Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/323830343a3935343a37313a3a2f34382d3438203d3e20323633303733.roa
File:                     323830343a3935343a37313a3a2f34382d3438203d3e20323633303733.roa (raw, json)
Hash identifier:          PXrbDX74+vjUwblH3/b+bxhj4gis8vF5m5+hz6//L/c=
Subject key identifier:   36:67:F4:9F:E2:32:D1:91:EA:00:42:38:29:93:DB:1A:BE:18:7F:60
Certificate issuer:       /CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
Certificate serial:       44F90E4545D87CE7FF0E65E7C087DFDF8360CEF0
Authority key identifier: 93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/323830343a3935343a37313a3a2f34382d3438203d3e20323633303733.roa
Signing time:             Wed 03 Apr 2024 21:13:33 +0000
ROA not before:           Wed 03 Apr 2024 21:08:33 +0000
ROA not after:            Wed 02 Apr 2025 21:13:33 +0000
asID:                     263073
IP address blocks:        2804:954:71::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl
                          rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:f9:0e:45:45:d8:7c:e7:ff:0e:65:e7:c0:87:df:df:83:60:ce:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
        Validity
            Not Before: Apr  3 21:08:33 2024 GMT
            Not After : Apr  2 21:13:33 2025 GMT
        Subject: CN=3667F49FE232D191EA0042382993DB1ABE187F60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:32:72:2f:88:11:e8:c9:92:1b:c4:5f:0f:12:
                    54:23:d9:8b:58:b6:aa:12:e4:2c:2b:69:f8:35:6f:
                    c9:f0:22:a5:99:c9:56:40:76:a2:96:bd:58:6c:d9:
                    44:51:8c:ec:c6:1d:90:95:0f:a1:95:e2:05:f8:ee:
                    89:48:6d:ea:79:ff:4e:17:fc:c3:41:05:62:4e:62:
                    9f:30:09:d3:d8:bd:a4:12:16:ee:ae:5f:b8:5f:ec:
                    70:a2:13:d8:db:94:ab:1f:c2:03:4e:df:af:c5:70:
                    bf:b4:87:00:ce:13:78:0a:0f:f9:43:43:e6:7b:0e:
                    52:3c:33:ad:96:f8:d2:39:a1:ce:d2:c2:01:b9:15:
                    85:a0:5a:b7:b2:61:67:63:c4:a7:25:91:1f:d2:72:
                    de:a8:0a:9f:64:7f:b8:e4:46:93:c9:6a:0a:1e:7d:
                    6e:9d:46:28:59:15:7d:69:f2:e0:ac:f9:7c:fa:9b:
                    71:0b:3e:38:9a:55:f3:6a:0f:af:fe:ae:1a:40:91:
                    44:15:9a:48:99:6d:91:59:5b:2a:ec:ef:5c:10:ff:
                    bb:6d:cc:d9:0a:f9:ec:5f:73:94:f3:24:54:8f:8d:
                    86:c1:66:ef:d8:d4:b6:8f:b7:bf:da:dd:8d:de:bd:
                    3b:12:76:03:68:02:6f:10:2d:9f:3e:ec:d3:d7:c4:
                    6f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:67:F4:9F:E2:32:D1:91:EA:00:42:38:29:93:DB:1A:BE:18:7F:60
            X509v3 Authority Key Identifier:
                keyid:93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/323830343a3935343a37313a3a2f34382d3438203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:954:71::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:26:41:c1:70:dd:de:6b:c3:b6:a0:35:81:33:80:27:57:89:
         c0:90:01:43:95:01:2d:d0:94:b7:f5:39:86:48:c8:86:f1:10:
         84:0a:0c:82:08:fa:d0:89:33:ad:2c:ba:b8:60:0b:ba:ea:b7:
         df:3d:88:f2:db:db:ec:51:7d:3c:85:a9:77:c7:d3:4f:ea:ec:
         56:44:54:fb:4d:72:55:48:da:0d:fd:ee:f2:01:87:5e:d3:4f:
         95:8c:20:1b:c6:52:75:c1:f7:a8:82:e7:f3:06:6f:4a:f9:75:
         79:3b:1a:d9:20:ec:d2:8e:91:7c:0c:89:11:49:0a:25:f9:f6:
         a3:c0:42:26:8c:0f:ce:a8:e4:86:bf:49:f3:3b:ea:4b:ed:33:
         94:a9:0d:19:f3:28:a6:44:53:fc:d9:d7:99:82:34:6c:de:0f:
         b0:9d:c1:67:22:a2:38:c0:4c:79:6c:5e:b6:92:47:58:91:02:
         9d:ae:79:0e:a1:5d:f4:1b:8c:16:1c:9a:94:85:fc:71:7b:89:
         32:93:18:25:34:b8:27:b7:92:19:10:aa:ec:ab:6c:a8:39:9a:
         87:ac:26:47:c9:53:bb:c1:77:fe:6d:10:2b:28:33:83:4c:e8:
         2a:94:95:79:32:24:82:22:41:d2:4c:d9:f8:68:dd:20:6f:c3:
         39:d5:56:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:45 2024 by rpki-client on console-fra.rpki-client.org