Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3138362e3232342e32342e302f32332d3233203d3e20323633303733.roa
File:                     3138362e3232342e32342e302f32332d3233203d3e20323633303733.roa (raw, json)
Hash identifier:          vWi0FK6sKUIgIRLTVq5OFr99IbUkFqkHiXm6hk5vpGA=
Subject key identifier:   F9:C5:0B:F1:F1:5D:63:7B:D9:94:D0:E3:CF:8C:5A:16:0B:9B:20:FF
Certificate issuer:       /CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
Certificate serial:       2EB88233BB1FFAF90333BA7C4EEB8FED072B4CF7
Authority key identifier: 93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3138362e3232342e32342e302f32332d3233203d3e20323633303733.roa
Signing time:             Wed 05 Mar 2025 22:10:12 +0000
ROA not before:           Wed 05 Mar 2025 22:05:12 +0000
ROA not after:            Wed 04 Mar 2026 22:10:12 +0000
asID:                     263073
IP address blocks:        186.224.24.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl
                          rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 03:23:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:b8:82:33:bb:1f:fa:f9:03:33:ba:7c:4e:eb:8f:ed:07:2b:4c:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
        Validity
            Not Before: Mar  5 22:05:12 2025 GMT
            Not After : Mar  4 22:10:12 2026 GMT
        Subject: CN=F9C50BF1F15D637BD994D0E3CF8C5A160B9B20FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:db:bd:32:f7:f8:bb:f4:06:a9:35:7c:fe:b9:
                    8d:a0:08:0c:77:e4:f8:8b:2c:35:c3:5c:43:b6:b7:
                    69:e1:d5:43:dd:da:7d:1c:be:07:5c:61:4f:34:90:
                    16:23:98:08:fd:83:2b:2d:f1:fe:f5:2f:4a:fb:3e:
                    11:25:96:ea:70:f8:68:58:5f:46:5b:db:12:be:dc:
                    e0:ad:83:99:cc:c1:79:45:15:4e:74:f8:8a:19:de:
                    ee:ee:d9:95:b7:86:0f:cb:c0:97:6e:ce:29:55:51:
                    16:76:e2:2b:3d:0a:e9:2d:fe:28:48:5a:7f:3d:55:
                    e7:7b:d6:50:a9:5a:fd:b1:9f:37:d2:a0:d5:2a:96:
                    f9:aa:f0:96:eb:7f:73:44:a2:7b:80:bc:44:f1:10:
                    da:a1:5b:0e:18:bd:be:6c:d9:89:17:10:29:c9:17:
                    b8:d5:3a:f8:a8:2f:3a:a9:1d:3f:cc:23:ba:f4:4c:
                    bf:cf:9f:26:2b:8b:83:ed:1e:a7:86:77:74:cb:59:
                    90:4e:e7:92:fc:59:b4:bc:3a:41:49:f3:f1:80:c7:
                    0d:7a:85:32:e2:9c:31:30:a9:a2:57:06:88:ce:65:
                    8b:f9:4b:8e:ef:90:4d:87:f7:fe:17:b3:ee:74:3f:
                    27:f6:93:85:b6:52:d6:5a:3b:87:c2:61:19:4c:5a:
                    fd:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:C5:0B:F1:F1:5D:63:7B:D9:94:D0:E3:CF:8C:5A:16:0B:9B:20:FF
            X509v3 Authority Key Identifier:
