Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/323830343a3935343a38373a3a2f34382d3438203d3e20323633303733.roa
File:                     323830343a3935343a38373a3a2f34382d3438203d3e20323633303733.roa (raw, json)
Hash identifier:          MNKlPNyakVEbrmScfyPNMWOHFXIY0wUYfPvb0PuxGRM=
Subject key identifier:   43:EB:3A:29:4A:EC:31:51:83:E4:9B:68:A6:00:B8:44:16:24:9C:1B
Certificate issuer:       /CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
Certificate serial:       300BED825F5153D38E1E96C87ECB0D9AB63F2D06
Authority key identifier: 93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/323830343a3935343a38373a3a2f34382d3438203d3e20323633303733.roa
Signing time:             Wed 03 Apr 2024 21:13:25 +0000
ROA not before:           Wed 03 Apr 2024 21:08:25 +0000
ROA not after:            Wed 02 Apr 2025 21:13:25 +0000
asID:                     263073
IP address blocks:        2804:954:87::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl
                          rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:0b:ed:82:5f:51:53:d3:8e:1e:96:c8:7e:cb:0d:9a:b6:3f:2d:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
        Validity
            Not Before: Apr  3 21:08:25 2024 GMT
            Not After : Apr  2 21:13:25 2025 GMT
        Subject: CN=43EB3A294AEC315183E49B68A600B84416249C1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:02:11:40:44:0c:12:e0:e2:46:71:80:c2:49:
                    a7:c3:1f:4c:05:fe:98:f8:17:97:c9:cf:ee:03:fd:
                    6d:3d:10:87:43:c1:c0:1e:67:fe:92:18:d6:18:7c:
                    d0:36:61:39:1b:0f:e5:a8:13:60:bb:15:01:bb:63:
                    18:1a:c4:d1:a0:11:a2:df:5f:5d:03:ca:9c:5f:28:
                    d4:86:de:d3:6d:c6:4b:5e:41:18:42:f7:96:ed:21:
                    84:21:93:be:f0:b1:1d:63:5d:a4:9b:3c:4e:8a:67:
                    85:9a:32:32:d3:d1:68:c2:56:c8:49:15:4c:5e:2c:
                    7a:c9:85:1c:89:1a:b3:cf:e7:2c:ea:77:67:79:02:
                    a6:94:e7:f5:32:d1:b6:f1:55:44:81:48:ed:b2:a5:
                    c8:21:f8:02:27:39:cb:4b:e3:2b:88:7d:e2:a5:55:
                    a2:1e:47:df:8c:ef:91:a6:2c:bd:72:c8:e5:39:42:
                    cf:a9:ab:20:26:8c:0b:3a:28:f7:ad:05:f0:26:36:
                    d0:28:bb:8c:5a:6d:4d:5b:8e:3d:0a:20:78:3e:05:
                    a1:fe:c6:f2:d9:9b:ef:ea:5c:39:8a:b0:f3:de:e8:
                    86:d7:70:01:94:3a:61:fc:8b:55:8c:33:5b:57:db:
                    d2:f0:35:fe:74:1b:0c:f3:68:51:91:fa:6f:c2:4a:
                    27:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:EB:3A:29:4A:EC:31:51:83:E4:9B:68:A6:00:B8:44:16:24:9C:1B
            X509v3 Authority Key Identifier:
                keyid:93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/323830343a3935343a38373a3a2f34382d3438203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:954:87::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:aa:79:e7:51:04:92:41:17:e1:64:81:e9:38:2e:f4:8f:68:
