Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3137302e37382e38312e302f32342d3234203d3e20323633303733.roa
File:                     3137302e37382e38312e302f32342d3234203d3e20323633303733.roa (raw, json)
Hash identifier:          YiZugL+u0tFhyszUuVk0w4I59jRxeZ92EC5qcpKt8rs=
Subject key identifier:   0A:4B:56:8A:6E:C3:70:3A:EE:1A:38:20:17:D5:54:FE:A1:4C:F7:51
Certificate issuer:       /CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
Certificate serial:       57B6B25CDDAA44514CF771C8E1B7E1E4875AA95E
Authority key identifier: 93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3137302e37382e38312e302f32342d3234203d3e20323633303733.roa
Signing time:             Wed 03 Apr 2024 21:13:34 +0000
ROA not before:           Wed 03 Apr 2024 21:08:34 +0000
ROA not after:            Wed 02 Apr 2025 21:13:34 +0000
asID:                     263073
IP address blocks:        170.78.81.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl
                          rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:b6:b2:5c:dd:aa:44:51:4c:f7:71:c8:e1:b7:e1:e4:87:5a:a9:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
        Validity
            Not Before: Apr  3 21:08:34 2024 GMT
            Not After : Apr  2 21:13:34 2025 GMT
        Subject: CN=0A4B568A6EC3703AEE1A382017D554FEA14CF751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6a:49:96:d5:dc:da:da:97:a6:e6:f6:6f:65:
                    c5:70:24:1b:03:e3:e7:c9:8b:64:8b:95:84:8a:3c:
                    63:ec:da:56:d5:8d:cf:6f:6d:17:43:87:aa:13:6c:
                    57:99:d6:2c:3e:05:2c:19:87:49:9f:5b:ae:70:fe:
                    d2:ed:16:ad:f4:70:4c:bc:3f:a0:41:bd:54:b7:5a:
                    82:f5:35:27:60:53:e6:24:e9:fc:0b:b1:99:1a:b1:
                    bc:6b:53:11:3c:67:9b:39:43:df:38:c0:34:9e:95:
                    7c:f7:37:cc:16:eb:5b:f4:7f:21:33:91:de:ed:85:
                    76:f2:77:c0:6d:d1:b9:94:84:98:9f:00:36:c5:ca:
                    1c:a3:e5:67:e6:c0:c2:ff:68:3f:de:df:7c:74:dd:
                    49:75:3b:0c:9e:44:00:5e:89:79:26:32:f9:a4:b2:
                    89:4d:8c:6c:e3:d6:4b:e4:d1:78:1b:67:f5:55:3c:
                    9f:32:9b:46:df:68:de:2d:11:7f:0d:ca:e5:12:98:
                    4b:ed:0a:a4:40:11:7a:92:b4:14:5e:0c:6d:74:2e:
                    f9:9a:b0:e5:e0:76:0b:8c:33:84:91:2c:89:7d:00:
                    26:30:84:93:c0:34:6a:da:86:f3:95:b0:1a:f8:41:
                    26:30:ea:af:f6:ff:ab:a1:6f:34:3f:01:60:36:13:
                    61:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:4B:56:8A:6E:C3:70:3A:EE:1A:38:20:17:D5:54:FE:A1:4C:F7:51
            X509v3 Authority Key Identifier:
                keyid:93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3137302e37382e38312e302f32342d3234203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:0a:00:35:19:d1:52:f3:33:ff:5b:31:ce:60:9b:c2:92:d0:
         0f:1a:03:c5:da:a8:5c:b3:c7:1f:34:7f:78:f0:06:5e:1b:b3:
         1f:0a:48:4a:c7:30:27:29:2f:ca:0f:c5:fe:aa:3c:ee:8e:23:
         73:36:6e:73:38:18:f8:34:a5:dd:c3:05:bb:e9:fa:20:ea:99:
         cf:f6:7a:65:bd:e3:91:95:b0:bd:20:76:af:f0:00:25:8a:a6:
         41:73:39:e1:dc:6b:f1:de:65:d1:73:ce:4c:98:35:02:b4:f5:
         3d:a5:4c:8e:68:95:83:58:85:b2:25:8c:6b:b4:25:d3:47:bf:
         6a:5a:4b:55:36:b5:b0:26:87:43:22:12:52:8b:d1:57:90:f4:
         f2:f5:5e:7c:0a:2c:b1:40:35:ac:96:90:6a:91:ac:1a:ac:0a:
         2d:b6:d8:7e:98:f9:aa:c9:36:e3:76:84:1a:e9:cd:6c:8f:c8:
         da:c6:68:b2:0b:c9:ec:c6:80:57:64:ee:bb:56:84:a3:d8:80:
         fe:db:ec:7f:cb:ba:ec:f0:b4:78:c6:74:95:6e:78:8b:9c:28:
         b0:29:81:36:75:98:70:55:64:35:ef:cc:d1:0c:ed:6c:7c:bc:
         f8:e9:f0:8a:d8:a4:d3:48:cf:aa:43:62:a4:c0:0e:26:8e:ff:
         1b:fd:c2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 06:49:00 2024 by rpki-client on console-fra.rpki-client.org