Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/323830343a3935343a666130303a3a2f34302d3430203d3e20323633303733.roa
File:                     323830343a3935343a666130303a3a2f34302d3430203d3e20323633303733.roa (raw, json)
Hash identifier:          DJ3Fgvxl2Mjp4k1o2StcGp0CF+Tct2wkgf6VWMgdfAE=
Subject key identifier:   3C:D4:7A:BF:35:95:A0:04:16:41:87:28:DB:D3:38:81:69:1D:4E:7A
Certificate issuer:       /CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
Certificate serial:       0DF24754564503F63AC77947FDADA17FFE6FA383
Authority key identifier: 93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/323830343a3935343a666130303a3a2f34302d3430203d3e20323633303733.roa
Signing time:             Fri 21 Mar 2025 21:10:27 +0000
ROA not before:           Fri 21 Mar 2025 21:05:27 +0000
ROA not after:            Fri 20 Mar 2026 21:10:27 +0000
asID:                     263073
IP address blocks:        2804:954:fa00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl
                          rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 03:23:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:f2:47:54:56:45:03:f6:3a:c7:79:47:fd:ad:a1:7f:fe:6f:a3:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
        Validity
            Not Before: Mar 21 21:05:27 2025 GMT
            Not After : Mar 20 21:10:27 2026 GMT
        Subject: CN=3CD47ABF3595A00416418728DBD33881691D4E7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fe:f4:26:ea:bd:2f:d6:2d:b1:03:4c:60:f4:
                    3f:48:a2:98:c3:ce:37:7a:24:c6:ac:90:cf:4f:61:
                    0e:e3:95:da:e5:d9:da:7c:7d:52:eb:bb:58:2e:6f:
                    58:f1:8b:69:3d:b1:21:92:8a:1b:ca:b8:f5:cc:33:
                    ff:f4:9a:32:0d:33:48:ff:96:74:28:6b:17:84:55:
                    91:cc:4e:a6:e5:92:87:af:c7:59:0b:89:77:a2:fb:
                    bd:ff:a5:f9:26:ef:dd:e5:6f:23:0f:02:28:ee:89:
                    1d:7d:dc:5a:73:bb:5d:3f:e5:4f:df:bc:23:09:1b:
                    46:63:d2:ab:18:ed:d9:a6:90:e2:ed:a9:54:53:6b:
                    d7:b9:e4:e3:83:cc:4d:08:99:7e:13:fd:bf:a3:be:
                    be:f3:ca:ab:20:1c:57:2b:3d:1b:15:c7:9f:c2:f9:
                    11:40:f5:3d:d2:02:5d:2c:50:16:de:fe:b2:29:e8:
                    fa:79:1e:7b:a1:c0:74:8d:4c:a2:70:6a:4c:6c:cc:
                    b7:f8:ce:21:2e:3d:78:69:44:45:fb:b6:38:46:14:
                    ea:5f:3d:8c:ab:59:ce:bd:b4:6d:a0:34:4e:63:d1:
                    a4:9f:cb:76:40:97:ca:58:ec:2e:54:04:f0:c5:c7:
                    37:54:52:1b:f7:f2:c5:1b:27:4b:2e:f2:4c:4d:1a:
                    13:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:D4:7A:BF:35:95:A0:04:16:41:87:28:DB:D3:38:81:69:1D:4E:7A
            X509v3 Authority Key Identifier:
                keyid:93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/323830343a3935343a666130303a3a2f34302d3430203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:954:fa00::/40

    Signature Algorithm: sha256WithRSAEncryption
         43:6a:f2:79:80:80:b5:2d:f2:71:26:26:ab:90:3b:15:d1:85:
         45:5a:e3:22:e7:ea:20:ab:f6:7f:f8:8a:ae:d5:0d:bf:50:b8:
         c2:cd:8f:e5:04:8c:dc:45:e0:e1:fe:dc:08:e8:8d:43:9f:4b:
         58:68:8f:10:4e:70:c9:42:9d:59:6e:44:ca:77:cf:e7:08:3b:
         9b:4e:cc:c8:11:df:65:d7:82:58:ed:2e:9b:33:57:3b:65:3f:
         9f:08:49:1c:21:a4:0b:19:63:5f:11:ca:84:a0:ab:13:04:8a:
         9b:ef:f5:e6:5d:60:40:bf:b5:f8:55:1f:53:91:df:44:88:1c:
         d7:c2:32:25:dc:61:d3:cd:be:17:38:84:b1:67:08:25:37:4a:
         00:1f:87:fe:a8:4c:b2:53:0b:07:9a:b5:ab:1b:f0:c4:f8:68:
         24:76:76:ce:46:54:62:b1:f4:af:e3:21:b0:fd:6e:0a:bd:90:
         6d:d2:91:b0:b5:e2:e1:cf:ad:de:ea:e9:58:d3:be:c8:88:fa:
         38:68:6f:96:a4:93:40:58:bd:4a:ae:88:8c:cf:a0:29:ef:35:
         c4:94:35:a1:8b:38:a9:0b:11:6c:56:8e:78:a3:51:5d:d2:12:
         b6:de:4c:3c:f1:0f:d7:74:0b:9c:f5:2e:19:b4:c0:23:1e:ea:
         88:97:c4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:23:05 2025 by rpki-client