b0:58:81:d7:55:39:d0:
         16:2c:69:9b:d2:b0:2c:52:71:52:7a:bb:61:19:ca:bd:84:c8:
         56:e2:49:f3:97:4a:15:b4:24:64:6f:d9:2f:cf:69:4e:ad:7e:
         8b:4b:e1:17:82:a3:6a:a5:de:fc:8a:8f:4d:d3:56:b1:fc:ac:
         3e:f4:fd:16:12:2d:db:50:6c:65:3b:83:4c:f9:b3:b5:e8:b5:
         95:b0:bf:a3:fa:e2:16:08:cc:c3:41:4d:8d:8b:bc:a8:6d:34:
         7b:cd:2a:59:05:2a:e7:c0:90:43:75:4d:f7:b8:f0:08:1e:f2:
         75:5c:88:27:74:94:31:46:e5:67:61:4e:15:9f:db:e2:4a:58:
         3c:f9:e5:13
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIURkNgnbKUux0iTQxYQMLgtHVP7CIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTNCRTRCNDQzMTAzQzlFQTNDRTQwNjlEMDkyQzYyQjk4
RjA4OTVGRDAeFw0yNDA0MDMyMTA4MzFaFw0yNTA0MDIyMTEzMzFaMDMxMTAvBgNV
BAMTKEY3Njg1NENGMEUzOUVFQjg4MjNBNkEwNEZBMzE5NkFFOEY2MDU0NkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJgunsQNMnUUcPuFarNr3L4HA5
SJEFacKJpL4ImjBbAhjv4/d/VFSG6MfHcgGpBwnE8uuplSl2vxo1DDyW/rZq+nMT
tfXVOErhrs25Qd/1oJfyR4FYlaGGTmrR9wjtx8W1dLw6ske95dFR093S6QPtdrgS
ogjGG3EgF4FHre+8DtkrYB7vwqO5cGW4TU/Cf5Bj57+U6O7AlGdymXR4VLyjIlti
O6F4iYHviHpghcgUpAXEjzb4MBnrUxGm7oml5XmQOJTMlAjgaGiWc90fhMsPkEed
OvfgQSj7/zhzXKDImrBrlteOe/fFlG+abO4XxMcNr6R16mCd34M6e9e+yPW3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU92hUzw457riCOmoE+jGWro9gVG4wHwYDVR0j
BBgwFoAUk75LRDEDyeo85AadCSxiuY8Ilf0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmI4NXM1ZVhZTmtmY2dWYVdxOTVKdWtUeTZjNm8zcXRuaFVuaU5zZkFi
a20vMS85M0JFNEI0NDMxMDNDOUVBM0NFNDA2OUQwOTJDNjJCOThGMDg5NUZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzQkU0QjQ0MzEwM0M5RUEz
Q0U0MDY5RDA5MkM2MkI5OEYwODk1RkQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZiODVzNWVYWU5rZmNnVmFXcTk1SnVrVHk2YzZvM3F0bmhVbmlOc2ZBYmttLzEv
MzEzNzMwMmUzNzM4MmUzODMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMz
MzAzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqk5QMA0GCSqGSIb3DQEBCwUAA4IBAQAgLE9ITFTb
FSiqg0mlkS3hOnEoc6XniiqtpGpsBTdlzkR5iM8ZoxAbj8xonH919TUTzLsh1D+h
ohT83f1DzchwTcesWtIBFWCbd77zKj1ojMDd029Gx6tm/4SKlvlH3SbRar6OTUyo
i37Noe+CxbvCsvLupZx6T7BYgddVOdAWLGmb0rAsUnFSerthGcq9hMhW4knzl0oV
tCRkb9kvz2lOrX6LS+EXgqNqpd78io9N01ax/Kw+9P0WEi3bUGxlO4NM+bO16LWV
sL+j+uIWCMzDQU2Ni7yobTR7zSpZBSrnwJBDdU33uPAIHvJ1XIgndJQxRuVnYU4V
n9viSlg8+eUT
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:44 2024 by rpki-client on console-fra.rpki-client.org