Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3139312e362e35322e302f32342d3234203d3e20323633303733.roa
File:                     3139312e362e35322e302f32342d3234203d3e20323633303733.roa (raw, json)
Hash identifier:          EHSRKto7JZjdIM7ZoZVDHK2TxjnuHPChnntT7hI6Wzg=
Subject key identifier:   CA:D2:8C:9B:EE:8B:2C:4E:1C:05:F8:14:1B:AE:BA:1D:3D:43:88:99
Certificate issuer:       /CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
Certificate serial:       788B561CC29143DDFB3FD27E38DF7C9984F9F628
Authority key identifier: 93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3139312e362e35322e302f32342d3234203d3e20323633303733.roa
Signing time:             Wed 03 Apr 2024 21:13:31 +0000
ROA not before:           Wed 03 Apr 2024 21:08:31 +0000
ROA not after:            Wed 02 Apr 2025 21:13:31 +0000
asID:                     263073
IP address blocks:        191.6.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl
                          rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:8b:56:1c:c2:91:43:dd:fb:3f:d2:7e:38:df:7c:99:84:f9:f6:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
        Validity
            Not Before: Apr  3 21:08:31 2024 GMT
            Not After : Apr  2 21:13:31 2025 GMT
        Subject: CN=CAD28C9BEE8B2C4E1C05F8141BAEBA1D3D438899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:d3:b2:22:a0:79:d3:39:fa:0f:af:68:8a:a0:
                    8b:44:c7:33:cd:b1:91:b5:2d:75:33:f0:80:b3:6a:
                    ae:35:9e:da:fc:34:75:b9:49:a2:1e:63:49:76:41:
                    8b:64:df:66:d9:50:b7:ca:99:2a:81:de:7b:eb:da:
                    fd:71:f7:b4:73:51:59:a2:df:44:da:6d:9f:ee:ae:
                    4d:61:1b:c9:b0:17:63:ac:f6:8c:68:4c:6e:10:dd:
                    85:5c:87:13:b6:b4:bd:3d:50:c6:92:0d:61:27:4d:
                    73:78:5d:ed:7f:88:94:a1:b1:69:b8:ba:95:4c:71:
                    4d:54:b7:9c:f6:70:92:9c:a5:7f:d0:a8:e3:b3:39:
                    b6:04:39:b6:c7:1a:a5:61:8d:63:ad:73:f1:39:6b:
                    9e:62:8d:a2:99:9c:57:d5:e1:e3:43:e8:5d:fe:2c:
                    90:c3:b8:6d:de:ba:18:b1:ce:bc:52:fc:fd:ea:14:
                    54:3a:95:6b:14:1b:a9:6f:a9:ab:c3:c2:8b:03:94:
                    1d:b0:46:0f:e3:a5:e3:3c:17:26:7a:6d:f8:f6:2e:
                    c7:a4:39:41:59:53:9e:67:00:07:11:3f:89:14:69:
                    76:24:78:c2:88:9c:4f:ff:5b:25:bf:b3:4d:94:96:
                    1a:ec:70:38:c1:6c:fa:7f:6d:fe:40:d9:8e:ec:d5:
                    ec:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D2:8C:9B:EE:8B:2C:4E:1C:05:F8:14:1B:AE:BA:1D:3D:43:88:99
            X509v3 Authority Key Identifier:
                keyid:93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/3139312e362e35322e302f32342d3234203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:82:f5:8c:c5:4e:15:86:bb:85:ec:b4:d9:6f:7b:66:0d:76:
