Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/323830343a3935343a34353a3a2f34382d3438203d3e20323633303733.roa
File:                     323830343a3935343a34353a3a2f34382d3438203d3e20323633303733.roa (raw, json)
Hash identifier:          o937VrCWazAI3Hfjkjk5n8/eYhrEKJGDW0KVWKqeNn0=
Subject key identifier:   21:E9:35:4C:34:DF:0E:93:A8:1E:D4:A5:33:3E:1F:52:F9:57:EB:7B
Certificate issuer:       /CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
Certificate serial:       583CEB22627CD03D2664B223B18713BAEB280CDA
Authority key identifier: 93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/323830343a3935343a34353a3a2f34382d3438203d3e20323633303733.roa
Signing time:             Wed 03 Apr 2024 21:13:25 +0000
ROA not before:           Wed 03 Apr 2024 21:08:25 +0000
ROA not after:            Wed 02 Apr 2025 21:13:25 +0000
asID:                     263073
IP address blocks:        2804:954:45::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl
                          rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:3c:eb:22:62:7c:d0:3d:26:64:b2:23:b1:87:13:ba:eb:28:0c:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
        Validity
            Not Before: Apr  3 21:08:25 2024 GMT
            Not After : Apr  2 21:13:25 2025 GMT
        Subject: CN=21E9354C34DF0E93A81ED4A5333E1F52F957EB7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:87:59:d1:15:ff:4a:8c:21:2e:bb:ca:71:3a:
                    51:92:26:b2:80:82:91:3b:b1:65:1f:9b:6a:18:60:
                    d5:a7:22:a5:bf:2b:32:3d:70:b4:d1:98:c3:74:c4:
                    2a:4f:c0:ab:cd:e6:ec:ed:e2:a3:8c:20:62:89:8a:
                    1e:39:2e:a9:08:09:65:2e:46:e1:c6:2a:b7:b1:70:
                    fc:26:64:92:b3:78:9b:6a:22:40:03:af:26:f4:65:
                    41:b8:1f:87:85:2c:38:82:0d:08:62:a9:07:45:61:
                    6d:e6:35:24:ad:b0:60:bd:76:75:0f:fc:9b:58:82:
                    9d:be:d7:61:04:7e:df:a8:91:05:c7:3f:e1:6c:7a:
                    ed:22:84:3c:01:04:e6:03:49:bc:99:10:7f:13:d1:
                    d1:fb:45:6a:bf:de:ee:99:4e:9c:21:d8:87:5d:97:
                    ba:89:21:f1:59:4e:4b:fd:96:21:fa:a0:5d:8b:53:
                    c7:5a:4a:1f:ec:e1:63:f8:0a:4a:e6:83:d2:fd:a3:
                    a2:73:0a:16:6d:ac:6d:c8:4d:4c:df:8b:bc:37:e6:
                    7b:15:0d:56:77:58:64:a7:cf:f3:0e:3d:e2:07:a8:
                    69:f4:9f:58:41:be:76:4d:15:7e:b6:17:8c:5e:c4:
                    36:0a:13:26:9a:68:49:ed:60:27:9c:99:b7:79:48:
                    f0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E9:35:4C:34:DF:0E:93:A8:1E:D4:A5:33:3E:1F:52:F9:57:EB:7B
            X509v3 Authority Key Identifier:
                keyid:93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/323830343a3935343a34353a3a2f34382d3438203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:954:45::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:63:cc:b3:51:b8:f5:f0:32:25:f0:83:e5:ec:61:29:ac:3f:
