Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3139312e362e34382e302f32312d3231203d3e20323633303733.roa
File:                     3139312e362e34382e302f32312d3231203d3e20323633303733.roa (raw, json)
Hash identifier:          8yXC4a4Lg4uzoexuziG5bkkeiO+Caq9bFBrjsbmuT5M=
Subject key identifier:   C5:05:4A:6A:93:C1:D9:BF:C9:4B:B1:3B:E3:53:A9:2C:AB:97:0B:C9
Certificate issuer:       /CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
Certificate serial:       1620A92E658595538FB9AE9237EA2328632EC23C
Authority key identifier: 93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3139312e362e34382e302f32312d3231203d3e20323633303733.roa
Signing time:             Wed 03 Apr 2024 21:13:28 +0000
ROA not before:           Wed 03 Apr 2024 21:08:28 +0000
ROA not after:            Wed 02 Apr 2025 21:13:28 +0000
asID:                     263073
IP address blocks:        191.6.48.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl
                          rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:20:a9:2e:65:85:95:53:8f:b9:ae:92:37:ea:23:28:63:2e:c2:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
        Validity
            Not Before: Apr  3 21:08:28 2024 GMT
            Not After : Apr  2 21:13:28 2025 GMT
        Subject: CN=C5054A6A93C1D9BFC94BB13BE353A92CAB970BC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:91:84:ba:8e:68:0b:26:8d:11:f9:07:c8:72:
                    50:2a:f6:f7:83:a1:fa:bd:82:7c:29:35:5a:91:dd:
                    3d:b4:98:a3:bf:61:76:5b:6f:98:07:a3:15:94:ad:
                    b5:8c:b3:24:53:3e:4c:6d:15:2e:e0:81:9a:67:4e:
                    b3:7d:11:e9:0a:f4:e6:bc:39:81:a3:82:3c:10:e2:
                    4a:5d:ee:e5:7a:67:c7:b4:70:27:4b:62:8d:16:be:
                    8b:1a:81:51:7c:04:87:df:00:6c:75:ce:e9:8b:97:
                    e4:94:31:e0:57:ff:55:2e:7f:bd:0f:a5:a7:cd:44:
                    cf:e6:b2:c8:3c:89:71:42:2e:3d:73:c6:a0:7b:4e:
                    10:a1:84:05:97:b2:50:a8:d1:e3:85:0c:e9:90:94:
                    22:4b:bd:5c:f2:2a:29:8c:bc:ac:46:72:e5:9d:44:
                    ca:61:47:b0:7c:03:38:8f:6d:cb:c5:49:d7:11:f2:
                    af:4e:8e:4f:86:a2:59:63:96:a8:94:03:d1:b1:0f:
                    41:91:9f:aa:e4:6e:5d:95:8d:d7:26:23:e3:67:bb:
                    9f:d6:7d:83:09:fd:33:db:22:47:76:78:21:d8:de:
                    7d:42:7a:1f:37:f8:01:49:ee:df:95:6e:61:44:77:
                    3a:6e:9b:06:2a:7e:fe:b6:15:02:22:85:3c:e1:db:
                    a5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:05:4A:6A:93:C1:D9:BF:C9:4B:B1:3B:E3:53:A9:2C:AB:97:0B:C9
            X509v3 Authority Key Identifier:
                keyid:93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3139312e362e34382e302f32312d3231203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         05:5a:c6:eb:39:23:2f:c9:d0:d2:18:2d:50:e6:6f:9e:d2:c8:
