Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3137372e3232332e32362e302f32342d3234203d3e20323633303733.roa
File:                     3137372e3232332e32362e302f32342d3234203d3e20323633303733.roa (raw, json)
Hash identifier:          EZ4TOpVm8BSSc/bWh1cd6F3EA+7PmRkV9zFLdbbnavw=
Subject key identifier:   CC:70:AC:ED:CB:C2:F2:17:AE:60:98:E6:26:50:18:35:A9:F5:14:3E
Certificate issuer:       /CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
Certificate serial:       5BBFF80B0A628C59746751D9612D6F3B7EB4205A
Authority key identifier: 93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3137372e3232332e32362e302f32342d3234203d3e20323633303733.roa
Signing time:             Wed 03 Apr 2024 21:13:30 +0000
ROA not before:           Wed 03 Apr 2024 21:08:30 +0000
ROA not after:            Wed 02 Apr 2025 21:13:30 +0000
asID:                     263073
IP address blocks:        177.223.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl
                          rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:bf:f8:0b:0a:62:8c:59:74:67:51:d9:61:2d:6f:3b:7e:b4:20:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
        Validity
            Not Before: Apr  3 21:08:30 2024 GMT
            Not After : Apr  2 21:13:30 2025 GMT
        Subject: CN=CC70ACEDCBC2F217AE6098E626501835A9F5143E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:95:e3:c4:a7:29:df:1d:66:a2:f5:90:91:56:
                    3c:27:da:38:2d:d2:d8:7e:6d:78:f7:eb:ed:70:ac:
                    75:c6:ba:8c:da:f1:33:25:96:85:4f:65:14:79:d3:
                    79:d4:98:e8:a3:a2:02:04:c3:67:6d:aa:4d:62:d5:
                    39:71:1c:a7:fc:9e:49:a5:76:f5:05:5e:ae:e9:79:
                    9e:39:32:9f:7e:96:2e:17:a8:11:ac:99:aa:09:fc:
                    fa:71:53:c6:e5:73:ff:dd:6f:ec:dd:50:93:98:3f:
                    e4:c3:74:8f:77:4e:95:4c:01:4c:a6:70:37:6d:4a:
                    d9:c2:4f:6f:ff:da:01:21:cb:87:11:76:ff:89:61:
                    4b:ce:10:fc:65:1a:83:8f:ff:bd:88:5f:bd:2b:5d:
                    5d:24:bb:dd:dc:f8:dc:b5:38:11:14:03:dd:e7:b3:
                    ec:a0:eb:39:e1:e4:3f:75:0a:37:61:cb:c2:83:c0:
                    77:23:e7:7e:54:07:d0:ea:b5:6e:0b:f7:34:ef:ec:
                    50:8c:53:47:58:79:9c:0f:7c:27:05:c9:af:bd:95:
                    8e:9f:dd:aa:88:ac:74:7e:0e:1d:38:90:3c:2c:7a:
                    54:d9:a1:b9:41:e6:8b:38:56:a0:89:42:1a:3f:57:
                    bf:7f:c1:bd:8a:2a:3a:11:da:1d:f9:c7:c7:9b:4d:
                    b2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:70:AC:ED:CB:C2:F2:17:AE:60:98:E6:26:50:18:35:A9:F5:14:3E
            X509v3 Authority Key Identifier:
                keyid:93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3137372e3232332e32362e302f32342d3234203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:23:7d:26:5d:4f:c5:89:5b:7a:fd:b9:89:67:0a:fe:3b:45:
         b7:f7:1b:4d:bf:90:da:1c:bb:3b:62:63:2f:0e:b4:44:98:e5:
         ae:8a:c8:d6:07:b6:90:b4:d7:a5:4d:48:a0:16:9b:bf:22:4c:
         44:73:47:d7:bf:7a:e1:0f:b9:93:fa:d4:58:05:53:f2:b8:13:
         85:3a:d5:17:d6:8d:83:de:71:38:81:11:06:a6:b6:49:48:7b:
         ac:37:16:28:51:30:b3:c7:74:ba:bd:dc:82:d6:a0:ea:a4:3e:
         31:30:b5:26:ad:b9:50:5c:86:a3:cf:3a:71:98:4c:86:f4:7b:
         a0:bc:fe:69:2e:9b:b4:eb:89:ca:8e:87:2c:ab:31:09:ab:3b:
         36:d1:bd:f5:7c:1c:04:74:ac:21:55:7b:79:ea:d7:44:ce:e9:
         11:64:45:6e:97:6b:3d:d1:44:d2:b3:cb:f6:49:12:7c:80:e3:
         af:4f:63:c1:6a:f0:48:ae:6b:08:63:22:e5:74:c7:f6:9b:07:
         2f:cc:17:b6:86:da:7a:40:ff:79:c0:fe:f9:d6:67:85:43:ef:
         ec:c9:f2:d0:64:6b:cf:c0:18:d1:fc:3a:4b:a2:c2:7f:6e:e1:
         ea:04:26:f7:aa:94:6a:98:31:50:19:fa:03:32:a3:9c:67:03:
         03:00:be:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:44 2024 by rpki-client on console-fra.rpki-client.org