Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3137372e3232332e32382e302f32342d3234203d3e20323633303733.roa
File:                     3137372e3232332e32382e302f32342d3234203d3e20323633303733.roa (raw, json)
Hash identifier:          4xdx6i+7b6nzWEa2Hekt8/DLHEuEqUQWuPqkPeGNkiY=
Subject key identifier:   4D:54:7B:1B:FB:3C:38:53:B0:7E:E4:67:3F:A3:DF:DE:AE:18:ED:63
Certificate issuer:       /CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
Certificate serial:       71FCBCE31892DBA9DCE4257783E4126BD5DB4B6E
Authority key identifier: 93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3137372e3232332e32382e302f32342d3234203d3e20323633303733.roa
Signing time:             Wed 03 Apr 2024 21:13:26 +0000
ROA not before:           Wed 03 Apr 2024 21:08:26 +0000
ROA not after:            Wed 02 Apr 2025 21:13:26 +0000
asID:                     263073
IP address blocks:        177.223.28.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl
                          rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:fc:bc:e3:18:92:db:a9:dc:e4:25:77:83:e4:12:6b:d5:db:4b:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
        Validity
            Not Before: Apr  3 21:08:26 2024 GMT
            Not After : Apr  2 21:13:26 2025 GMT
        Subject: CN=4D547B1BFB3C3853B07EE4673FA3DFDEAE18ED63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:64:5a:20:59:9d:20:80:13:c0:89:cf:ad:a0:
                    c3:43:4e:5c:63:e4:e6:6d:25:0f:16:12:b6:43:10:
                    73:1b:51:af:4d:e5:e4:30:38:df:4b:24:a4:3e:6a:
                    b9:51:55:a3:e5:a2:1e:f8:20:5f:ac:0b:3e:4f:31:
                    57:c1:15:a9:81:23:d4:07:4e:b9:ef:58:de:33:af:
                    c1:65:47:ec:b0:45:71:4b:a0:8f:25:2e:a2:76:d2:
                    55:9a:9f:a9:65:c5:9a:77:14:f9:8f:9e:2e:cd:3b:
                    3e:fd:3d:e7:8c:a4:2b:55:a0:a2:2b:f6:4b:48:9a:
                    c3:75:44:58:f2:30:12:7e:46:ee:30:47:cb:ee:75:
                    07:ea:46:9a:6b:dc:27:e5:3d:38:b2:86:0b:a3:3c:
                    b3:84:2e:23:0e:ab:28:55:ae:6a:70:8c:7c:8d:db:
                    35:ce:14:b7:32:3a:00:c2:88:96:8f:89:61:45:8e:
                    e6:de:81:ae:43:06:7a:f2:fe:ec:70:9c:f1:72:76:
                    e8:db:59:a8:8a:4c:f5:3d:3f:64:cf:b6:6b:96:5e:
                    47:dc:59:7b:29:54:cd:3c:10:cf:b6:fe:97:2e:85:
                    16:56:f3:53:ae:b0:4c:18:9e:35:d3:a0:60:c3:67:
                    22:13:84:c5:09:51:9c:96:e8:62:aa:41:a4:39:c4:
                    2f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:54:7B:1B:FB:3C:38:53:B0:7E:E4:67:3F:A3:DF:DE:AE:18:ED:63
            X509v3 Authority Key Identifier:
                keyid:93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3137372e3232332e32382e302f32342d3234203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:ce:b6:38:24:26:fd:c0:cc:4c:29:b4:27:1c:ed:85:cd:be:
         18:14:48:a9:6f:1c:24:23:93:64:20:cd:5a:a3:1b:2b:98:c1:
         0e:dc:0c:88:01:8b:34:d5:e8:03:49:32:84:28:56:1d:98:f8:
         0f:27:1a:b6:e0:52:40:0c:1d:69:c2:e6:22:1d:78:53:83:0d:
         36:d2:d5:68:72:2d:47:3b:33:7b:41:26:97:51:9a:ed:59:9f:
         57:c5:8f:30:1c:d7:01:ce:fb:ea:2f:0e:bb:83:02:1f:ed:ce:
         ca:3c:16:d1:6f:d4:2d:40:c9:b3:54:ef:a1:26:6f:9f:d5:38:
         03:93:2b:63:2b:8c:be:60:35:f2:b9:c7:b3:d9:8e:d1:62:3c:
         8e:dd:51:8d:76:86:5b:d4:80:3d:ce:13:fe:b8:96:93:55:40:
         af:2d:4c:67:a6:6e:3b:16:30:a0:67:0a:d8:5d:1a:c6:6f:78:
         5a:6d:4a:e5:dd:33:5a:56:ce:5a:19:bc:5e:68:d5:33:3c:72:
         ae:d1:17:1a:7c:c9:b8:97:5d:3d:df:f9:36:0b:b4:08:f6:f0:
         b5:22:9b:59:c9:6d:af:05:85:ac:26:9f:5a:91:47:53:c7:88:
         c8:f6:f3:29:e9:91:0c:cd:af:0e:4a:db:f8:ea:48:86:aa:82:
         4e:be:cb:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:08 2024 by rpki-client on console-ams.rpki-client.org