         4d:69:82:49:a4:5c:03:3d:49:0a:06:9e:01:db:c3:a9:fe:92:
         1b:d2:bf:7b:09:ff:d1:cc:ae:87:d2:45:e1:85:b4:1f:49:ea:
         71:f5:cc:73:05:de:4d:5d:7d:1d:fa:6b:b6:16:63:a1:b4:15:
         ac:f0:3a:49:b2:c4:d5:09:36:21:b2:a9:3c:c3:e8:ed:9e:22:
         ac:cb:30:46:aa:d9:ef:4d:ba:fd:54:f9:7c:db:a5:f8:4b:d8:
         af:04:d3:ad:89:b0:88:19:2e:10:aa:ee:da:67:69:a1:03:3b:
         b7:a4:1c:4a:55:b6:12:32:91:b7:3b:7c:20:cf:6b:49:b6:24:
         31:eb:0c:aa:6b:b3:4f:7f:fc:07:b8:0e:66:21:54:d7:c1:95:
         42:7a:7a:1f:cb:e7:e3:47:5d:55:0a:ba:25:d4:c6:3d:72:17:
         57:fa:da:10:01:fc:d4:bc:4b:f7:76:63:a2:90:b0:dd:36:46:
         5e:89:21:04:77:6c:4c:61:f3:b6:e7:d7:ff:4a:e9:22:12:af:
         0f:45:04:d4:97:06:48:78:2e:57:8e:41:ff:da:34:78:08:3b:
         39:9a:2c:56:be:6e:99:22:bd:46:ed:e1:86:82:39:86:1d:ab:
         69:7c:c5:1d
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUWDzrImJ80D0mZLIjsYcTuusoDNowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTNCRTRCNDQzMTAzQzlFQTNDRTQwNjlEMDkyQzYyQjk4
RjA4OTVGRDAeFw0yNDA0MDMyMTA4MjVaFw0yNTA0MDIyMTEzMjVaMDMxMTAvBgNV
BAMTKDIxRTkzNTRDMzRERjBFOTNBODFFRDRBNTMzM0UxRjUyRjk1N0VCN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuh1nRFf9KjCEuu8pxOlGSJrKA
gpE7sWUfm2oYYNWnIqW/KzI9cLTRmMN0xCpPwKvN5uzt4qOMIGKJih45LqkICWUu
RuHGKrexcPwmZJKzeJtqIkADryb0ZUG4H4eFLDiCDQhiqQdFYW3mNSStsGC9dnUP
/JtYgp2+12EEft+okQXHP+Fseu0ihDwBBOYDSbyZEH8T0dH7RWq/3u6ZTpwh2Idd
l7qJIfFZTkv9liH6oF2LU8daSh/s4WP4Ckrmg9L9o6JzChZtrG3ITUzfi7w35nsV
DVZ3WGSnz/MOPeIHqGn0n1hBvnZNFX62F4xexDYKEyaaaEntYCecmbd5SPBzAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUIek1TDTfDpOoHtSlMz4fUvlX63swHwYDVR0j
BBgwFoAUk75LRDEDyeo85AadCSxiuY8Ilf0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmI4NXM1ZVhZTmtmY2dWYVdxOTVKdWtUeTZjNm8zcXRuaFVuaU5zZkFi
a20vMS85M0JFNEI0NDMxMDNDOUVBM0NFNDA2OUQwOTJDNjJCOThGMDg5NUZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzQkU0QjQ0MzEwM0M5RUEz
Q0U0MDY5RDA5MkM2MkI5OEYwODk1RkQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZiODVzNWVYWU5rZmNnVmFXcTk1SnVrVHk2YzZvM3F0bmhVbmlOc2ZBYmttLzEv
MzIzODMwMzQzYTM5MzUzNDNhMzQzNTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMy
MzYzMzMwMzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACgECVQARTANBgkqhkiG9w0BAQsFAAOCAQEA
m2PMs1G49fAyJfCD5exhKaw/TWmCSaRcAz1JCgaeAdvDqf6SG9K/ewn/0cyuh9JF
4YW0H0nqcfXMcwXeTV19HfprthZjobQVrPA6SbLE1Qk2IbKpPMPo7Z4irMswRqrZ
7026/VT5fNul+EvYrwTTrYmwiBkuEKru2mdpoQM7t6QcSlW2EjKRtzt8IM9rSbYk
MesMqmuzT3/8B7gOZiFU18GVQnp6H8vn40ddVQq6JdTGPXIXV/raEAH81LxL93Zj
opCw3TZGXokhBHdsTGHztufX/0rpIhKvD0UE1JcGSHguV45B/9o0eAg7OZosVr5u
mSK9Ru3hhoI5hh2raXzFHQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:45 2024 by rpki-client on console-fra.rpki-client.org