Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3137372e3232332e32322e302f32342d3234203d3e20323633303733.roa
File:                     3137372e3232332e32322e302f32342d3234203d3e20323633303733.roa (raw, json)
Hash identifier:          VeIdna/Pf9hdEnE+oZbeo/BxuXWcsh2Opg/lGtrnGX4=
Subject key identifier:   1C:D4:3C:8C:06:DF:A9:61:3B:B7:ED:04:92:A1:F3:ED:60:99:D3:3A
Certificate issuer:       /CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
Certificate serial:       0FDA2ED6C7925268C239C93787D36CDDAF3DDA96
Authority key identifier: 93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3137372e3232332e32322e302f32342d3234203d3e20323633303733.roa
Signing time:             Wed 03 Apr 2024 21:13:26 +0000
ROA not before:           Wed 03 Apr 2024 21:08:26 +0000
ROA not after:            Wed 02 Apr 2025 21:13:26 +0000
asID:                     263073
IP address blocks:        177.223.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl
                          rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 14:54:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:da:2e:d6:c7:92:52:68:c2:39:c9:37:87:d3:6c:dd:af:3d:da:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
        Validity
            Not Before: Apr  3 21:08:26 2024 GMT
            Not After : Apr  2 21:13:26 2025 GMT
        Subject: CN=1CD43C8C06DFA9613BB7ED0492A1F3ED6099D33A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:85:d3:5e:04:ce:95:96:77:e3:39:5e:8c:09:
                    9d:48:c0:9e:0c:ef:8a:23:f1:98:85:71:b2:68:ab:
                    4d:70:76:33:5a:4b:fe:20:f3:54:66:06:e3:b5:6f:
                    f5:e9:87:6c:a6:d6:33:38:2e:c0:ba:d5:ae:70:6f:
                    1b:4d:34:b2:d6:15:40:22:74:5a:ec:cc:21:f2:8d:
                    ce:a0:bd:08:18:66:48:f1:42:c2:0f:d4:ad:ca:25:
                    f8:83:41:62:3f:94:3f:34:4f:86:8b:4a:da:06:dc:
                    38:29:ad:fa:30:6c:85:21:3f:12:7c:14:65:a3:19:
                    fc:87:a1:ec:16:0e:7c:48:a0:51:7c:8e:cf:7f:38:
                    5b:a6:e3:e1:47:29:b6:7b:cc:45:08:7c:2b:ec:a4:
                    41:33:7b:97:06:34:46:a1:b4:5b:a0:0b:85:35:0c:
                    4f:1a:44:b4:e7:7a:80:34:6f:6b:29:6b:38:11:20:
                    31:53:12:f1:48:6b:d7:4e:5f:09:c0:ea:64:87:21:
                    66:69:e7:7c:16:6d:ae:f9:c0:3a:22:f3:5b:ef:05:
                    fc:7d:b0:56:24:33:50:eb:3e:67:70:31:ed:ae:51:
                    56:d6:68:53:2c:f6:eb:47:9f:e6:3b:e5:7b:bf:1b:
                    df:be:c7:51:11:7a:07:09:fb:52:10:20:22:5d:ee:
                    96:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D4:3C:8C:06:DF:A9:61:3B:B7:ED:04:92:A1:F3:ED:60:99:D3:3A
            X509v3 Authority Key Identifier:
                keyid:93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3137372e3232332e32322e302f32342d3234203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:7b:da:d5:28:6e:c6:af:8f:ae:21:ed:e9:b7:02:21:cb:5e:
         d1:b6:87:71:f2:a9:02:4d:6c:0c:44:15:7c:ec:14:e9:e7:a1:
         29:b3:32:0e:28:57:f6:09:7d:13:a2:4a:d4:a0:dc:75:95:ea:
         0c:4e:6b:3e:9d:7b:b1:d6:ef:0e:2b:dd:1b:71:4a:73:03:74:
         55:1f:85:ea:14:a7:09:af:12:49:d1:f7:5a:f3:fa:ae:1d:22:
         a6:c2:82:6c:1a:2a:ed:ec:9b:ea:0d:34:02:c4:9c:ff:2a:41:
         dd:44:ef:2c:58:a8:68:b0:1c:9f:fc:67:d0:58:e6:37:90:5f:
         4e:02:c5:93:ee:53:b4:28:4e:b1:2b:03:60:79:77:75:77:05:
         aa:d8:b9:49:ae:08:37:2d:0d:71:3a:81:24:29:ce:0e:43:ed:
         6c:42:7e:26:e5:bb:ee:97:8a:43:90:a1:06:7a:99:c7:7f:4e:
         05:8d:a1:b1:23:ec:41:08:1f:c2:43:f9:12:cc:a8:d0:63:fe:
         23:c3:83:7f:ed:11:f0:07:f5:a7:a4:a6:f6:44:89:af:34:13:
         64:22:b4:76:59:6f:79:44:85:53:77:ea:01:31:e0:8d:cf:86:
         95:f6:22:c9:2c:dd:e7:c2:8c:60:36:9e:37:63:6e:f6:4a:0e:
         ac:0f:f0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 15:15:24 2024 by rpki-client on console-fra.rpki-client.org