Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3138362e3139342e3131322e302f32302d3230203d3e20323633303733.roa
File:                     3138362e3139342e3131322e302f32302d3230203d3e20323633303733.roa (raw, json)
Hash identifier:          zY7YjwlG0UnstiME4peufoWWZytpLbCE9WhmuVD3xJU=
Subject key identifier:   06:2E:0F:E9:C6:4F:B6:F4:A1:CB:B8:FE:E7:05:AA:CD:37:7B:29:1D
Certificate issuer:       /CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
Certificate serial:       4C68AF89E81A6468E5311FBBE90DFB88A85F640A
Authority key identifier: 93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3138362e3139342e3131322e302f32302d3230203d3e20323633303733.roa
Signing time:             Wed 04 Sep 2024 20:48:37 +0000
ROA not before:           Wed 04 Sep 2024 20:43:37 +0000
ROA not after:            Wed 03 Sep 2025 20:48:37 +0000
asID:                     263073
IP address blocks:        186.194.112.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl
                          rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:68:af:89:e8:1a:64:68:e5:31:1f:bb:e9:0d:fb:88:a8:5f:64:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
        Validity
            Not Before: Sep  4 20:43:37 2024 GMT
            Not After : Sep  3 20:48:37 2025 GMT
        Subject: CN=062E0FE9C64FB6F4A1CBB8FEE705AACD377B291D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a3:57:57:85:18:98:91:95:9d:6c:97:76:fa:
                    29:6a:48:68:9c:08:a5:e8:9d:07:a1:1a:fc:2d:d3:
                    72:17:f7:7e:9a:f1:a9:1b:42:54:d7:db:e2:06:25:
                    f8:95:b3:49:f7:51:78:9f:b2:ec:f8:05:34:f7:e6:
                    eb:af:de:b3:28:19:e5:28:aa:9e:cd:fe:d8:f9:20:
                    2f:7a:d0:df:49:51:0f:5e:ec:4a:cc:f9:c2:97:8d:
                    40:7c:2c:dd:0b:a4:3c:11:66:2d:f7:9d:bc:d4:33:
                    8b:f3:58:94:c0:57:d7:24:87:28:32:7b:21:37:2f:
                    ab:d9:f9:56:93:54:0b:27:7d:a6:e8:3f:58:53:5c:
                    80:e2:8b:e1:aa:ed:62:b7:3d:cb:01:d8:e6:b9:c8:
                    07:38:0a:34:26:95:df:5a:c6:c5:c0:e0:c0:3c:27:
                    f5:1c:8f:8e:a6:4b:6a:13:9a:f0:5c:cc:a6:84:45:
                    da:e7:d9:c1:23:ad:f9:85:a9:c2:1b:57:54:57:00:
                    98:2b:9f:99:5d:ef:0f:e3:f7:d8:0e:8e:fc:66:62:
                    92:10:fb:b4:e7:07:fb:ca:7a:4d:d3:35:c8:e9:92:
                    30:22:19:66:97:ff:2e:10:e7:34:14:0f:c6:35:13:
                    2e:28:0d:15:d7:4a:57:6b:3b:46:ea:03:65:96:a9:
                    00:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:2E:0F:E9:C6:4F:B6:F4:A1:CB:B8:FE:E7:05:AA:CD:37:7B:29:1D
            X509v3 Authority Key Identifier:
                keyid:93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3138362e3139342e3131322e302f32302d3230203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         95:fb:a0:19:63:b1:ff:89:0a:d8:32:a0:4a:e7:47:57:75:38:
         ec:05:2f:e2:20:fd:b8:fc:79:4d:0a:66:5c:10:f0:5a:86:d1:
         bb:20:c4:48:c9:cd:32:39:c4:16:18:cb:67:bf:c0:69:6f:29:
         50:70:68:17:cc:3f:45:cf:76:42:86:b5:dd:37:7b:d3:ed:72:
         75:48:65:bd:16:0c:04:c6:8c:f0:a6:3e:8b:4d:e8:11:b7:9b:
         c2:d6:f5:8f:23:d8:f6:bb:d4:4d:87:58:75:70:47:f4:dd:8e:
         87:75:25:23:87:f7:93:3c:1d:43:ce:5c:13:a3:e2:e3:f6:f6:
         55:4e:a4:d9:68:4e:7d:80:a1:91:74:dd:c1:36:96:ea:0e:2d:
         42:13:e4:ee:2a:07:16:57:de:57:c2:f5:1d:ad:1f:e6:80:e3:
         e3:ac:08:5d:b3:8a:14:77:c8:5e:98:d6:cb:e6:12:62:10:fb:
         cc:3c:1e:11:6e:c5:83:85:e4:16:26:49:94:a6:3a:85:69:f7:
         32:d0:d7:7b:29:da:01:41:98:e5:b0:be:e0:c2:9b:01:33:25:
         7f:8a:d7:44:55:a1:fc:54:a8:37:c2:d1:72:3c:bf:2d:d9:9c:
         b6:59:06:04:f5:38:70:df:f7:69:f1:90:3f:09:36:9b:2f:12:
         bc:17:0d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:08 2024 by rpki-client on console-ams.rpki-client.org