Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3137372e3232332e32332e302f32342d3234203d3e20323633303733.roa
File:                     3137372e3232332e32332e302f32342d3234203d3e20323633303733.roa (raw, json)
Hash identifier:          75wboHSET5/GXzRF1oS4itvJ+W8Sq7o2vKagYElaRMI=
Subject key identifier:   DD:3F:D3:89:17:4A:43:6D:2F:9D:A5:A6:88:F2:6A:7E:64:0A:49:80
Certificate issuer:       /CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
Certificate serial:       3433764F62FBF5DECC9FCCEBF6CFB1B01B2F9107
Authority key identifier: 93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3137372e3232332e32332e302f32342d3234203d3e20323633303733.roa
Signing time:             Wed 03 Apr 2024 21:13:23 +0000
ROA not before:           Wed 03 Apr 2024 21:08:23 +0000
ROA not after:            Wed 02 Apr 2025 21:13:23 +0000
asID:                     263073
IP address blocks:        177.223.23.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl
                          rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:33:76:4f:62:fb:f5:de:cc:9f:cc:eb:f6:cf:b1:b0:1b:2f:91:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
        Validity
            Not Before: Apr  3 21:08:23 2024 GMT
            Not After : Apr  2 21:13:23 2025 GMT
        Subject: CN=DD3FD389174A436D2F9DA5A688F26A7E640A4980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b4:fd:84:55:c9:57:89:49:6d:c9:ac:dc:39:
                    d5:36:62:85:30:d2:87:72:39:bc:1c:be:7c:31:7a:
                    af:51:34:9e:4d:06:a4:b0:f3:87:8a:2c:f9:5a:45:
                    fc:a8:bf:bc:37:24:23:34:80:54:94:34:78:85:b6:
                    5c:9a:a5:43:8a:88:6d:8c:eb:11:a1:8b:3a:2b:36:
                    d7:f6:6d:56:78:4e:13:cf:33:a3:55:c1:96:1e:c0:
                    df:2a:da:a2:68:e4:3b:4e:2d:fd:b8:81:fe:af:42:
                    87:ed:1f:72:ac:46:9e:4a:d1:92:8a:a4:21:90:9f:
                    02:73:b5:54:f2:a9:8b:a9:22:00:25:a5:58:88:4e:
                    95:05:c7:a0:1a:93:f6:3f:e2:9b:e9:a8:88:81:51:
                    c7:1b:05:42:83:fa:f9:40:3c:0c:0c:6f:fc:f8:3b:
                    6e:66:99:1b:b3:26:4d:34:52:76:6b:06:98:fb:94:
                    7a:d6:60:1d:b1:42:96:04:41:87:0a:4c:b3:04:90:
                    9a:93:78:ca:18:c0:6e:8e:e3:8b:de:28:9f:f3:b5:
                    ea:5a:62:19:0b:3b:20:e3:9d:35:71:d0:39:2f:16:
                    99:3c:f4:89:69:2f:62:47:b1:d7:9f:4b:59:3c:9b:
                    37:c1:5c:4b:52:e0:da:d0:21:da:7d:2f:36:ad:c1:
                    1f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:3F:D3:89:17:4A:43:6D:2F:9D:A5:A6:88:F2:6A:7E:64:0A:49:80
            X509v3 Authority Key Identifier:
                keyid:93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3137372e3232332e32332e302f32342d3234203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:f3:13:83:e1:f3:70:a4:df:e6:be:c6:fe:cc:ca:4d:6a:fc:
         6c:40:59:da:86:53:c7:41:28:ae:c2:c1:ce:b8:6b:10:71:19:
         ac:84:2f:1b:db:44:1a:9a:fc:30:c5:1b:b1:33:82:fe:c9:b3:
         29:be:05:c7:f7:57:94:35:95:8a:33:ac:f8:dd:1e:73:49:96:
         0f:98:ca:53:ff:c9:5e:f5:30:b9:de:82:a8:1e:a3:eb:12:94:
         d9:9b:2f:66:c7:32:14:15:0a:0e:d9:1a:dd:cf:22:6d:dd:59:
         a3:b7:3a:50:b8:0a:08:e7:86:0b:01:fe:64:cd:15:d2:17:15:
         28:78:85:ea:89:10:9b:f7:af:23:78:e6:bf:25:d0:54:cc:ae:
         ea:86:ca:3b:59:7b:a9:6f:e5:1a:de:65:a6:8c:b8:ca:e3:7e:
         b2:d4:00:49:24:1c:92:17:d5:79:3d:09:ef:cb:01:01:b8:e1:
         01:5a:22:af:30:52:59:b4:e8:40:b8:9d:7a:2d:23:c7:bf:e5:
         ba:81:59:ea:d8:fd:15:58:69:d9:43:de:e7:7c:70:78:c7:aa:
         ff:69:33:04:9c:e2:3e:d8:02:7f:ea:c6:46:1b:47:62:b9:64:
         c0:c2:cf:09:e1:63:9b:11:09:6d:96:ac:43:db:39:09:0f:66:
         d2:90:a4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:08 2024 by rpki-client on console-ams.rpki-client.org