Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/323830343a3935343a666230303a3a2f34302d3430203d3e20323633303733.roa
File:                     323830343a3935343a666230303a3a2f34302d3430203d3e20323633303733.roa (raw, json)
Hash identifier:          nh98XZbgED1/xlv4SfWlgMgiitYREaFyJuDxAmEJPgY=
Subject key identifier:   30:EA:E5:1D:44:5D:F4:4D:41:85:D8:46:30:2B:84:08:DE:4E:A3:7D
Certificate issuer:       /CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
Certificate serial:       346368434B033943731B71DC23B00E9D46BDFE75
Authority key identifier: 93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/323830343a3935343a666230303a3a2f34302d3430203d3e20323633303733.roa
Signing time:             Wed 03 Apr 2024 21:13:26 +0000
ROA not before:           Wed 03 Apr 2024 21:08:26 +0000
ROA not after:            Wed 02 Apr 2025 21:13:26 +0000
asID:                     263073
IP address blocks:        2804:954:fb00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl
                          rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:63:68:43:4b:03:39:43:73:1b:71:dc:23:b0:0e:9d:46:bd:fe:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
        Validity
            Not Before: Apr  3 21:08:26 2024 GMT
            Not After : Apr  2 21:13:26 2025 GMT
        Subject: CN=30EAE51D445DF44D4185D846302B8408DE4EA37D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fe:a4:be:25:0c:7e:06:a2:c3:b2:05:ab:18:
                    70:b7:51:c2:d3:32:79:a3:4e:c2:55:45:50:ef:9b:
                    de:3b:82:c8:89:21:09:b8:0c:cb:4c:37:be:61:e6:
                    68:10:f4:f4:0e:a2:e5:a0:17:05:7f:54:04:61:d8:
                    91:e3:10:f7:15:46:93:0b:ef:30:35:4e:0e:d6:01:
                    be:06:d1:0a:98:e6:e5:df:29:4f:dd:91:34:01:22:
                    15:13:c1:c3:86:f3:af:78:a9:ff:ab:ed:e8:f2:54:
                    f4:7d:bd:fc:96:5d:63:91:1b:28:5a:8e:e4:e9:52:
                    ca:4a:c0:95:d3:8a:ca:82:2c:a6:10:80:65:00:4c:
                    20:01:d6:5b:44:ff:ae:3f:b5:fa:3d:14:e8:2c:ee:
                    0c:68:3c:41:9f:a6:ba:1a:fd:f7:0c:be:4a:8e:ed:
                    ed:3c:7f:c4:69:77:b6:f0:19:07:be:ef:16:a2:d5:
                    d6:62:e1:ec:f4:ab:15:e5:0c:82:5a:33:36:82:39:
                    d8:af:1a:ec:c3:af:d7:2f:fe:a6:8a:37:5f:61:ae:
                    98:d0:00:22:fc:6b:49:c9:2d:44:c3:03:05:18:c1:
                    a6:4c:f7:a9:2b:63:40:ab:c8:5f:a3:eb:14:9c:43:
                    28:58:9f:38:7d:9a:90:af:93:4e:9f:30:1e:d4:49:
                    ba:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:EA:E5:1D:44:5D:F4:4D:41:85:D8:46:30:2B:84:08:DE:4E:A3:7D
            X509v3 Authority Key Identifier:
                keyid:93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/323830343a3935343a666230303a3a2f34302d3430203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:954:fb00::/40

