Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3137372e3232332e31372e302f32342d3234203d3e20323633303733.roa
File:                     3137372e3232332e31372e302f32342d3234203d3e20323633303733.roa (raw, json)
Hash identifier:          SvrHnJfT9hHM1fZph/pz1CWVB7u9925A323iWSTpkzA=
Subject key identifier:   CC:34:91:F5:9F:7E:CB:F4:A4:CA:F1:F6:A5:3C:0F:5E:B4:76:95:ED
Certificate issuer:       /CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
Certificate serial:       49345FE193762D7BCCF3EF6B66FA8B2EC33E9395
Authority key identifier: 93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3137372e3232332e31372e302f32342d3234203d3e20323633303733.roa
Signing time:             Wed 05 Mar 2025 22:10:20 +0000
ROA not before:           Wed 05 Mar 2025 22:05:20 +0000
ROA not after:            Wed 04 Mar 2026 22:10:20 +0000
asID:                     263073
IP address blocks:        177.223.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl
                          rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 03:23:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:34:5f:e1:93:76:2d:7b:cc:f3:ef:6b:66:fa:8b:2e:c3:3e:93:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
        Validity
            Not Before: Mar  5 22:05:20 2025 GMT
            Not After : Mar  4 22:10:20 2026 GMT
        Subject: CN=CC3491F59F7ECBF4A4CAF1F6A53C0F5EB47695ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:85:ca:c7:10:53:9c:59:87:7e:b2:01:d5:8d:
                    ed:58:6d:95:09:fd:b7:e5:54:c7:1f:4e:27:5c:80:
                    c6:fc:59:0b:a9:e6:b6:06:f4:60:50:e8:c1:7f:f3:
                    f8:4a:a4:85:5b:5d:f5:5f:b6:8c:50:e7:87:b0:a4:
                    13:77:63:58:d9:7d:a0:08:f6:02:40:10:1f:f1:2f:
                    61:36:90:b1:c5:88:46:28:6d:8b:dd:40:c3:c1:1b:
                    ac:c1:88:13:ce:2c:e8:6a:bb:c9:0f:3d:8a:2c:9e:
                    89:a7:33:8a:57:57:3d:b6:74:42:ad:2a:df:82:9a:
                    5f:0f:f3:60:c1:c2:4b:89:82:9d:d2:16:26:f2:43:
                    76:0e:88:91:9e:5c:7a:00:ef:c1:13:69:ff:dc:7b:
                    34:61:1e:5b:8b:e9:aa:94:74:ec:7b:de:16:20:f8:
                    c1:cb:2f:83:86:a5:10:d2:b8:36:60:fb:d9:af:94:
                    23:e8:1f:12:6e:a8:37:e2:68:51:fe:e1:eb:d2:a4:
                    d6:25:fd:eb:86:55:05:ab:47:fb:03:37:2b:c4:f8:
                    01:f8:81:cf:5e:01:70:6a:1a:06:78:9f:a1:88:2d:
                    af:7a:97:ab:4a:c4:ab:98:9f:99:6e:dd:e8:1e:83:
                    cd:01:8a:95:53:79:8b:1b:a6:f7:54:e4:db:51:da:
                    b7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:34:91:F5:9F:7E:CB:F4:A4:CA:F1:F6:A5:3C:0F:5E:B4:76:95:ED
            X509v3 Authority Key Identifier:
                keyid:93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3137372e3232332e31372e302f32342d3234203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:e8:b6:7e:4e:89:4e:e3:b6:7e:68:07:70:e1:e7:59:d0:50:
         21:98:80:e8:a4:33:6f:de:38:2a:84:ca:4f:18:df:a3:ae:39:
         57:ea:46:00:dc:60:1d:b8:ab:30:64:2d:0c:c2:69:8d:89:d6:
         bb:7a:d7:27:94:eb:ff:32:30:5d:6f:c3:01:ec:d5:0c:d2:74:
         97:53:75:1f:82:bb:35:41:16:57:55:09:94:0e:28:21:f9:f4:
         62:c3:88:f3:34:ed:cc:52:0a:04:f8:a0:1d:c5:d1:95:1f:03:
         20:98:78:19:30:c8:f2:e7:a3:ac:96:8e:4d:a0:c4:4a:b1:77:
         36:f4:2b:46:24:57:84:90:23:f9:c8:26:83:72:13:d0:a3:6e:
         5a:04:d3:60:78:c2:f4:00:8a:12:67:af:e6:bd:4b:74:b0:8c:
         65:8a:30:c2:ff:be:fe:10:44:87:6c:29:df:a1:2f:ea:b1:6a:
         a6:3e:85:ce:71:75:6a:a7:e4:20:7e:86:84:00:a3:21:3e:66:
         08:85:20:eb:90:e1:0e:fc:ae:da:ad:23:1a:3d:47:06:9c:0f:
         8a:fa:b5:50:4a:78:d8:ad:1f:7e:9f:45:3d:b1:5a:fa:2c:90:
         98:30:46:2f:a2:f3:cd:96:c3:56:f5:40:53:ad:68:1f:16:f4:
         66:74:b3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:58:38 2025 by rpki-client