Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3138362e3232342e32382e302f32342d3234203d3e20323633303733.roa
File:                     3138362e3232342e32382e302f32342d3234203d3e20323633303733.roa (raw, json)
Hash identifier:          oL/H4VCQNSTur94+u99oq4Co0wlpiAe8N9TQGW0ozxw=
Subject key identifier:   AC:03:87:FC:D2:E9:5A:0A:B1:80:11:D6:C3:EC:02:44:E3:AE:34:E7
Certificate issuer:       /CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
Certificate serial:       6E63AF46F58F6825D6070CB41F7AB9896ED75681
Authority key identifier: 93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3138362e3232342e32382e302f32342d3234203d3e20323633303733.roa
Signing time:             Wed 03 Apr 2024 21:13:28 +0000
ROA not before:           Wed 03 Apr 2024 21:08:28 +0000
ROA not after:            Wed 02 Apr 2025 21:13:28 +0000
asID:                     263073
IP address blocks:        186.224.28.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl
                          rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:63:af:46:f5:8f:68:25:d6:07:0c:b4:1f:7a:b9:89:6e:d7:56:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
        Validity
            Not Before: Apr  3 21:08:28 2024 GMT
            Not After : Apr  2 21:13:28 2025 GMT
        Subject: CN=AC0387FCD2E95A0AB18011D6C3EC0244E3AE34E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:25:19:bc:36:a6:5a:89:44:38:7b:67:5f:b7:
                    41:22:c1:0a:0f:7c:69:e4:d2:9b:b4:38:c5:52:91:
                    10:fc:bc:97:d5:14:23:7d:0b:0a:57:fd:65:1d:27:
                    29:67:a5:b1:22:2b:53:f1:4e:ca:8f:52:3d:2e:a2:
                    ac:7c:7b:ca:6b:e0:74:cd:38:1a:e1:9a:16:04:cd:
                    e1:45:ba:56:f0:61:2c:56:0e:27:33:2a:b6:68:b2:
                    87:d8:c0:99:ac:13:ff:a4:e2:10:bc:1c:59:ab:18:
                    56:f7:58:a0:18:e3:ba:04:ca:7c:b7:fa:d0:4d:44:
                    b4:30:d4:fb:0e:69:ab:a9:e7:da:88:9c:5b:e2:27:
                    e2:56:7c:d5:ae:df:3c:94:89:31:b2:84:53:d8:8d:
                    56:8d:61:da:f2:32:14:a2:22:50:eb:e8:a4:6e:9a:
                    c7:b4:cf:43:71:b6:f7:d7:62:ad:5f:98:bb:b9:90:
                    31:6e:65:be:fd:d1:1f:37:75:54:15:4d:8c:9e:27:
                    6c:37:ee:2d:e2:ea:87:37:15:17:5f:72:34:7c:2f:
                    18:57:ad:1b:35:c1:5e:2a:76:75:7d:af:f4:77:0e:
                    57:ad:08:63:bb:d0:4e:d2:5f:6f:b2:a5:a6:57:0d:
                    e1:00:d5:8e:8d:af:5e:67:14:bd:9d:0b:4b:84:bd:
                    44:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:03:87:FC:D2:E9:5A:0A:B1:80:11:D6:C3:EC:02:44:E3:AE:34:E7
            X509v3 Authority Key Identifier:
                keyid:93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3138362e3232342e32382e302f32342d3234203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:8c:63:32:98:f8:ed:7c:37:67:a4:68:e2:6f:09:70:67:28:
         a7:d3:19:d2:e1:66:3e:b1:be:7f:16:8e:f7:66:73:e5:c8:2a:
         b3:48:5e:0c:70:04:da:dc:f5:ff:2e:8c:51:73:d3:48:48:3e:
         f2:25:9f:97:ff:ae:1b:e3:ba:27:93:5d:f7:8e:2a:f2:ec:8d:
         71:c6:53:c4:b1:e5:20:91:6c:31:8e:f1:c5:00:f1:00:78:46:
         7a:00:ee:80:f9:16:f0:2c:19:be:01:58:f2:2f:05:02:b6:34:
         85:6a:b2:3c:70:ff:a6:ea:9d:55:f5:d5:af:2a:1e:27:ea:49:
         05:1a:f5:96:55:a3:30:98:00:f4:e8:71:c6:7d:d9:6c:b4:b6:
         de:50:38:61:c7:73:39:c1:c0:f0:df:a7:7e:04:f3:cd:43:ab:
         b3:35:15:c6:f5:a7:c7:2c:43:fb:d8:67:7f:8d:5c:d1:9a:33:
         d7:b5:c9:8f:77:61:64:81:03:63:a3:30:51:50:02:05:f4:b0:
         98:8b:1f:71:fc:f8:e6:ce:16:ff:d5:69:f4:19:b3:98:3b:e3:
         f3:81:49:4b:3a:79:cd:e3:75:56:f3:26:35:4d:bb:71:82:f6:
         8a:df:eb:ec:0b:d3:8e:38:36:42:6e:44:88:6c:d9:94:58:24:
         14:91:b2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:08 2024 by rpki-client on console-ams.rpki-client.org