Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/323830343a3935343a38373a3a2f34382d3438203d3e20323633303733.roa
File:                     323830343a3935343a38373a3a2f34382d3438203d3e20323633303733.roa (raw, json)
Hash identifier:          YiGDdhQFhexpTHf9F2sXdBYFwr7F8dmJ3G5KEyLbzJ8=
Subject key identifier:   CF:47:B5:B0:05:17:48:A6:D6:6D:1D:60:C4:A9:B7:1A:8E:3B:03:4E
Certificate issuer:       /CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
Certificate serial:       655AC5BDC14BBA26D7169F299B996A4AB7CAD003
Authority key identifier: 93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/323830343a3935343a38373a3a2f34382d3438203d3e20323633303733.roa
Signing time:             Wed 05 Mar 2025 22:10:15 +0000
ROA not before:           Wed 05 Mar 2025 22:05:15 +0000
ROA not after:            Wed 04 Mar 2026 22:10:15 +0000
asID:                     263073
IP address blocks:        2804:954:87::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl
                          rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 03:23:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:5a:c5:bd:c1:4b:ba:26:d7:16:9f:29:9b:99:6a:4a:b7:ca:d0:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
        Validity
            Not Before: Mar  5 22:05:15 2025 GMT
            Not After : Mar  4 22:10:15 2026 GMT
        Subject: CN=CF47B5B0051748A6D66D1D60C4A9B71A8E3B034E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a2:ce:12:89:58:63:21:78:60:a8:e7:22:ed:
                    44:a6:72:cd:74:a7:df:46:5f:95:5e:c0:b8:ac:d2:
                    93:fb:75:21:ad:7c:ca:4a:43:cd:c7:4e:54:fe:1b:
                    13:39:54:77:1e:76:b6:d0:ac:66:a5:da:17:7d:0d:
                    85:62:7a:63:e5:57:99:5c:22:3f:97:63:dc:0d:a4:
                    c6:56:72:19:70:f1:49:a7:ea:68:e5:6b:be:20:a0:
                    99:13:8d:ff:e0:36:f8:7b:26:85:80:a1:ae:14:65:
                    7b:2a:3f:37:ae:60:fc:44:44:79:e8:3e:9a:03:7e:
                    46:52:c6:c0:b2:84:d3:68:68:00:51:bb:f3:4a:53:
                    d4:c7:df:bb:02:28:7a:66:d8:ee:58:47:41:93:ca:
                    23:f8:49:ee:a9:d4:a4:6b:57:66:3d:68:6d:73:73:
                    bc:2a:9f:b3:9a:6e:ef:1f:1c:21:a4:2b:ed:7f:1b:
                    5c:d3:a0:61:90:f2:13:e0:6a:59:4a:12:54:68:c1:
                    46:28:60:89:45:50:ea:74:61:c4:df:d6:b4:25:de:
                    1f:08:a8:51:d7:a9:36:37:7b:d1:41:e6:4d:e7:85:
                    12:2d:1a:a6:8e:63:99:1e:c0:b1:fa:6f:fe:af:d4:
                    de:d2:25:85:31:fb:c3:5d:80:b9:d7:e1:6c:8d:78:
                    34:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:47:B5:B0:05:17:48:A6:D6:6D:1D:60:C4:A9:B7:1A:8E:3B:03:4E
            X509v3 Authority Key Identifier:
                keyid:93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/323830343a3935343a38373a3a2f34382d3438203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:954:87::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:9f:8a:95:e0:34:6f:9c:d8:a9:25:3f:a3:37:32:5c:68:b2:
         9a:86:9c:61:61:51:01:1a:b1:9a:55:ad:23:76:c7:fb:4e:f4:
         fc:e3:c9:b8:1b:1d:a7:f0:21:d9:67:18:81:13:de:2a:00:24:
         de:df:6a:0e:3c:80:19:2b:02:e6:44:c4:66:08:62:a2:41:3d:
         b2:b7:6c:c3:3e:9b:b5:75:cc:69:5e:52:b7:4d:4b:73:da:1d:
         c2:49:30:76:4d:43:d5:f4:73:7f:8f:9d:2c:66:c3:d0:44:f5:
         e3:23:39:9a:38:5c:5f:3d:45:b7:4e:9d:c5:67:d2:89:ec:f0:
         47:17:29:e4:22:57:ed:68:a2:71:e1:7f:c5:fc:0b:cb:8f:a2:
         7c:18:a5:c2:7e:fe:03:ac:7a:a0:1e:57:c7:20:93:ab:50:a6:
         ed:1c:ac:df:44:72:db:7f:fc:1a:1d:d5:4e:34:99:d6:6d:95:
         4a:24:37:b8:7a:39:ba:50:ee:ba:88:01:ef:af:0c:3c:5c:60:
         51:f7:01:fe:f9:89:3e:e3:a4:a3:03:d0:5b:7f:45:97:0c:15:
         35:b8:2b:b2:e5:b5:cb:e2:31:8a:fb:00:42:77:da:07:64:4d:
         5a:ba:01:d4:50:aa:ea:f8:62:c0:b8:e3:3d:43:b1:90:6b:a5:
         46:23:d0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:14:59 2025 by rpki-client