Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3137372e3232332e31372e302f32342d3234203d3e20323633303733.roa
File:                     3137372e3232332e31372e302f32342d3234203d3e20323633303733.roa (raw, json)
Hash identifier:          cCEOshZ9BDDxDhS2HTiOwtUeAfGd3LoUSjnxfti6QBg=
Subject key identifier:   F3:A2:D0:22:DF:30:C9:6A:34:A7:C1:37:FB:4B:85:37:89:C8:F3:20
Certificate issuer:       /CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
Certificate serial:       431B88B5B8A073C38C35CAE95096F1DE0D7B93D3
Authority key identifier: 93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3137372e3232332e31372e302f32342d3234203d3e20323633303733.roa
Signing time:             Wed 03 Apr 2024 21:13:27 +0000
ROA not before:           Wed 03 Apr 2024 21:08:27 +0000
ROA not after:            Wed 02 Apr 2025 21:13:27 +0000
asID:                     263073
IP address blocks:        177.223.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl
                          rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:1b:88:b5:b8:a0:73:c3:8c:35:ca:e9:50:96:f1:de:0d:7b:93:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
        Validity
            Not Before: Apr  3 21:08:27 2024 GMT
            Not After : Apr  2 21:13:27 2025 GMT
        Subject: CN=F3A2D022DF30C96A34A7C137FB4B853789C8F320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:10:2e:1f:50:81:23:5a:a4:85:8f:87:1d:23:
                    fd:60:f0:4a:0c:0a:56:84:75:1d:55:3a:7a:2d:ed:
                    6a:18:80:90:dc:82:a6:2a:57:ea:34:b8:4f:9e:2a:
                    9e:5c:1d:1d:aa:08:4e:fd:4d:a3:fb:93:b8:64:cd:
                    73:64:0b:ad:ec:84:e6:3c:21:07:c2:dd:f0:af:ab:
                    62:c3:13:a4:73:15:78:3e:16:47:02:6e:f5:ac:e8:
                    a9:d9:f8:20:8d:dc:5f:a5:71:8c:a5:f2:54:7a:a8:
                    9b:75:3b:2a:f3:18:bd:98:41:97:70:bb:a0:e9:c0:
                    24:57:f2:6c:71:b9:b9:50:6c:fe:10:a6:81:f8:ab:
                    c7:15:89:d3:6b:fa:04:16:f7:03:c6:91:61:20:34:
                    38:19:7e:f2:23:2c:47:90:6a:81:73:2b:1c:16:24:
                    1d:d0:ec:c4:95:a7:13:22:22:e3:ac:e2:b2:7e:ec:
                    e5:14:44:e4:b4:3c:5d:90:b3:78:4a:b2:20:31:8b:
                    a6:50:72:80:64:df:7a:67:d6:d1:4c:99:f1:b5:8f:
                    89:5f:e9:16:ca:fd:7f:8d:a5:11:5f:07:dc:52:11:
                    3b:fe:99:2a:50:30:f9:b0:7f:c5:9b:dd:f3:02:19:
                    79:dd:7d:11:3d:a3:de:6a:99:14:20:0e:92:a5:b7:
                    61:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A2:D0:22:DF:30:C9:6A:34:A7:C1:37:FB:4B:85:37:89:C8:F3:20
            X509v3 Authority Key Identifier:
                keyid:93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3137372e3232332e31372e302f32342d3234203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:30:13:d2:df:bd:2a:f3:79:7b:4a:9f:8d:19:8c:60:13:1e:
