Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3138362e3233332e3130342e302f32342d3234203d3e20323633303733.roa
File:                     3138362e3233332e3130342e302f32342d3234203d3e20323633303733.roa (raw, json)
Hash identifier:          3tPVCtT4L+TpeSXJ8Qt/1sdVzPNotk+Tg4NS2ZkkrmE=
Subject key identifier:   F1:48:64:FD:D6:D2:C6:3B:18:DD:92:80:64:BF:4B:C5:65:FF:9D:F8
Certificate issuer:       /CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
Certificate serial:       236F9284EF3C23E5F6D494BC9B095301A2460B7D
Authority key identifier: 93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3138362e3233332e3130342e302f32342d3234203d3e20323633303733.roa
Signing time:             Wed 03 Apr 2024 21:13:25 +0000
ROA not before:           Wed 03 Apr 2024 21:08:25 +0000
ROA not after:            Wed 02 Apr 2025 21:13:25 +0000
asID:                     263073
IP address blocks:        186.233.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl
                          rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:6f:92:84:ef:3c:23:e5:f6:d4:94:bc:9b:09:53:01:a2:46:0b:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
        Validity
            Not Before: Apr  3 21:08:25 2024 GMT
            Not After : Apr  2 21:13:25 2025 GMT
        Subject: CN=F14864FDD6D2C63B18DD928064BF4BC565FF9DF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d4:a5:65:5f:fc:ff:9c:9e:b9:51:f7:2c:8a:
                    86:5e:f8:cc:b6:d6:7c:76:d0:12:24:0b:3d:93:37:
                    d6:ff:6e:e5:2a:fa:94:86:5e:ee:86:af:06:5f:6a:
                    62:39:e6:87:ca:f8:40:4b:d4:c1:ea:da:f6:32:bf:
                    31:b2:25:c2:da:21:ae:14:b8:fb:e7:59:76:21:8d:
                    bd:e1:21:c0:d7:99:74:e1:4c:e2:48:e1:72:50:bb:
                    f4:02:0a:cc:75:5e:66:04:3c:a1:6c:f6:16:2b:ae:
                    90:ee:b5:d0:da:19:71:f4:1c:42:03:92:64:3a:ca:
                    f9:7e:97:09:fa:a6:79:b5:0e:4f:78:63:23:50:34:
                    c2:25:0a:2d:1d:d4:91:8c:95:a0:11:0d:fa:11:40:
                    b0:89:f4:05:96:21:fa:d0:8d:77:c4:89:e1:de:04:
                    85:ed:3c:00:35:df:8a:ed:8b:90:a1:0c:60:e7:3c:
                    e9:d3:b9:4f:f3:d3:20:b8:8a:db:69:69:e9:a3:a9:
                    55:d2:d0:d5:26:19:17:b2:08:b7:39:8b:38:1f:6e:
                    50:c4:cc:bd:6c:9f:39:9b:30:ae:dc:e6:53:08:a7:
                    f7:e7:41:be:f8:04:3a:b8:cf:04:ce:60:1e:e0:f4:
                    7f:36:4d:d5:ff:a2:0a:70:df:e3:d7:c8:2e:4c:4c:
                    c8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:48:64:FD:D6:D2:C6:3B:18:DD:92:80:64:BF:4B:C5:65:FF:9D:F8
            X509v3 Authority Key Identifier:
                keyid:93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3138362e3233332e3130342e302f32342d3234203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:00:70:c3:95:3e:7d:89:c2:11:1a:8b:fa:37:4b:2f:50:f1:
         47:6f:64:0f:3e:44:0d:7c:23:84:b4:6c:cc:fa:f8:03:c2:4d:
         7e:c9:1d:2c:f0:10:fd:bf:69:6c:8a:08:16:c8:c3:2d:0e:4e:
         ae:81:7a:9d:e3:8a:55:63:b3:8e:8e:f6:87:94:69:e4:f9:d2:
         75:d6:42:2e:09:8f:a4:27:39:64:a9:19:de:f1:f4:c4:e9:48:
         78:4c:4a:eb:60:63:2f:e2:e3:bd:b2:d4:af:44:a5:88:94:5a:
         4c:b5:61:fd:29:bb:a1:81:d1:22:ce:b7:a3:16:3b:ac:63:19:
         50:3b:c2:69:a7:15:98:06:3d:4d:58:ee:a1:88:66:dc:42:1f:
         db:76:ad:ba:34:cf:fd:5c:f9:0a:ea:04:3f:c1:13:7b:d3:d6:
         34:dc:00:de:ac:d8:29:32:d5:86:8a:47:02:c3:07:34:81:67:
         8e:7f:39:d5:54:07:17:63:22:47:f1:ef:f7:c0:4f:61:bf:87:
         ea:23:db:d8:6f:07:67:f5:8c:8b:f2:f8:4c:d4:df:70:cb:81:
         94:7a:df:ee:b6:59:53:bd:ae:0c:f2:fe:9c:c1:bb:f9:20:eb:
         2a:ab:ac:f0:d9:0c:10:cd:87:49:16:e5:b4:0b:14:a0:2d:f7:
         00:a5:f9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:44 2024 by rpki-client on console-fra.rpki-client.org