Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/1/323830343a356662633a3a2f33322d3332203d3e20323639313230.roa
File:                     323830343a356662633a3a2f33322d3332203d3e20323639313230.roa (raw, json)
Hash identifier:          wlYHGdDI8nKsuNqz0V7XM1JAzwCcXMAtvPGCdSxxmgg=
Subject key identifier:   AE:6D:74:9E:94:02:AC:CB:0A:FA:5D:FA:26:6B:40:48:58:B4:7A:AF
Certificate issuer:       /CN=99D9815999A6E537F44A7D30D9A17CE7453F2F16
Certificate serial:       661D5AC62D22C29562D0FCC7B26E383DE5F3CAD5
Authority key identifier: 99:D9:81:59:99:A6:E5:37:F4:4A:7D:30:D9:A1:7C:E7:45:3F:2F:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D9815999A6E537F44A7D30D9A17CE7453F2F16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/1/323830343a356662633a3a2f33322d3332203d3e20323639313230.roa
Signing time:             Wed 03 Apr 2024 23:36:41 +0000
ROA not before:           Wed 03 Apr 2024 23:31:41 +0000
ROA not after:            Wed 02 Apr 2025 23:36:41 +0000
asID:                     269120
IP address blocks:        2804:5fbc::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/1/99D9815999A6E537F44A7D30D9A17CE7453F2F16.crl
                          rsync://rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/1/99D9815999A6E537F44A7D30D9A17CE7453F2F16.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D9815999A6E537F44A7D30D9A17CE7453F2F16.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:03:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:1d:5a:c6:2d:22:c2:95:62:d0:fc:c7:b2:6e:38:3d:e5:f3:ca:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D9815999A6E537F44A7D30D9A17CE7453F2F16
        Validity
            Not Before: Apr  3 23:31:41 2024 GMT
            Not After : Apr  2 23:36:41 2025 GMT
        Subject: CN=AE6D749E9402ACCB0AFA5DFA266B404858B47AAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:64:27:54:be:29:97:d9:cd:94:69:67:c9:71:
                    da:1e:3e:0a:45:1d:59:90:2f:77:42:f0:28:6c:3a:
                    9e:4d:9d:eb:a8:7a:e8:0b:d1:6b:fc:be:88:c2:c2:
                    94:8b:21:8d:74:a2:a2:90:86:ae:4c:57:74:51:8c:
                    f8:84:2f:91:5d:16:33:72:96:b8:9f:cc:d0:fe:9e:
                    ba:4d:09:f8:06:5e:fa:33:b6:de:48:e5:81:a1:3f:
                    2e:61:95:27:32:dc:1f:5e:f8:8a:9a:6a:20:e1:08:
                    ae:11:dd:cc:1f:9f:7d:c3:93:8f:9a:0e:37:88:09:
                    c0:71:1a:30:d8:45:b1:6a:4c:1b:23:c3:15:11:95:
                    33:89:21:52:7b:f7:2b:04:7c:22:03:65:69:00:d9:
                    58:0c:04:da:ee:2d:b4:5d:1f:62:65:79:4c:1e:3a:
                    1e:ee:77:51:97:19:99:9b:05:1c:4e:25:91:3c:6f:
                    ee:29:fd:38:ec:06:5c:0f:f5:6d:f6:a4:e8:2f:15:
                    fd:be:b5:8f:8e:79:53:f4:be:24:45:3d:bf:93:75:
                    74:35:b5:27:d0:3d:a1:9d:60:dc:92:76:d3:af:17:
                    e6:4f:05:ba:59:64:43:d4:5d:70:8e:09:9a:5d:d5:
                    b3:58:89:b9:f2:8f:08:86:4d:f6:57:56:88:f5:84:
                    67:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:6D:74:9E:94:02:AC:CB:0A:FA:5D:FA:26:6B:40:48:58:B4:7A:AF
            X509v3 Authority Key Identifier:
                keyid:99:D9:81:59:99:A6:E5:37:F4:4A:7D:30:D9:A1:7C:E7:45:3F:2F:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/1/99D9815999A6E537F44A7D30D9A17CE7453F2F16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D9815999A6E537F44A7D30D9A17CE7453F2F16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5BPei6cfzLgx4LpPPh1RwGcCELX4yWhPAKTiBzBDZR59/1/323830343a356662633a3a2f33322d3332203d3e20323639313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5fbc::/32

    Signature Algorithm: sha256WithRSAEncryption
         e3:14:8c:21:7d:26:8d:4a:21:e3:f1:11:35:68:2a:64:c6:8d:
         ba:9a:9d:f7:ab:eb:25:e7:f5:d9:48:e1:22:b1:0c:0e:a6:ed:
         32:51:0a:5f:45:76:08:f4:b8:a1:7c:da:99:94:74:80:12:ae:
         a1:7a:9c:f9:18:c6:cb:76:9a:2d:65:4e:2d:90:c5:fa:52:5a:
         81:77:b7:e6:d6:a7:8f:96:76:0c:5a:ae:c2:69:41:3f:c7:d8:
         62:41:82:25:1a:d5:62:22:f0:7f:3d:e2:b6:db:b9:2a:a4:03:
         0c:41:cb:cb:ee:eb:3e:95:9b:ff:51:9d:01:84:90:6c:c9:64:
         d3:ed:17:fe:5e:38:0b:a9:e8:48:55:54:c2:00:6b:d2:00:21:
         40:32:7a:d6:63:91:be:53:9c:55:21:25:80:fc:1f:d7:d9:2e:
         06:41:d3:09:9b:14:64:56:70:d3:f5:58:a5:4c:9e:ad:94:90:
         77:9e:a5:d5:cb:08:2e:8a:45:43:04:76:e3:80:36:eb:17:c1:
         ce:66:fa:eb:11:61:2b:b4:3f:1f:4c:b3:0b:8b:64:56:9e:eb:
         20:64:79:7d:3f:c9:9b:d8:db:af:0d:75:f8:45:bd:a9:cd:9e:
         b7:6e:10:d3:a5:06:63:e8:f3:af:ab:e0:1c:99:c8:42:65:d1:
         17:8a:f0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:40 2024 by rpki-client on console-fra.rpki-client.org