         ef:60:20:53:f4:5b:f9:be:ab:9e:2c:3b:e1:92:bb:48:8b:f7:
         ee:a3:b9:5f:1f:7a:2f:90:8c:13:0a:95:cf:cd:5b:1e:48:95:
         d4:b6:aa:9d:34:76:7c:34:8e:56:e2:34:0a:64:7c:1e:df:73:
         a1:56:3f:79:48:48:ac:7a:1b:cd:ee:de:43:2a:4c:88:9b:2f:
         40:91:cb:89:45:91:94:f1:5d:f7:47:72:fb:fc:41:71:fb:c0:
         aa:8d:ed:1f:03:29:17:22:db:05:e0:72:e2:6c:63:33:05:03:
         b9:1a:50:9e:3d:10:45:8c:af:4f:52:8e:aa:b5:ee:cb:fc:9e:
         63:54:fc:15:40:be:a6:56:81:56:5f:a4:6c:98:32:be:b0:dd:
         ef:cc:6d:32:77:65:a7:bd:c3:89:56:bc:c7:3c:d5:a7:cb:51:
         e1:74:e8:3b:92:cc:6b:f1:80:dc:0a:6e:57:9c:7a:6b:7c:63:
         0d:46:9d:1e:16:c3:be:05:a4:48:4a:60:b0:7c:32:fc:fc:6b:
         8f:4a:3c:30:f7:a4:5b:ab:5f:b4:e6:e9:7e:75:77:59:03:de:
         9f:87:94:f3:c7:fe:ea:91:72:3c:8f:0a:8b:73:48:e9:ee:17:
         6c:be:9c:66
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUFiCpLmWFlVOPua6SN+ojKGMuwjwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTNCRTRCNDQzMTAzQzlFQTNDRTQwNjlEMDkyQzYyQjk4
RjA4OTVGRDAeFw0yNDA0MDMyMTA4MjhaFw0yNTA0MDIyMTEzMjhaMDMxMTAvBgNV
BAMTKEM1MDU0QTZBOTNDMUQ5QkZDOTRCQjEzQkUzNTNBOTJDQUI5NzBCQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1kYS6jmgLJo0R+QfIclAq9veD
ofq9gnwpNVqR3T20mKO/YXZbb5gHoxWUrbWMsyRTPkxtFS7ggZpnTrN9EekK9Oa8
OYGjgjwQ4kpd7uV6Z8e0cCdLYo0WvosagVF8BIffAGx1zumLl+SUMeBX/1Uuf70P
pafNRM/mssg8iXFCLj1zxqB7ThChhAWXslCo0eOFDOmQlCJLvVzyKimMvKxGcuWd
RMphR7B8AziPbcvFSdcR8q9Ojk+GolljlqiUA9GxD0GRn6rkbl2VjdcmI+Nnu5/W
fYMJ/TPbIkd2eCHY3n1Ceh83+AFJ7t+VbmFEdzpumwYqfv62FQIihTzh26VbAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUxQVKapPB2b/JS7E741OpLKuXC8kwHwYDVR0j
BBgwFoAUk75LRDEDyeo85AadCSxiuY8Ilf0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmI4NXM1ZVhZTmtmY2dWYVdxOTVKdWtUeTZjNm8zcXRuaFVuaU5zZkFi
a20vMS85M0JFNEI0NDMxMDNDOUVBM0NFNDA2OUQwOTJDNjJCOThGMDg5NUZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzQkU0QjQ0MzEwM0M5RUEz
Q0U0MDY5RDA5MkM2MkI5OEYwODk1RkQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZiODVzNWVYWU5rZmNnVmFXcTk1SnVrVHk2YzZvM3F0bmhVbmlOc2ZBYmttLzEv
MzEzOTMxMmUzNjJlMzQzODJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMyMzYzMzMw
MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEA78GMDANBgkqhkiG9w0BAQsFAAOCAQEABVrG6zkjL8nQ
0hgtUOZvntLI72AgU/Rb+b6rniw74ZK7SIv37qO5Xx96L5CMEwqVz81bHkiV1Laq
nTR2fDSOVuI0CmR8Ht9zoVY/eUhIrHobze7eQypMiJsvQJHLiUWRlPFd90dy+/xB
cfvAqo3tHwMpFyLbBeBy4mxjMwUDuRpQnj0QRYyvT1KOqrXuy/yeY1T8FUC+plaB
Vl+kbJgyvrDd78xtMndlp73DiVa8xzzVp8tR4XToO5LMa/GA3ApuV5x6a3xjDUad
HhbDvgWkSEpgsHwy/Pxrj0o8MPekW6tftObpfnV3WQPen4eU88f+6pFyPI8Ki3NI
6e4XbL6cZg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:44 2024 by rpki-client on console-fra.rpki-client.org