Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/323830343a3935343a3630303a3a2f34302d3430203d3e20323633303733.roa
File:                     323830343a3935343a3630303a3a2f34302d3430203d3e20323633303733.roa (raw, json)
Hash identifier:          bRyW5acVk2PGP4l13csOhI1iUi2AU0un4nhF2DY7/Qc=
Subject key identifier:   6B:7A:CB:4C:F0:EA:EE:80:E0:71:4D:F6:30:C1:D2:4B:B1:AD:1E:A0
Certificate issuer:       /CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
Certificate serial:       28DBB2D8DF8648259D27AC169D7A05F76F2EEF18
Authority key identifier: 93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/323830343a3935343a3630303a3a2f34302d3430203d3e20323633303733.roa
Signing time:             Wed 03 Apr 2024 21:13:24 +0000
ROA not before:           Wed 03 Apr 2024 21:08:24 +0000
ROA not after:            Wed 02 Apr 2025 21:13:24 +0000
asID:                     263073
IP address blocks:        2804:954:600::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl
                          rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:db:b2:d8:df:86:48:25:9d:27:ac:16:9d:7a:05:f7:6f:2e:ef:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
        Validity
            Not Before: Apr  3 21:08:24 2024 GMT
            Not After : Apr  2 21:13:24 2025 GMT
        Subject: CN=6B7ACB4CF0EAEE80E0714DF630C1D24BB1AD1EA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:2a:26:67:42:8c:e5:e7:90:17:60:01:14:bf:
                    3c:d6:18:55:3f:39:6d:5a:a6:aa:55:cd:8a:9f:bf:
                    53:4a:a4:12:e2:5b:27:d9:5c:73:76:d7:93:f9:6d:
                    91:51:3c:89:30:06:a0:fc:59:d9:a4:5b:8d:e2:f3:
                    54:0a:1d:b3:81:3d:e2:9f:42:fe:c8:f6:9c:9f:33:
                    ec:20:83:93:04:f2:f4:c1:a3:8b:f3:11:0d:90:e0:
                    94:62:97:07:85:3c:f0:28:1d:f7:fd:26:74:42:83:
                    f9:4d:19:54:aa:d2:12:30:98:01:05:b4:e3:31:cb:
                    e2:93:54:75:90:19:00:cf:76:7e:42:13:db:5c:bb:
                    94:0c:5d:de:ca:d4:c2:f5:b5:1e:d4:a5:ae:52:c5:
                    e9:93:ee:c9:fe:5a:24:f9:d0:d7:e0:0d:99:9e:e2:
                    ed:12:35:be:02:ec:0a:bc:83:e3:dc:41:44:c0:35:
                    6e:ab:4a:a9:93:52:99:88:b8:81:f3:51:3d:bb:da:
                    c7:37:b0:40:79:d7:07:e5:2a:86:ab:58:07:51:ba:
                    42:64:2e:37:59:6a:fa:64:22:40:da:06:fe:d3:68:
                    35:89:32:be:02:14:0d:8a:af:2d:1d:4f:b9:06:9c:
                    45:0b:27:c3:81:2b:40:80:e2:58:11:ce:49:b9:fe:
                    43:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:7A:CB:4C:F0:EA:EE:80:E0:71:4D:F6:30:C1:D2:4B:B1:AD:1E:A0
            X509v3 Authority Key Identifier:
                keyid:93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/323830343a3935343a3630303a3a2f34302d3430203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:954:600::/40

    Signature Algorithm: sha256WithRSAEncryption
         4e:4e:ad:bb:84:8a:af:03:4a:d6:61:89:24:1e:54:7b:10:fd:
         53:e4:ab:89:e4:ff:ab:c5:3b:bb:21:bd:87:5f:ff:fe:b2:72:
         a3:8e:58:f9:bb:fa:c2:37:f8:e5:3f:d3:8c:53:c0:2f:72:6e:
         19:e0:22:6c:9b:cd:22:3e:28:e1:b2:66:d5:55:f3:af:02:d5:
         24:19:84:88:23:94:b1:d9:8b:bf:a9:54:18:cc:32:1e:e8:5c:
         20:56:5c:7b:d7:8e:6b:4d:b1:a0:ad:97:92:1c:50:67:83:0c:
         15:99:87:ca:4a:5d:17:0c:f8:7c:cb:4b:94:79:64:b7:30:45:
         fa:47:db:1d:92:e1:70:fb:1c:32:91:11:83:9a:86:2b:9b:e2:
         35:67:09:c5:93:5b:ed:95:8a:9b:34:e7:eb:18:89:b7:08:e8:
         21:db:66:15:24:08:b2:1f:db:b3:29:81:79:8e:c0:6b:59:74:
         58:c5:3c:9e:fe:a1:c3:92:34:d4:21:37:73:f2:08:9a:6b:16:
         f2:3b:a3:10:12:1a:60:f0:f8:4b:67:a4:19:fa:5d:7c:06:69:
         9c:3c:69:4f:8c:36:ae:2a:0d:4b:e5:0a:3d:8b:4f:ec:f7:e0:
         ca:88:bd:7c:6a:ab:82:99:bd:1c:fd:1f:0f:a8:37:67:a4:1f:
         da:4a:72:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:45 2024 by rpki-client on console-fra.rpki-client.org