    Signature Algorithm: sha256WithRSAEncryption
         4f:af:89:2e:8c:02:91:b7:46:54:86:e9:5b:df:df:45:c3:bb:
         a4:3c:cd:92:a9:b8:11:b0:63:ff:f9:7c:f6:a4:9e:8c:09:01:
         b4:7b:17:f2:84:26:27:57:8a:ce:e6:f2:f7:20:50:d6:a7:c9:
         70:a9:14:2c:b7:cc:81:48:83:5b:8b:e9:34:c4:ae:e3:07:b5:
         3e:9d:92:55:f2:74:c0:d1:3b:3d:0f:a4:c2:af:74:c3:a9:5c:
         79:f3:72:56:5b:79:63:c4:ef:bf:09:0c:a4:c8:ef:4e:d9:dc:
         3d:8c:d7:f8:95:cd:0e:e7:0c:54:7f:c9:7a:02:17:58:52:65:
         ce:f5:e1:46:0f:21:c1:87:10:8a:8d:58:d4:d1:e8:a1:3e:c1:
         c8:4f:19:0a:09:b0:28:22:f3:70:7c:4d:47:b9:1c:6b:74:77:
         fc:30:30:c7:f6:80:29:91:9f:2f:b1:fa:b8:50:c0:76:c9:ff:
         0e:73:75:59:1d:63:a1:5a:f7:97:6c:2a:0b:e7:31:33:8b:82:
         a5:ea:a1:c7:b7:b7:1b:e2:3b:1f:1d:42:df:3d:ec:9d:fd:0b:
         f2:d7:c3:cf:63:67:8d:15:b0:7b:98:6d:62:ec:31:92:5b:a3:
         df:59:4a:16:0f:a7:8b:d4:e1:38:28:66:2a:d9:eb:14:0c:fb:
         80:c9:d6:47
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUNGNoQ0sDOUNzG3HcI7AOnUa9/nUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTNCRTRCNDQzMTAzQzlFQTNDRTQwNjlEMDkyQzYyQjk4
RjA4OTVGRDAeFw0yNDA0MDMyMTA4MjZaFw0yNTA0MDIyMTEzMjZaMDMxMTAvBgNV
BAMTKDMwRUFFNTFENDQ1REY0NEQ0MTg1RDg0NjMwMkI4NDA4REU0RUEzN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9/qS+JQx+BqLDsgWrGHC3UcLT
MnmjTsJVRVDvm947gsiJIQm4DMtMN75h5mgQ9PQOouWgFwV/VARh2JHjEPcVRpML
7zA1Tg7WAb4G0QqY5uXfKU/dkTQBIhUTwcOG8694qf+r7ejyVPR9vfyWXWORGyha
juTpUspKwJXTisqCLKYQgGUATCAB1ltE/64/tfo9FOgs7gxoPEGfproa/fcMvkqO
7e08f8Rpd7bwGQe+7xai1dZi4ez0qxXlDIJaMzaCOdivGuzDr9cv/qaKN19hrpjQ
ACL8a0nJLUTDAwUYwaZM96krY0CryF+j6xScQyhYnzh9mpCvk06fMB7USbq9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUMOrlHURd9E1BhdhGMCuECN5Oo30wHwYDVR0j
BBgwFoAUk75LRDEDyeo85AadCSxiuY8Ilf0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmI4NXM1ZVhZTmtmY2dWYVdxOTVKdWtUeTZjNm8zcXRuaFVuaU5zZkFi
a20vMS85M0JFNEI0NDMxMDNDOUVBM0NFNDA2OUQwOTJDNjJCOThGMDg5NUZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzQkU0QjQ0MzEwM0M5RUEz
Q0U0MDY5RDA5MkM2MkI5OEYwODk1RkQuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZiODVzNWVYWU5rZmNnVmFXcTk1SnVrVHk2YzZvM3F0bmhVbmlOc2ZBYmttLzEv
MzIzODMwMzQzYTM5MzUzNDNhNjY2MjMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl
MjAzMjM2MzMzMDM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBAlU+zANBgkqhkiG9w0BAQsFAAOC
AQEAT6+JLowCkbdGVIbpW9/fRcO7pDzNkqm4EbBj//l89qSejAkBtHsX8oQmJ1eK
zuby9yBQ1qfJcKkULLfMgUiDW4vpNMSu4we1Pp2SVfJ0wNE7PQ+kwq90w6lcefNy
Vlt5Y8TvvwkMpMjvTtncPYzX+JXNDucMVH/JegIXWFJlzvXhRg8hwYcQio1Y1NHo
oT7ByE8ZCgmwKCLzcHxNR7kca3R3/DAwx/aAKZGfL7H6uFDAdsn/DnN1WR1joVr3
l2wqC+cxM4uCpeqhx7e3G+I7Hx1C3z3snf0L8tfDz2NnjRWwe5htYuwxkluj31lK
Fg+ni9ThOChmKtnrFAz7gMnWRw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:08 2024 by rpki-client on console-ams.rpki-client.org