                keyid:93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3138362e3232342e32342e302f32332d3233203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:57:7a:80:c7:c8:dd:14:3f:03:9f:83:9a:ea:8e:a8:65:48:
         f8:05:a8:63:1e:a6:6e:3e:22:31:7f:c1:29:a6:25:fb:27:be:
         78:31:ec:e7:33:e1:87:64:c6:52:98:dc:5c:f7:f4:6d:48:8e:
         95:a8:05:39:95:9d:30:d2:ba:01:1e:fb:f0:55:bb:55:f2:1e:
         1c:bd:10:83:55:9e:08:82:dd:9b:08:72:dc:f5:df:ed:73:1f:
         0a:fe:c5:4c:a6:d7:4c:be:6e:3a:8f:56:ef:38:4d:b5:53:38:
         7d:60:6b:ab:c3:1c:19:f0:eb:42:dd:4d:5c:69:39:f3:26:39:
         9a:e8:d9:d8:6b:e6:5d:f0:91:f4:00:1b:59:8a:66:00:1a:b1:
         bd:84:10:58:ec:0e:20:83:ae:7a:69:e0:e3:e9:e9:c6:42:e2:
         e4:4a:8b:5a:46:05:ac:31:45:7d:b0:3b:40:df:19:b8:14:b6:
         7b:cc:69:09:b6:2b:fc:58:9a:7c:58:03:39:c8:e2:5d:0a:72:
         9b:81:79:44:8a:4f:ce:a3:68:a6:25:f0:c9:d5:c7:1c:4f:e3:
         00:49:46:08:13:c2:2f:1b:55:99:af:32:20:43:04:ad:b1:4d:
         6a:f1:0d:ac:28:5f:a4:d9:15:94:91:f8:2d:85:99:c1:66:08:
         d3:cc:24:d3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULriCM7sf+vkDM7p8TuuP7QcrTPcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTNCRTRCNDQzMTAzQzlFQTNDRTQwNjlEMDkyQzYyQjk4
RjA4OTVGRDAeFw0yNTAzMDUyMjA1MTJaFw0yNjAzMDQyMjEwMTJaMDMxMTAvBgNV
BAMTKEY5QzUwQkYxRjE1RDYzN0JEOTk0RDBFM0NGOEM1QTE2MEI5QjIwRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0270y9/i79AapNXz+uY2gCAx3
5PiLLDXDXEO2t2nh1UPd2n0cvgdcYU80kBYjmAj9gyst8f71L0r7PhEllupw+GhY
X0Zb2xK+3OCtg5nMwXlFFU50+IoZ3u7u2ZW3hg/LwJduzilVURZ24is9Cukt/ihI
Wn89Ved71lCpWv2xnzfSoNUqlvmq8Jbrf3NEonuAvETxENqhWw4Yvb5s2YkXECnJ
F7jVOvioLzqpHT/MI7r0TL/PnyYri4PtHqeGd3TLWZBO55L8WbS8OkFJ8/GAxw16
hTLinDEwqaJXBojOZYv5S47vkE2H9/4Xs+50Pyf2k4W2UtZaO4fCYRlMWv2/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU+cUL8fFdY3vZlNDjz4xaFgubIP8wHwYDVR0j
BBgwFoAUk75LRDEDyeo85AadCSxiuY8Ilf0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmI4NXM1ZVhZTmtmY2dWYVdxOTVKdWtUeTZjNm8zcXRuaFVuaU5zZkFi
a20vMS85M0JFNEI0NDMxMDNDOUVBM0NFNDA2OUQwOTJDNjJCOThGMDg5NUZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzQkU0QjQ0MzEwM0M5RUEz
Q0U0MDY5RDA5MkM2MkI5OEYwODk1RkQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZiODVzNWVYWU5rZmNnVmFXcTk1SnVrVHk2YzZvM3F0bmhVbmlOc2ZBYmttLzEv
MzEzODM2MmUzMjMyMzQyZTMyMzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzMzMDM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG64BgwDQYJKoZIhvcNAQELBQADggEBADZXeoDH
yN0UPwOfg5rqjqhlSPgFqGMepm4+IjF/wSmmJfsnvngx7Ocz4YdkxlKY3Fz39G1I
jpWoBTmVnTDSugEe+/BVu1XyHhy9EINVngiC3ZsIctz13+1zHwr+xUym10y+bjqP
Vu84TbVTOH1ga6vDHBnw60LdTVxpOfMmOZro2dhr5l3wkfQAG1mKZgAasb2EEFjs
DiCDrnpp4OPp6cZC4uRKi1pGBawxRX2wO0DfGbgUtnvMaQm2K/xYmnxYAznI4l0K
cpuBeUSKT86jaKYl8MnVxxxP4wBJRggTwi8bVZmvMiBDBK2xTWrxDawoX6TZFZSR
+C2FmcFmCNPMJNM=
-----END CERTIFICATE-----
Generated at Sat Apr 12 06:00:29 2025 by rpki-client