Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/323830343a3935343a35373a3a2f34382d3438203d3e20323633303733.roa
File:                     323830343a3935343a35373a3a2f34382d3438203d3e20323633303733.roa (raw, json)
Hash identifier:          mR/E90d8fPQ8tdMQEf1smEj9Een2cnmFq7VtOgb2tJ0=
Subject key identifier:   CC:CC:37:29:93:AD:03:CE:03:46:0A:F4:27:40:36:BE:48:78:5F:4B
Certificate issuer:       /CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
Certificate serial:       2605FDB24BDDEDA108836D930F2BBE998F1D01B2
Authority key identifier: 93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/323830343a3935343a35373a3a2f34382d3438203d3e20323633303733.roa
Signing time:             Fri 21 Mar 2025 21:10:27 +0000
ROA not before:           Fri 21 Mar 2025 21:05:27 +0000
ROA not after:            Fri 20 Mar 2026 21:10:27 +0000
asID:                     263073
IP address blocks:        2804:954:57::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl
                          rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 03:23:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:05:fd:b2:4b:dd:ed:a1:08:83:6d:93:0f:2b:be:99:8f:1d:01:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
        Validity
            Not Before: Mar 21 21:05:27 2025 GMT
            Not After : Mar 20 21:10:27 2026 GMT
        Subject: CN=CCCC372993AD03CE03460AF4274036BE48785F4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:47:0b:b4:e8:2c:c7:09:96:a3:59:de:9c:3a:
                    ae:75:58:c1:2a:28:6c:09:df:23:7f:f8:d6:50:9f:
                    c2:bb:b2:55:86:a8:3e:d4:42:d2:5b:58:16:6e:4d:
                    1b:f9:30:9c:84:ba:e8:01:14:55:e4:fe:f6:f1:50:
                    ca:d5:66:ca:ed:4d:d5:66:3c:16:78:cb:5b:a1:7a:
                    3d:e4:bb:4f:31:31:0e:f8:30:30:d9:cd:ea:e4:1a:
                    a9:b6:f5:bf:96:cc:4c:da:7e:1d:d7:4a:3a:02:5e:
                    ee:ca:dc:43:0b:4b:37:22:48:66:56:2a:b9:d5:22:
                    12:ff:d3:be:30:53:2f:c3:aa:96:bb:b4:c3:1f:a7:
                    27:f2:98:4d:15:47:a2:bd:3d:c9:ee:26:c3:36:8a:
                    0c:55:9f:49:89:1a:d7:2a:45:ff:b7:7b:04:e0:5e:
                    aa:e6:48:e3:d9:ea:ff:91:05:2c:7b:8d:85:28:0d:
                    3c:d2:5f:bb:aa:0d:2c:d9:3e:d8:a1:6c:c6:57:0d:
                    a6:ad:5c:ea:9e:09:f4:7c:5e:31:dc:6b:80:c5:90:
                    96:d2:ce:11:1b:03:33:69:c2:c0:6e:cf:40:be:87:
                    67:f5:de:0e:9d:a6:c5:77:96:c7:db:8a:3b:18:c1:
                    28:c4:14:f3:87:32:34:2d:4d:3f:82:d1:d4:8f:a1:
                    6c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:CC:37:29:93:AD:03:CE:03:46:0A:F4:27:40:36:BE:48:78:5F:4B
            X509v3 Authority Key Identifier:
                keyid:93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/323830343a3935343a35373a3a2f34382d3438203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:954:57::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:df:cc:16:09:78:e8:a5:72:62:a8:58:4a:07:21:a0:7e:f9:
         2e:1e:91:87:38:0b:50:fd:93:67:09:7e:fc:c8:a0:b5:ab:69:
         2c:f0:7f:0d:2b:33:12:88:95:e9:2e:77:6f:e6:4f:47:cc:8f:
         4b:00:c3:c1:31:60:a3:53:57:fc:10:c9:3e:88:31:12:e9:c5:
         7a:0c:23:7e:b3:ba:49:71:cb:e5:fd:37:12:26:bd:4b:3e:71:
         cf:ce:2b:62:cc:a2:60:7e:48:18:a3:ce:cc:f7:9f:1a:ad:6c:
         c0:47:2b:ca:4e:e0:c0:ee:20:a9:43:98:28:41:04:4b:2f:ed:
         b3:70:c3:92:16:d5:23:ff:f4:c9:ce:d3:4f:e1:f5:51:57:09:
         5b:80:01:1c:ba:e8:b3:b9:4a:0d:80:4e:03:68:44:24:db:20:
         d1:b5:5c:77:43:f7:50:99:a6:62:23:d8:47:be:41:c1:84:bc:
         3d:8c:4f:d4:96:3c:c0:b9:3e:f0:91:16:3c:2f:ca:ad:f9:b8:
         fc:25:3b:55:ef:d5:51:92:07:32:2b:38:f7:c0:de:17:9f:d3:
         fd:ea:b2:de:7d:13:5a:81:3e:42:73:ca:41:ff:8c:ea:b6:1b:
         6c:dc:a0:06:b2:a1:88:d2:53:71:fb:59:31:b0:42:4a:2d:4c:
         98:79:19:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 06:00:39 2025 by rpki-client