Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3139312e362e35302e302f32342d3234203d3e20323633303733.roa
File:                     3139312e362e35302e302f32342d3234203d3e20323633303733.roa (raw, json)
Hash identifier:          j5bfdOXQXQP2QVZE3S6OdCPmaxPxSOBiWb2W5eQbljM=
Subject key identifier:   EF:C7:2B:62:84:6C:BF:76:3B:37:DA:E5:18:66:18:98:55:45:E2:D1
Certificate issuer:       /CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
Certificate serial:       6FE16E81E3448DE1BA148AAAE26A5E9DC8920786
Authority key identifier: 93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3139312e362e35302e302f32342d3234203d3e20323633303733.roa
Signing time:             Wed 03 Apr 2024 21:13:31 +0000
ROA not before:           Wed 03 Apr 2024 21:08:31 +0000
ROA not after:            Wed 02 Apr 2025 21:13:31 +0000
asID:                     263073
IP address blocks:        191.6.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl
                          rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e1:6e:81:e3:44:8d:e1:ba:14:8a:aa:e2:6a:5e:9d:c8:92:07:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
        Validity
            Not Before: Apr  3 21:08:31 2024 GMT
            Not After : Apr  2 21:13:31 2025 GMT
        Subject: CN=EFC72B62846CBF763B37DAE5186618985545E2D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:60:02:a0:b0:e0:91:39:3b:36:a5:42:58:f7:
                    08:87:9c:3c:bc:0a:94:78:cf:68:53:34:28:a5:7b:
                    2f:54:f8:c5:18:43:4f:1f:63:61:ce:0e:45:b0:95:
                    29:c5:99:a7:b5:aa:d5:03:10:98:11:65:09:76:b8:
                    8c:4c:a2:e1:fb:7f:e4:ff:35:49:12:e6:88:16:80:
                    d6:1d:f6:b9:f2:5a:e9:40:e2:67:f7:b2:7b:23:14:
                    56:0f:59:c8:39:a1:65:fa:81:c1:0f:74:ea:bc:14:
                    07:bf:6f:39:1c:ca:dc:22:0a:42:eb:e4:56:f8:8a:
                    c7:9e:a7:ae:90:ca:dd:0c:d9:60:a7:0f:b3:05:14:
                    83:07:58:6b:18:75:26:5b:e6:24:34:cf:60:03:29:
                    72:bd:28:cc:c1:b5:32:54:41:71:cd:22:5f:55:48:
                    e6:b1:f1:39:6a:ec:08:ce:ba:6a:26:c8:f6:09:29:
                    c1:92:2f:2e:a5:3c:22:1f:d5:dc:b2:41:0b:2b:14:
                    a9:a0:42:d7:e0:11:13:4c:b3:65:ff:8b:71:be:05:
                    ef:1f:a8:3a:99:c8:60:31:68:b0:d8:6d:23:79:26:
                    89:ae:73:a7:85:b0:62:bc:0a:3b:3b:ae:86:d8:25:
                    3b:00:06:d9:ac:74:59:65:b5:74:db:65:b6:fa:61:
                    48:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C7:2B:62:84:6C:BF:76:3B:37:DA:E5:18:66:18:98:55:45:E2:D1
            X509v3 Authority Key Identifier:
                keyid:93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3139312e362e35302e302f32342d3234203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:14:ca:11:9f:0f:89:87:9c:55:58:e8:83:74:a5:54:10:25:
         85:e1:6a:10:4d:9b:cc:cc:0c:c4:13:0e:88:23:d5:b9:b3:ad:
         45:27:9b:4e:2d:0c:31:ad:aa:2a:17:8a:e2:63:8c:e9:fd:28:
         3c:b0:24:da:0c:77:9d:f3:56:47:9d:12:e9:b5:c5:46:8d:c7:
         d5:b2:17:2c:88:62:63:91:8f:4c:dd:cb:9f:cf:c5:70:80:82:
         db:ad:73:07:13:a5:bf:f0:fd:42:ab:2c:88:54:7e:95:5c:b0:
         c5:df:a2:c4:9a:f2:5c:50:12:e8:d3:b5:8e:31:d5:33:5d:08:
         e2:c8:18:56:ef:9e:6f:1c:aa:5c:62:92:cd:16:1b:a8:95:0e:
         00:a5:5d:f5:96:37:96:75:8c:a8:68:01:8e:dd:08:3c:14:19:
         dc:b5:70:a9:6e:b2:e7:4f:77:4f:6c:c4:dd:f5:ef:1b:fc:19:
         c2:6b:09:14:60:fc:76:28:80:ac:de:3d:73:29:55:23:eb:d8:
         ea:4a:89:bd:da:9f:b2:7c:23:e8:37:6e:91:91:55:77:4e:b4:
         63:10:6a:57:4b:9c:5f:08:bc:d0:13:c5:fb:6e:9a:0d:96:86:
         f4:ce:e8:f4:96:93:cf:97:6d:ca:2d:2c:41:83:c5:4c:79:84:
         29:50:dc:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:08 2024 by rpki-client on console-ams.rpki-client.org