Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/323830343a3935343a3630303a3a2f34302d3430203d3e20323633303733.roa
File:                     323830343a3935343a3630303a3a2f34302d3430203d3e20323633303733.roa (raw, json)
Hash identifier:          ilMHvlBOfvRjN4sdQeAtlhTwgkuO4VIK2tDlKlZwRM0=
Subject key identifier:   A7:C8:EC:80:2F:6F:D9:4F:5C:22:21:5C:15:93:C4:4C:2F:DB:B7:98
Certificate issuer:       /CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
Certificate serial:       413196B0B2F6A6F8AFF8B2EA50F29652F5DD4EC3
Authority key identifier: 93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/323830343a3935343a3630303a3a2f34302d3430203d3e20323633303733.roa
Signing time:             Wed 05 Mar 2025 22:10:15 +0000
ROA not before:           Wed 05 Mar 2025 22:05:15 +0000
ROA not after:            Wed 04 Mar 2026 22:10:15 +0000
asID:                     263073
IP address blocks:        2804:954:600::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl
                          rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 01:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:31:96:b0:b2:f6:a6:f8:af:f8:b2:ea:50:f2:96:52:f5:dd:4e:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD
        Validity
            Not Before: Mar  5 22:05:15 2025 GMT
            Not After : Mar  4 22:10:15 2026 GMT
        Subject: CN=A7C8EC802F6FD94F5C22215C1593C44C2FDBB798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fe:9b:55:99:c7:9b:02:d6:cc:0e:ce:69:83:
                    8c:77:c7:dd:ef:46:62:64:6e:50:b4:90:8e:7b:e3:
                    41:3f:04:e5:e0:3c:89:6d:8c:71:5b:86:e3:39:ca:
                    0d:08:f6:42:1f:be:0b:ba:57:5c:6c:bf:62:a5:13:
                    fe:7b:d2:eb:08:73:ea:9d:33:f1:e8:1b:8f:3e:de:
                    4a:c8:88:66:78:f6:ab:16:28:28:44:93:14:87:35:
                    5d:a5:89:4e:d4:5b:24:7c:bc:71:3e:18:7c:26:90:
                    ae:22:c5:dd:c2:3d:7a:df:f9:64:ee:6a:e8:a6:fa:
                    be:66:2a:9f:a5:87:1c:ca:9e:21:a9:9f:47:2b:c6:
                    e7:6b:94:14:c2:bf:27:c2:22:19:95:96:94:e0:72:
                    e1:52:b0:db:e3:ef:54:e1:04:30:8c:4b:b7:4a:2f:
                    df:fa:57:8c:42:35:00:b9:98:a1:ec:b1:fd:66:25:
                    ce:20:8f:89:1b:49:c8:e5:6e:4b:f1:0b:e7:b7:22:
                    41:db:e4:78:81:1d:aa:17:c9:e7:a2:cf:aa:23:fb:
                    b2:63:35:5f:c7:8f:81:39:a2:ff:89:84:f8:f0:76:
                    ad:7e:2e:0a:9e:10:fb:6f:ce:29:26:dc:29:2d:2a:
                    39:56:0a:07:d9:98:c6:a9:37:a4:db:2e:a8:fa:d0:
                    60:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C8:EC:80:2F:6F:D9:4F:5C:22:21:5C:15:93:C4:4C:2F:DB:B7:98
            X509v3 Authority Key Identifier:
                keyid:93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/323830343a3935343a3630303a3a2f34302d3430203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:954:600::/40

    Signature Algorithm: sha256WithRSAEncryption
         1c:e5:49:b4:bb:f2:79:6b:d9:58:f2:bd:60:01:e3:84:b6:50:
         9f:74:d6:ae:ec:fd:a0:2a:55:30:80:1e:58:04:9f:6e:e3:5e:
         8c:88:ca:4d:ba:97:0b:56:4a:3d:43:42:c3:63:23:58:0c:02:
         a5:8e:7b:47:da:cf:01:09:3d:23:e1:2e:89:ae:b5:86:d9:f6:
         1e:f5:2a:d1:8e:cf:ec:84:2a:c1:5e:41:34:0a:a3:05:90:d2:
         90:82:3c:5f:44:c8:5b:0b:8c:f3:2e:be:89:b7:e3:aa:f5:db:
         87:f9:c7:03:22:49:2e:13:7d:03:fe:d1:53:e2:17:bb:3e:49:
         36:1c:9d:6e:b4:33:fa:d6:85:a3:03:17:61:63:03:97:b2:c8:
         eb:fe:cf:a0:4d:70:6a:25:78:cb:d7:7e:cf:73:5d:96:af:f6:
         63:7b:7b:cb:14:7a:c6:21:de:53:d0:fa:f7:e5:a9:87:9d:c2:
         4c:64:26:99:41:35:4b:7c:db:46:62:43:30:56:71:02:f1:1b:
         13:5c:0a:e5:29:fb:e3:fd:33:a0:e9:12:23:6e:b0:f7:df:e1:
         e6:2a:c1:8c:76:f8:8f:4b:93:a2:c9:cf:6e:9a:71:cf:b7:ad:
         79:4e:c3:0a:8a:16:ac:ad:bd:cf:62:1a:92:40:b0:6e:8a:9c:
         07:9f:a7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:15:21 2025 by rpki-client on console.sobornost.net