Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/323830343a3935343a32323a3a2f34382d3438203d3e20323633303733.roa
File:                     323830343a3935343a32323a3a2f34382d3438203d3e20323633303733.roa (raw, json)
Hash identifier:          hI1pL9d0bBRskvxzZCClTjgtipI6Ow9ZVUSXwufWURQ=
Subject key identifier:   98:7D:82:BB:2E:BD:34:E2:6D:83:F5:8E:3C:D2:ED:60:FE:FC:F1:68
Certificate issuer:       /CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
Certificate serial:       3D785FFF47CCB23AC6547B57EEFA670A03826163
Authority key identifier: 93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/323830343a3935343a32323a3a2f34382d3438203d3e20323633303733.roa
Signing time:             Wed 05 Mar 2025 22:10:16 +0000
ROA not before:           Wed 05 Mar 2025 22:05:16 +0000
ROA not after:            Wed 04 Mar 2026 22:10:16 +0000
asID:                     263073
IP address blocks:        2804:954:22::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl
                          rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 03:23:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:78:5f:ff:47:cc:b2:3a:c6:54:7b:57:ee:fa:67:0a:03:82:61:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
        Validity
            Not Before: Mar  5 22:05:16 2025 GMT
            Not After : Mar  4 22:10:16 2026 GMT
        Subject: CN=987D82BB2EBD34E26D83F58E3CD2ED60FEFCF168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c5:7c:c3:3a:71:b7:f2:98:80:0d:60:20:c2:
                    a0:d9:eb:cf:e8:da:97:96:50:93:80:d3:7f:3d:86:
                    ca:d8:2c:82:5f:60:06:30:69:e2:95:8b:95:52:63:
                    91:58:52:eb:9b:6c:9c:3a:bf:43:e3:9a:63:d0:6b:
                    f6:ce:1b:00:48:8a:00:6a:c0:a4:45:03:2e:0c:70:
                    8a:0d:7f:d4:af:36:d8:4a:4f:b6:46:8f:bd:1a:9d:
                    4a:0d:ac:a4:f6:7b:ae:6d:e1:38:52:b3:ec:81:62:
                    a7:d7:9e:fc:9a:74:c3:d6:15:b5:71:c8:e2:3d:fa:
                    ad:88:06:b4:45:c7:70:2d:2d:a7:72:a8:53:e8:4e:
                    25:93:91:a0:bd:52:a7:14:d4:0a:09:cc:34:b1:28:
                    c6:f2:1f:5d:c4:19:37:53:16:45:e7:9d:2c:2e:72:
                    0d:2f:32:2f:8c:77:a1:1e:16:ce:06:24:46:29:32:
                    20:07:ba:d8:8a:7a:cd:be:b7:87:11:b3:db:35:43:
                    22:52:35:65:22:b2:d1:53:0a:a4:0d:d4:d4:f3:fa:
                    3d:94:50:7c:7c:cd:71:8d:30:55:f1:3a:64:57:1d:
                    bd:12:23:ea:5e:c1:74:33:58:42:88:a8:58:36:d0:
                    e7:d2:94:44:ed:4d:69:57:55:af:08:d2:ae:5b:4e:
                    55:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:7D:82:BB:2E:BD:34:E2:6D:83:F5:8E:3C:D2:ED:60:FE:FC:F1:68
            X509v3 Authority Key Identifier:
                keyid:93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/323830343a3935343a32323a3a2f34382d3438203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:954:22::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:ed:53:e3:0a:d6:68:45:23:74:51:19:65:ad:41:af:c1:fc:
         ec:bd:9a:96:e4:b0:6d:fa:db:c7:b7:ea:09:89:b5:f6:75:b1:
         20:8f:71:fb:9b:1a:27:5f:c1:dc:6f:1e:e3:73:91:1a:6b:01:
         4c:33:6a:e2:37:1e:e3:78:6e:e0:57:c0:1e:9d:4a:bd:09:70:
         1f:5a:f6:96:03:67:44:38:90:be:58:40:59:0d:b0:30:c9:91:
         32:15:33:1f:46:da:9d:dd:82:a8:d4:41:3f:3a:42:c9:f7:b5:
         70:83:fc:50:cb:54:8b:70:38:dd:20:41:93:4e:82:9f:0f:80:
         2e:63:51:11:2f:80:f0:a0:22:0b:fc:a0:15:06:4d:92:7f:85:
         7d:05:ba:8d:00:4e:59:08:78:2f:49:8d:ab:b3:8d:33:7e:84:
         50:fa:0d:31:7e:54:b3:c2:82:7c:50:d3:eb:5d:f5:de:cb:b5:
         17:d0:5a:f0:48:92:c8:3b:8f:ee:56:55:04:67:d0:fe:8f:ba:
         c3:66:aa:b7:d3:86:18:e4:38:3f:28:40:4b:bf:9c:3c:53:ea:
         18:60:32:81:53:ac:4e:42:85:8f:be:4b:23:13:24:eb:96:df:
         07:4f:6b:d3:83:1e:16:7f:d0:f6:d0:e6:32:bd:e2:34:02:aa:
         26:88:4d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:53:33 2025 by rpki-client