Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/323830343a3935343a666230303a3a2f34302d3430203d3e20323633303733.roa
File:                     323830343a3935343a666230303a3a2f34302d3430203d3e20323633303733.roa (raw, json)
Hash identifier:          Cm5OS1luNH/GYi04s7KF+l6VW5FRlrb32Xomqw36J9U=
Subject key identifier:   21:0F:0F:81:EE:52:A1:87:D8:78:4D:9F:0C:10:36:3C:4E:F4:F1:86
Certificate issuer:       /CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
Certificate serial:       091F7E69DBE9CD1DC2BE8D9274F8BAE56E68B144
Authority key identifier: 93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/323830343a3935343a666230303a3a2f34302d3430203d3e20323633303733.roa
Signing time:             Wed 05 Mar 2025 22:10:21 +0000
ROA not before:           Wed 05 Mar 2025 22:05:21 +0000
ROA not after:            Wed 04 Mar 2026 22:10:21 +0000
asID:                     263073
IP address blocks:        2804:954:fb00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl
                          rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 03:23:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:1f:7e:69:db:e9:cd:1d:c2:be:8d:92:74:f8:ba:e5:6e:68:b1:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
        Validity
            Not Before: Mar  5 22:05:21 2025 GMT
            Not After : Mar  4 22:10:21 2026 GMT
        Subject: CN=210F0F81EE52A187D8784D9F0C10363C4EF4F186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:58:c3:7b:0d:16:7d:22:a7:65:10:53:4f:7d:
                    cf:bf:d2:6e:e1:aa:6c:7a:66:fe:49:5d:16:6d:cb:
                    b8:d6:10:7d:3b:0e:5e:e4:33:ec:a9:b3:b9:5b:68:
                    eb:d6:79:be:d6:1e:86:00:1e:2a:b0:ee:78:36:3b:
                    c3:73:e8:d7:3a:7d:53:c8:2b:eb:51:d1:07:5b:74:
                    99:97:9a:ac:c6:81:7c:2f:09:a4:e8:04:6c:13:ff:
                    86:19:9f:53:f1:c3:2c:2f:55:a3:a2:f8:48:eb:ce:
                    be:57:e7:e2:78:8f:55:1e:ca:17:fe:79:c9:2f:ef:
                    7a:6c:2c:9c:0b:72:ce:8f:62:1a:20:25:74:2f:55:
                    5b:cd:dc:9c:6e:f0:8a:4d:e1:3b:2c:e0:6a:39:65:
                    db:6e:65:50:4a:7d:9b:ab:c8:51:de:f8:66:60:47:
                    b0:5c:ab:42:8a:bd:5d:03:02:40:92:4a:43:23:50:
                    6c:a4:49:d3:d9:eb:e7:d2:87:10:d4:4c:3f:01:6c:
                    c2:d6:77:69:98:de:af:76:21:09:a0:ed:6c:63:54:
                    05:54:0f:67:ba:b2:ab:47:f5:56:77:73:ce:37:49:
                    b9:7b:f6:b7:33:47:c0:22:e9:7a:29:31:0a:6b:09:
                    81:9f:f0:0b:ac:1c:9d:9b:67:4d:86:1f:59:b8:7b:
                    c2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:0F:0F:81:EE:52:A1:87:D8:78:4D:9F:0C:10:36:3C:4E:F4:F1:86
            X509v3 Authority Key Identifier:
                keyid:93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/323830343a3935343a666230303a3a2f34302d3430203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:954:fb00::/40

    Signature Algorithm: sha256WithRSAEncryption
         72:c1:6b:05:8f:89:15:8b:c3:4f:ec:5d:e3:d6:40:b5:64:bb:
         48:47:dc:ab:93:be:d8:18:af:19:86:b3:43:37:bf:3b:4b:a8:
         75:c4:eb:99:13:b6:d3:31:2d:28:cb:b8:dc:80:b7:b5:d9:47:
         ff:a6:f6:e2:61:57:0a:18:33:e5:8c:e0:d9:b7:b4:7a:88:ef:
         b4:e9:92:c6:c4:75:e0:7b:db:c8:7f:ee:3a:b4:ba:85:9f:50:
         66:de:d6:be:c2:e7:bb:8e:40:94:7a:36:c6:cb:6a:db:f2:2d:
         67:8a:33:ef:1d:42:af:25:5c:c2:67:bd:69:d1:4f:5d:fb:e5:
         86:a0:7c:be:89:90:e7:9e:31:98:49:5d:d2:e2:eb:d2:6f:88:
         a3:13:d5:ce:1a:1f:b3:48:0e:18:e8:db:d3:81:84:6d:91:37:
         88:39:28:9d:84:9c:09:0d:f4:ec:46:61:bc:e4:1e:88:43:15:
         bc:71:8c:ff:cc:34:cf:51:9b:74:02:bc:01:12:22:b1:6f:c5:
         ec:db:96:94:24:35:2e:2b:50:18:0f:e9:36:6e:ce:fd:92:bd:
         27:e8:77:52:e5:c5:e8:8f:63:bb:ee:d2:be:be:e0:0a:51:fe:
         0f:06:bf:37:f6:13:cf:67:72:f8:6d:6b:f1:0e:58:a4:58:80:
         f3:52:93:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:00:09 2025 by rpki-client