Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3138362e3233332e3130382e302f32322d3232203d3e20323633303733.roa
File:                     3138362e3233332e3130382e302f32322d3232203d3e20323633303733.roa (raw, json)
Hash identifier:          ZMrdWY9HS/V5njoOPGS9QqSr7UbdYomF+7i710MhjYE=
Subject key identifier:   F7:D2:54:ED:FC:EA:53:B1:E2:59:AC:B6:B3:0D:1C:83:C4:9C:2B:4A
Certificate issuer:       /CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
Certificate serial:       5C2005E3CCA890FEE9EE672D44FCF02BCFEFF73D
Authority key identifier: 93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3138362e3233332e3130382e302f32322d3232203d3e20323633303733.roa
Signing time:             Wed 05 Mar 2025 22:10:22 +0000
ROA not before:           Wed 05 Mar 2025 22:05:22 +0000
ROA not after:            Wed 04 Mar 2026 22:10:22 +0000
asID:                     263073
IP address blocks:        186.233.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl
                          rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 03:23:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:20:05:e3:cc:a8:90:fe:e9:ee:67:2d:44:fc:f0:2b:cf:ef:f7:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
        Validity
            Not Before: Mar  5 22:05:22 2025 GMT
            Not After : Mar  4 22:10:22 2026 GMT
        Subject: CN=F7D254EDFCEA53B1E259ACB6B30D1C83C49C2B4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:62:f9:46:b5:84:1b:1a:c8:82:b8:3c:04:ae:
                    18:6b:92:d7:23:4d:65:ff:13:c3:11:a4:cb:7f:6f:
                    08:eb:d4:66:c8:74:d9:c4:f8:08:f9:a3:e3:f8:65:
                    28:13:83:59:e7:98:3b:5b:5c:f8:a5:ac:a7:1c:26:
                    d5:3d:b0:cc:b4:5c:19:33:b2:ef:fe:df:f8:f3:af:
                    5e:e9:0a:50:e3:a3:a2:7b:14:4f:42:37:65:84:5b:
                    f2:69:fb:8c:73:33:1d:bc:9b:37:b8:4b:50:67:30:
                    0a:cd:79:c2:32:e8:28:28:44:ac:6a:83:d2:65:64:
                    1d:f7:0d:13:60:9d:2f:dc:a8:5b:c2:ff:3a:e8:c5:
                    06:4f:b3:cb:58:e2:d2:e5:72:df:0e:d0:70:9b:a7:
                    cc:82:2a:bd:61:10:2e:48:56:5a:c3:81:fa:0b:47:
                    16:95:f8:2f:fb:87:a1:00:77:ff:2a:ba:39:71:54:
                    03:3d:51:c4:f1:f8:6f:6a:4f:1f:84:3d:e8:93:b5:
                    b5:c3:81:54:0b:ef:b0:73:fd:2b:a4:3a:ce:06:57:
                    f1:57:ff:87:09:b2:e4:b5:16:13:b8:ed:bc:18:b1:
                    46:5f:05:35:11:b4:f6:52:2e:4c:18:b3:b9:61:ad:
                    78:6b:b6:23:82:bb:71:0e:35:2e:f4:f2:77:03:dc:
                    fc:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D2:54:ED:FC:EA:53:B1:E2:59:AC:B6:B3:0D:1C:83:C4:9C:2B:4A
            X509v3 Authority Key Identifier:
                keyid:93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3138362e3233332e3130382e302f32322d3232203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:77:e8:b0:b1:31:22:ba:d7:d4:79:b8:4f:34:54:91:d4:17:
         e9:56:ac:15:06:34:2d:29:48:b3:d5:81:7c:0f:59:62:1a:32:
         76:e1:4b:ba:60:fa:b2:45:34:5e:aa:12:31:35:06:dd:8f:1c:
         88:cd:46:9f:24:58:bf:ae:a9:5a:83:b8:10:b7:9a:b0:4a:5f:
         43:e4:d9:9c:12:0d:30:57:eb:fe:0c:7e:e5:4e:89:c9:dc:fc:
         60:1b:6a:d5:a4:1a:97:e8:6b:e8:c6:79:38:34:0a:bd:b5:4e:
         57:07:7c:b7:df:5a:b5:b5:01:1a:46:8d:90:e9:7e:dc:da:d8:
         4f:b6:bb:dc:8f:39:23:c7:54:e6:44:74:75:54:9e:56:50:79:
         3b:09:f5:ae:2d:c8:9a:34:df:f7:7d:84:f5:fc:46:6b:3d:4b:
         f1:02:95:70:c6:a3:19:59:97:2f:73:54:62:ef:13:48:83:37:
         7d:43:eb:59:32:d6:09:b2:b1:72:56:dd:e4:ed:32:0c:d5:98:
         35:fd:c5:49:1c:05:0f:20:3c:94:2c:b0:55:fb:97:a1:1d:44:
         a2:74:d8:b8:59:b1:f2:e6:11:4a:bf:36:d6:29:08:c1:43:1a:
         0e:a8:2e:99:10:24:4e:da:a1:62:d9:eb:41:b7:a0:43:8c:db:
         59:7c:1f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:00:56 2025 by rpki-client