         b2:99:87:16:5e:cd:70:cb:27:f4:73:d5:b0:ce:9c:0a:25:11:
         70:97:dd:19:54:1a:aa:88:7b:02:f8:84:01:9f:41:64:fb:a6:
         26:2e:89:40:29:5b:a0:89:86:ed:27:16:e4:4f:de:d4:f3:6f:
         8e:b0:27:e1:0d:cd:35:51:1d:7a:89:ac:bd:25:a5:04:ee:be:
         42:0b:5b:6a:c4:43:1a:52:3f:32:5f:73:0c:13:10:d7:a3:f0:
         5b:b5:bf:3c:bc:a4:20:0f:03:39:07:2d:85:14:41:0c:8d:2c:
         d7:0f:70:ae:1b:b7:7d:6c:02:2c:9e:fa:c3:1c:33:c3:f6:99:
         0e:92:02:f2:91:98:11:48:de:55:18:bd:06:5f:03:97:c6:96:
         1c:6a:1e:24:14:d9:56:12:0d:f6:41:45:89:53:ac:f8:cf:87:
         25:33:b4:53:58:4a:7b:54:92:9c:a0:57:06:55:94:8f:4e:47:
         a9:96:be:3c:c9:43:9a:f2:65:76:ff:c9:c1:42:7b:32:df:b0:
         7a:b8:cf:c4:98:47:0d:77:7e:1c:38:b1:1d:c8:85:01:db:26:
         c9:08:11:c6:f6:03:13:3d:8f:a1:b8:26:59:3d:24:bf:6d:10:
         15:cd:2b:63
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUeItWHMKRQ937P9J+ON98mYT59igwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTNCRTRCNDQzMTAzQzlFQTNDRTQwNjlEMDkyQzYyQjk4
RjA4OTVGRDAeFw0yNDA0MDMyMTA4MzFaFw0yNTA0MDIyMTEzMzFaMDMxMTAvBgNV
BAMTKENBRDI4QzlCRUU4QjJDNEUxQzA1RjgxNDFCQUVCQTFEM0Q0Mzg4OTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs07IioHnTOfoPr2iKoItExzPN
sZG1LXUz8ICzaq41ntr8NHW5SaIeY0l2QYtk32bZULfKmSqB3nvr2v1x97RzUVmi
30TabZ/urk1hG8mwF2Os9oxoTG4Q3YVchxO2tL09UMaSDWEnTXN4Xe1/iJShsWm4
upVMcU1Ut5z2cJKcpX/QqOOzObYEObbHGqVhjWOtc/E5a55ijaKZnFfV4eND6F3+
LJDDuG3euhixzrxS/P3qFFQ6lWsUG6lvqavDwosDlB2wRg/jpeM8FyZ6bfj2Lsek
OUFZU55nAAcRP4kUaXYkeMKInE//WyW/s02UlhrscDjBbPp/bf5A2Y7s1ez3AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUytKMm+6LLE4cBfgUG666HT1DiJkwHwYDVR0j
BBgwFoAUk75LRDEDyeo85AadCSxiuY8Ilf0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmI4NXM1ZVhZTmtmY2dWYVdxOTVKdWtUeTZjNm8zcXRuaFVuaU5zZkFi
a20vMS85M0JFNEI0NDMxMDNDOUVBM0NFNDA2OUQwOTJDNjJCOThGMDg5NUZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzQkU0QjQ0MzEwM0M5RUEz
Q0U0MDY5RDA5MkM2MkI5OEYwODk1RkQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZiODVzNWVYWU5rZmNnVmFXcTk1SnVrVHk2YzZvM3F0bmhVbmlOc2ZBYmttLzEv
MzEzOTMxMmUzNjJlMzUzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMzMw
MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAL8GNDANBgkqhkiG9w0BAQsFAAOCAQEAL4L1jMVOFYa7
hey02W97Zg12spmHFl7NcMsn9HPVsM6cCiURcJfdGVQaqoh7AviEAZ9BZPumJi6J
QClboImG7ScW5E/e1PNvjrAn4Q3NNVEdeomsvSWlBO6+QgtbasRDGlI/Ml9zDBMQ
16PwW7W/PLykIA8DOQcthRRBDI0s1w9wrhu3fWwCLJ76wxwzw/aZDpIC8pGYEUje
VRi9Bl8Dl8aWHGoeJBTZVhIN9kFFiVOs+M+HJTO0U1hKe1SSnKBXBlWUj05HqZa+
PMlDmvJldv/JwUJ7Mt+werjPxJhHDXd+HDixHciFAdsmyQgRxvYDEz2PobgmWT0k
v20QFc0rYw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:08 2024 by rpki-client on console-ams.rpki-client.org