         ae:2c:f6:cf:26:b5:35:31:e7:03:46:fa:45:a3:31:11:d6:93:
         83:d5:02:75:b5:4a:d9:82:f3:8c:25:da:1c:d7:01:d3:39:1d:
         d5:15:50:de:1e:72:bd:73:d9:6a:f3:dc:4f:51:fc:4e:dd:ff:
         e8:5b:ae:a9:45:93:11:d0:e4:86:d0:21:16:32:1c:67:1c:5b:
         d6:37:2a:ef:0b:c2:f4:d7:1f:6f:40:4b:fb:a7:43:05:fa:d6:
         8e:aa:27:3f:22:07:9e:39:a3:a4:58:4a:45:d2:f5:8b:15:ff:
         6c:9c:ba:a1:24:ab:f8:84:ad:0d:59:3c:66:63:a2:25:a0:0e:
         f9:01:9b:ae:7a:8d:fd:2c:d5:1d:fc:99:1e:57:81:60:27:c6:
         13:68:a4:c9:fd:c7:03:2d:12:6e:83:54:7f:40:33:66:04:d1:
         9e:3a:5a:ac:2a:f7:61:05:9d:bd:6f:02:95:a3:d8:09:e1:07:
         f1:c4:b1:ef:af:2b:40:c9:eb:f1:d1:d7:bc:6b:28:0f:53:80:
         d9:96:7c:ce:c2:d4:0d:c3:48:07:b0:6e:6f:3d:57:cc:dc:d9:
         37:83:a4:90:9b:10:a8:77:af:49:f5:9e:b3:8e:f1:42:73:e4:
         4e:86:44:90
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQxuItbigc8OMNcrpUJbx3g17k9MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTNCRTRCNDQzMTAzQzlFQTNDRTQwNjlEMDkyQzYyQjk4
RjA4OTVGRDAeFw0yNDA0MDMyMTA4MjdaFw0yNTA0MDIyMTEzMjdaMDMxMTAvBgNV
BAMTKEYzQTJEMDIyREYzMEM5NkEzNEE3QzEzN0ZCNEI4NTM3ODlDOEYzMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdEC4fUIEjWqSFj4cdI/1g8EoM
ClaEdR1VOnot7WoYgJDcgqYqV+o0uE+eKp5cHR2qCE79TaP7k7hkzXNkC63shOY8
IQfC3fCvq2LDE6RzFXg+FkcCbvWs6KnZ+CCN3F+lcYyl8lR6qJt1OyrzGL2YQZdw
u6DpwCRX8mxxublQbP4QpoH4q8cVidNr+gQW9wPGkWEgNDgZfvIjLEeQaoFzKxwW
JB3Q7MSVpxMiIuOs4rJ+7OUUROS0PF2Qs3hKsiAxi6ZQcoBk33pn1tFMmfG1j4lf
6RbK/X+NpRFfB9xSETv+mSpQMPmwf8Wb3fMCGXndfRE9o95qmRQgDpKlt2F1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU86LQIt8wyWo0p8E3+0uFN4nI8yAwHwYDVR0j
BBgwFoAUk75LRDEDyeo85AadCSxiuY8Ilf0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmI4NXM1ZVhZTmtmY2dWYVdxOTVKdWtUeTZjNm8zcXRuaFVuaU5zZkFi
a20vMS85M0JFNEI0NDMxMDNDOUVBM0NFNDA2OUQwOTJDNjJCOThGMDg5NUZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzQkU0QjQ0MzEwM0M5RUEz
Q0U0MDY5RDA5MkM2MkI5OEYwODk1RkQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZiODVzNWVYWU5rZmNnVmFXcTk1SnVrVHk2YzZvM3F0bmhVbmlOc2ZBYmttLzEv
MzEzNzM3MmUzMjMyMzMyZTMxMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzMDM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACx3xEwDQYJKoZIhvcNAQELBQADggEBAA8wE9Lf
vSrzeXtKn40ZjGATHq4s9s8mtTUx5wNG+kWjMRHWk4PVAnW1StmC84wl2hzXAdM5
HdUVUN4ecr1z2Wrz3E9R/E7d/+hbrqlFkxHQ5IbQIRYyHGccW9Y3Ku8LwvTXH29A
S/unQwX61o6qJz8iB545o6RYSkXS9YsV/2ycuqEkq/iErQ1ZPGZjoiWgDvkBm656
jf0s1R38mR5XgWAnxhNopMn9xwMtEm6DVH9AM2YE0Z46Wqwq92EFnb1vApWj2Anh
B/HEse+vK0DJ6/HR17xrKA9TgNmWfM7C1A3DSAewbm89V8zc2TeDpJCbEKh3r0n1
nrOO8UJz5E6GRJA=
-----END CERTIFICATE-----
Generated at Sat Jun 29 06:49:00 2024 by rpki-client on console-fra.rpki-client.org