Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/323830343a3935343a363130303a3a2f34302d3430203d3e20323633303733.roa
File:                     323830343a3935343a363130303a3a2f34302d3430203d3e20323633303733.roa (raw, json)
Hash identifier:          /Su1uAgp5pHEJ0RbyEG9wEWFIF8JotijU9pcweGu84I=
Subject key identifier:   7D:82:D0:B2:35:F6:C7:DF:5F:15:21:D5:26:52:3E:66:5C:5D:A4:2B
Certificate issuer:       /CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
Certificate serial:       3D294F0E6F34C3B45819A135004791E460C08FAE
Authority key identifier: 93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/323830343a3935343a363130303a3a2f34302d3430203d3e20323633303733.roa
Signing time:             Wed 04 Dec 2024 18:17:12 +0000
ROA not before:           Wed 04 Dec 2024 18:12:12 +0000
ROA not after:            Wed 03 Dec 2025 18:17:12 +0000
asID:                     263073
IP address blocks:        2804:954:6100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl
                          rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 03:23:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:29:4f:0e:6f:34:c3:b4:58:19:a1:35:00:47:91:e4:60:c0:8f:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
        Validity
            Not Before: Dec  4 18:12:12 2024 GMT
            Not After : Dec  3 18:17:12 2025 GMT
        Subject: CN=7D82D0B235F6C7DF5F1521D526523E665C5DA42B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:19:07:d0:60:e3:56:22:b1:92:fc:d4:19:2e:
                    07:52:96:77:53:26:5f:56:76:4a:a8:59:ee:84:ad:
                    98:05:f0:12:e1:9d:78:55:73:db:f0:31:19:29:f1:
                    0f:78:11:dc:61:ed:57:c1:cb:a6:be:a5:5e:ce:95:
                    b6:82:96:ce:1e:4f:a2:0a:5d:90:52:a7:08:3e:5a:
                    0f:fc:27:25:c5:a9:64:72:01:71:ea:d3:40:31:3b:
                    b2:ec:89:b8:80:79:51:85:6d:4c:cf:d4:91:12:8b:
                    4f:a3:33:1e:88:b3:ed:d2:54:40:46:4b:aa:ab:26:
                    97:fa:d5:fd:20:9e:72:af:37:8f:20:1a:5f:0b:0d:
                    97:ac:a2:ed:19:55:8c:78:b4:a6:95:c3:5b:4d:b6:
                    21:82:32:ac:fb:04:aa:1d:8a:8e:eb:0f:d6:cd:86:
                    2c:52:98:4f:be:10:66:5d:2e:17:e5:df:63:f6:76:
                    2b:67:b4:44:e8:e3:4e:a1:1d:85:23:58:f0:66:30:
                    cd:0d:20:a0:5a:b3:af:dc:ed:0b:d8:67:f9:9a:89:
                    d5:3e:ae:80:81:c6:da:31:ab:6c:ff:32:0e:8a:3f:
                    42:0e:3a:17:8a:55:9e:56:75:c8:6b:14:4c:81:e5:
                    78:9e:f7:a2:58:09:0c:c5:d0:6b:4e:9f:14:b8:49:
                    c6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:82:D0:B2:35:F6:C7:DF:5F:15:21:D5:26:52:3E:66:5C:5D:A4:2B
            X509v3 Authority Key Identifier:
                keyid:93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/323830343a3935343a363130303a3a2f34302d3430203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:954:6100::/40

    Signature Algorithm: sha256WithRSAEncryption
         40:4e:9a:98:b7:5e:5e:79:37:d7:f1:9c:42:b6:14:a2:9b:78:
         4a:9a:0a:92:50:62:9f:f0:70:5d:be:ed:12:1a:4b:4c:4d:c4:
         64:24:14:07:26:1c:fa:36:a1:60:f0:31:fe:72:cf:ed:79:63:
         8c:77:33:0a:bc:80:04:d3:e5:2d:95:f9:a0:25:81:54:86:e7:
         b1:a1:37:60:fa:90:77:06:91:63:b5:50:0a:5e:de:cc:55:bd:
         b4:b5:18:ab:ad:a5:0e:6e:b0:3b:6c:61:07:4e:fc:be:6e:ff:
         bc:c6:7d:42:db:43:52:74:6b:53:5a:41:9a:f7:62:f0:b2:a6:
         7e:9d:fe:fd:b2:b4:66:f9:3b:9e:26:54:28:37:b4:23:8a:02:
         ec:f6:23:1b:71:f9:9e:d0:f8:15:bc:93:eb:35:18:42:0c:10:
         fa:60:5d:62:02:a5:23:ed:74:fa:99:fb:85:21:80:6a:41:79:
         0f:95:8e:dd:9a:7a:dd:a5:8e:bf:ad:63:82:3f:e9:c5:d9:64:
         2a:a1:62:c2:76:5a:73:fb:b8:95:8c:fc:4b:9d:b9:7c:d9:9d:
         de:5d:32:5c:e2:77:d3:c6:f6:5a:6f:8d:88:a1:25:eb:73:28:
         c0:4a:14:1c:a0:19:a5:3b:3e:53:42:47:b8:9a:a5:16:1e:db:
         13:61:94:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 06:00:39 2025 by rpki-client