Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3138362e3233332e3130392e302f32342d3234203d3e20323633303733.roa
File:                     3138362e3233332e3130392e302f32342d3234203d3e20323633303733.roa (raw, json)
Hash identifier:          HjPcb972sAdMLT5pdW2yK0pqRSu++FXX0qJvXZUW/1w=
Subject key identifier:   01:86:D1:05:31:E6:8F:72:E7:5C:6E:8C:90:37:86:0E:80:D8:70:AB
Certificate issuer:       /CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
Certificate serial:       11E37D28303950BF4120248ABF9D7682476CB40B
Authority key identifier: 93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3138362e3233332e3130392e302f32342d3234203d3e20323633303733.roa
Signing time:             Wed 03 Apr 2024 21:13:32 +0000
ROA not before:           Wed 03 Apr 2024 21:08:32 +0000
ROA not after:            Wed 02 Apr 2025 21:13:32 +0000
asID:                     263073
IP address blocks:        186.233.109.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl
                          rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:e3:7d:28:30:39:50:bf:41:20:24:8a:bf:9d:76:82:47:6c:b4:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
        Validity
            Not Before: Apr  3 21:08:32 2024 GMT
            Not After : Apr  2 21:13:32 2025 GMT
        Subject: CN=0186D10531E68F72E75C6E8C9037860E80D870AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f9:a4:e2:89:9c:ed:e4:e8:9d:a6:6b:a4:aa:
                    31:27:23:33:6c:d8:51:3d:d2:30:5d:5e:fa:a6:f6:
                    14:d4:b3:63:68:d3:ec:61:d2:3b:c0:c2:e1:f7:ee:
                    6b:ba:52:eb:c5:ad:c9:43:af:30:62:dd:4d:5d:e2:
                    d0:b8:a4:0f:0e:38:1e:99:96:07:36:30:bd:e3:90:
                    29:d7:25:f6:c5:19:d8:b5:1a:3b:c0:cf:22:b8:ac:
                    f9:87:f5:5c:49:d8:e5:d6:d4:95:6b:f7:25:14:c7:
                    ba:f2:a2:75:d3:9b:83:74:e0:c9:1f:24:83:dd:45:
                    0a:28:20:9d:bf:11:d3:7d:b0:36:15:dc:a3:5d:c0:
                    02:18:bd:4b:d5:27:01:2a:a5:ad:d5:12:f9:ba:d6:
                    06:ba:26:43:94:e0:46:77:29:0d:7c:ac:44:05:69:
                    9f:d6:5e:84:3e:c6:e8:85:e1:e8:ae:86:aa:f2:43:
                    6f:bf:1d:9f:ab:bc:54:a4:c4:98:5b:1e:3b:e2:69:
                    81:aa:70:b4:80:9b:85:45:e8:1d:4d:df:0a:c7:9b:
                    4a:83:6c:a5:88:14:7d:3e:c9:f6:5d:1d:25:10:51:
                    53:d6:ac:b5:79:d6:5c:0b:b1:e0:43:51:54:3f:c2:
                    22:6f:67:c7:af:69:3a:95:5e:b1:18:54:de:49:94:
                    2b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:86:D1:05:31:E6:8F:72:E7:5C:6E:8C:90:37:86:0E:80:D8:70:AB
            X509v3 Authority Key Identifier:
                keyid:93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3138362e3233332e3130392e302f32342d3234203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:93:99:c3:0e:16:79:da:9e:52:d2:81:75:ff:41:f0:4c:57:
         8e:4e:f8:22:f6:2e:cf:e7:b2:3e:57:57:ab:e2:4f:3d:9a:97:
         b4:64:c6:09:df:41:10:92:46:84:b1:93:bc:20:5b:f9:13:8f:
         ea:06:1f:17:08:8e:38:3e:39:9c:32:9a:09:c5:1e:3a:76:44:
         fa:3b:2a:ce:38:25:38:6a:a1:51:af:f1:b6:2d:7c:e7:05:fc:
         03:16:ee:d9:87:c1:19:97:c9:e8:99:6e:62:91:a9:96:4b:03:
         e5:48:09:c0:37:d9:d9:50:8b:4a:6d:a5:3c:62:34:b7:89:54:
         99:50:d0:9f:2a:e6:a2:6c:27:5a:77:aa:1a:69:4a:8e:4e:99:
         8d:fe:d1:e3:e6:60:87:c6:b8:8c:11:3c:b5:bf:5b:dc:f0:e1:
         39:95:89:f0:bd:70:84:36:17:ab:20:6b:89:41:fa:9a:59:8d:
         d4:ac:12:85:1f:d5:8b:ca:d0:0b:cb:15:d2:9b:ba:32:6f:fc:
         ea:26:b1:42:6f:20:6b:fd:ab:04:2b:f4:c3:47:8e:a2:24:be:
         60:27:2a:94:5d:10:11:43:5f:02:9d:22:f9:f4:6b:a2:67:04:
         e7:b2:6d:d2:fd:b6:0b:ce:27:17:88:b8:f3:71:e4:60:75:23:
         1b:60:1d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:44 2024 by rpki-client on console-fra.rpki-client.org