Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/12yKf5eMqPgjuk3hTsxAMPKRDFWny1HvnKtPR5AwTvFr/0/323830343a376639343a3a2f33322d313238203d3e20323632343733.roa
File:                     323830343a376639343a3a2f33322d313238203d3e20323632343733.roa (raw, json)
Hash identifier:          aZspTiADTFpJNNJdM4EOQhFSlyaHWPqGsaaI6EF4RLU=
Subject key identifier:   BB:3E:8B:4A:05:6D:B6:90:41:3B:4D:8E:4D:C8:05:6F:E0:A1:60:A9
Certificate issuer:       /CN=99D25D587D9589BDB42383AA05FD4F58C8E686AD
Certificate serial:       55F08EE5D607669C72E48C9CFE72953D80484557
Authority key identifier: 99:D2:5D:58:7D:95:89:BD:B4:23:83:AA:05:FD:4F:58:C8:E6:86:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D25D587D9589BDB42383AA05FD4F58C8E686AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/12yKf5eMqPgjuk3hTsxAMPKRDFWny1HvnKtPR5AwTvFr/0/323830343a376639343a3a2f33322d313238203d3e20323632343733.roa
Signing time:             Mon 14 Oct 2024 14:03:14 +0000
ROA not before:           Mon 14 Oct 2024 13:58:14 +0000
ROA not after:            Mon 13 Oct 2025 14:03:14 +0000
asID:                     262473
IP address blocks:        2804:7f94::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/12yKf5eMqPgjuk3hTsxAMPKRDFWny1HvnKtPR5AwTvFr/0/99D25D587D9589BDB42383AA05FD4F58C8E686AD.crl
                          rsync://rpki-repo.registro.br/repo/12yKf5eMqPgjuk3hTsxAMPKRDFWny1HvnKtPR5AwTvFr/0/99D25D587D9589BDB42383AA05FD4F58C8E686AD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D25D587D9589BDB42383AA05FD4F58C8E686AD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:27:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:f0:8e:e5:d6:07:66:9c:72:e4:8c:9c:fe:72:95:3d:80:48:45:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D25D587D9589BDB42383AA05FD4F58C8E686AD
        Validity
            Not Before: Oct 14 13:58:14 2024 GMT
            Not After : Oct 13 14:03:14 2025 GMT
        Subject: CN=BB3E8B4A056DB690413B4D8E4DC8056FE0A160A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b8:15:f2:a5:99:dc:fb:a4:fb:20:c7:15:68:
                    c6:29:a2:0a:86:c8:4b:4a:17:57:69:e9:cf:24:45:
                    4b:5c:65:e6:4a:66:86:3d:fa:c6:65:82:ad:38:69:
                    52:53:2d:21:b9:5b:1c:6a:1e:b2:e9:cb:c6:d5:58:
                    03:8c:74:80:a7:a1:d4:59:f5:45:e3:fe:63:45:93:
                    46:37:41:2c:e2:05:2f:25:0c:43:e0:c1:e5:21:8d:
                    99:1c:ff:7c:18:09:55:41:29:6f:04:f5:10:a9:a3:
                    36:5f:08:e1:cb:c8:e0:e3:11:9c:f8:86:e7:6d:34:
                    c4:c1:5b:32:d4:74:cd:90:4f:8f:fe:81:02:66:65:
                    e1:09:c7:1f:70:b6:3d:9f:55:ad:f0:f2:04:2e:40:
                    83:11:e7:74:ae:4c:9c:e3:97:11:69:ba:3f:02:1c:
                    c3:95:ea:7a:32:7d:83:2b:0d:5c:da:29:19:e0:b3:
                    06:3f:ce:2b:80:4c:a2:dd:4c:d0:4b:0c:fc:be:7e:
                    3f:b0:6e:77:64:13:e8:f3:57:96:b3:cb:95:28:22:
                    1e:e1:9a:cf:08:bc:b7:62:e5:ba:7a:7f:22:62:f2:
                    09:61:56:69:1f:8c:74:f3:f9:10:3a:54:ec:43:19:
                    f4:18:14:18:78:6b:25:06:d9:9a:48:10:06:21:ed:
                    05:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:3E:8B:4A:05:6D:B6:90:41:3B:4D:8E:4D:C8:05:6F:E0:A1:60:A9
            X509v3 Authority Key Identifier:
                keyid:99:D2:5D:58:7D:95:89:BD:B4:23:83:AA:05:FD:4F:58:C8:E6:86:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/12yKf5eMqPgjuk3hTsxAMPKRDFWny1HvnKtPR5AwTvFr/0/99D25D587D9589BDB42383AA05FD4F58C8E686AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D25D587D9589BDB42383AA05FD4F58C8E686AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/12yKf5eMqPgjuk3hTsxAMPKRDFWny1HvnKtPR5AwTvFr/0/323830343a376639343a3a2f33322d313238203d3e20323632343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7f94::/32

    Signature Algorithm: sha256WithRSAEncryption
         c8:49:07:42:79:00:b8:bf:1b:e7:7a:ef:c8:8c:01:69:4b:7c:
         76:d4:f1:6b:0c:ef:ac:b4:41:ab:94:26:1b:fa:e5:b0:15:11:
         13:84:57:6b:24:8a:6f:23:fc:ee:42:2c:aa:87:e4:23:3a:ef:
         c4:31:37:a0:e8:a8:cf:c6:82:8f:90:c9:39:e5:bb:8d:18:2b:
         81:fd:21:5b:37:46:58:14:c5:12:c1:62:20:c0:46:f6:c2:34:
         cc:d0:8c:70:45:57:48:06:11:60:9f:72:63:1f:ea:be:73:2b:
         27:60:7b:a1:7e:6d:4b:43:1c:c2:10:60:63:dc:4c:7a:b7:6d:
         25:66:41:7c:0f:58:0c:b5:8f:61:64:ed:cf:16:67:c1:2e:3a:
         f1:3b:1f:f5:c4:ed:98:f1:0a:03:e1:e6:15:64:2a:1c:89:bc:
         0f:54:24:12:60:86:b9:0b:0d:53:fd:fc:c6:28:76:ee:09:93:
         b8:42:88:0c:c0:f0:4c:92:b5:4d:0b:e7:a3:d6:e6:02:55:a0:
         12:fe:3d:d9:b8:ec:98:ae:de:ab:83:57:a5:86:ba:ba:e9:de:
         8e:7d:c1:2e:de:3a:e8:ee:fd:2f:e2:f3:72:38:73:8a:e0:6c:
         33:c0:3e:2d:21:76:e6:89:89:09:6b:4b:9b:32:46:10:06:d9:
         ce:79:b1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:02:47 2024 by rpki-client on console-fra.rpki-client.org