         6f:9e:e3:e0:b3:3f:a4:13:31:44:97:c7:04:fb:11:18:eb:75:
         92:73:5d:48:50:48:e1:8d:57:84:c1:c6:ee:03:48:30:96:c1:
         db:3d:df:9f:55:81:d9:fb:ff:2f:56:ee:b8:50:58:eb:85:48:
         81:43:44:10:5e:45:6c:42:b6:96:df:ee:6c:55:a3:73:a2:16:
         de:8c:56:be:14:de:ed:04:d2:ca:39:5c:e6:1f:0d:d5:8d:4a:
         8b:75:1f:28:23:dd:73:3f:fc:4d:23:3c:ad:7c:38:89:ab:4c:
         2e:b0:8e:5b:de:33:48:71:72:b9:50:fe:4e:c3:fc:95:95:a4:
         6c:8b:fd:59:1e:ad:ec:9e:46:36:d8:32:e1:ee:2f:cd:af:a0:
         d7:e2:19:cd:7d:62:ca:52:8f:b8:bf:81:c0:b1:f8:df:a4:82:
         3a:66:b7:d7:86:42:9d:5a:83:ac:ad:d0:d9:c8:47:a6:37:54:
         75:dc:17:c5:34:00:d4:4d:b3:48:f3:58:90:ee:6c:e4:64:d8:
         a5:8f:76:e6:47:21:d2:14:dc:98:84:9c:fc:84:0d:36:e6:42:
         51:1f:97:9b:fb:b9:93:5f:d2:5d:43:0d:89:16:0a:42:b0:20:
         d3:39:d0:37
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUMAvtgl9RU9OOHpbIfssNmrY/LQYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTNCRTRCNDQzMTAzQzlFQTNDRTQwNjlEMDkyQzYyQjk4
RjA4OTVGRDAeFw0yNDA0MDMyMTA4MjVaFw0yNTA0MDIyMTEzMjVaMDMxMTAvBgNV
BAMTKDQzRUIzQTI5NEFFQzMxNTE4M0U0OUI2OEE2MDBCODQ0MTYyNDlDMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAAhFARAwS4OJGcYDCSafDH0wF
/pj4F5fJz+4D/W09EIdDwcAeZ/6SGNYYfNA2YTkbD+WoE2C7FQG7YxgaxNGgEaLf
X10DypxfKNSG3tNtxkteQRhC95btIYQhk77wsR1jXaSbPE6KZ4WaMjLT0WjCVshJ
FUxeLHrJhRyJGrPP5yzqd2d5AqaU5/Uy0bbxVUSBSO2ypcgh+AInOctL4yuIfeKl
VaIeR9+M75GmLL1yyOU5Qs+pqyAmjAs6KPetBfAmNtAou4xabU1bjj0KIHg+BaH+
xvLZm+/qXDmKsPPe6IbXcAGUOmH8i1WMM1tX29LwNf50GwzzaFGR+m/CSifBAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUQ+s6KUrsMVGD5JtopgC4RBYknBswHwYDVR0j
BBgwFoAUk75LRDEDyeo85AadCSxiuY8Ilf0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmI4NXM1ZVhZTmtmY2dWYVdxOTVKdWtUeTZjNm8zcXRuaFVuaU5zZkFi
a20vMS85M0JFNEI0NDMxMDNDOUVBM0NFNDA2OUQwOTJDNjJCOThGMDg5NUZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzQkU0QjQ0MzEwM0M5RUEz
Q0U0MDY5RDA5MkM2MkI5OEYwODk1RkQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZiODVzNWVYWU5rZmNnVmFXcTk1SnVrVHk2YzZvM3F0bmhVbmlOc2ZBYmttLzEv
MzIzODMwMzQzYTM5MzUzNDNhMzgzNzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMy
MzYzMzMwMzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACgECVQAhzANBgkqhkiG9w0BAQsFAAOCAQEA
VKp551EEkkEX4WSB6Tgu9I9ob57j4LM/pBMxRJfHBPsRGOt1knNdSFBI4Y1XhMHG
7gNIMJbB2z3fn1WB2fv/L1buuFBY64VIgUNEEF5FbEK2lt/ubFWjc6IW3oxWvhTe
7QTSyjlc5h8N1Y1Ki3UfKCPdcz/8TSM8rXw4iatMLrCOW94zSHFyuVD+TsP8lZWk
bIv9WR6t7J5GNtgy4e4vza+g1+IZzX1iylKPuL+BwLH436SCOma314ZCnVqDrK3Q
2chHpjdUddwXxTQA1E2zSPNYkO5s5GTYpY925kch0hTcmISc/IQNNuZCUR+Xm/u5
k1/SXUMNiRYKQrAg0znQNw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:08 2024 by rpki-client on console-ams.rpki-client.org