Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6F39u2iPg71fKSJwDZyYXP6cC9RDPqSgsvpUn2V9CPnc/0/323830343a313631383a3a2f33322d3438203d3e20323633323637.roa
File:                     323830343a313631383a3a2f33322d3438203d3e20323633323637.roa (raw, json)
Hash identifier:          mvrz48DrFrLdjJ2RfN3G4Z1OnWcaWPZE4oAmXX/ZQH4=
Subject key identifier:   E9:51:BE:E8:6B:13:0A:E2:A5:A1:22:4C:06:46:A7:64:97:97:0D:54
Certificate issuer:       /CN=99EA0E806C73AF40C1309F38B18546C6C8B2FD00
Certificate serial:       246BA47EAA381AE63D79FFDF7DD8031D3DA2B4C7
Authority key identifier: 99:EA:0E:80:6C:73:AF:40:C1:30:9F:38:B1:85:46:C6:C8:B2:FD:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99EA0E806C73AF40C1309F38B18546C6C8B2FD00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6F39u2iPg71fKSJwDZyYXP6cC9RDPqSgsvpUn2V9CPnc/0/323830343a313631383a3a2f33322d3438203d3e20323633323637.roa
Signing time:             Tue 25 Jun 2024 12:00:52 +0000
ROA not before:           Tue 25 Jun 2024 11:55:52 +0000
ROA not after:            Tue 24 Jun 2025 12:00:52 +0000
asID:                     263267
IP address blocks:        2804:1618::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6F39u2iPg71fKSJwDZyYXP6cC9RDPqSgsvpUn2V9CPnc/0/99EA0E806C73AF40C1309F38B18546C6C8B2FD00.crl
                          rsync://rpki-repo.registro.br/repo/6F39u2iPg71fKSJwDZyYXP6cC9RDPqSgsvpUn2V9CPnc/0/99EA0E806C73AF40C1309F38B18546C6C8B2FD00.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99EA0E806C73AF40C1309F38B18546C6C8B2FD00.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 12:54:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:6b:a4:7e:aa:38:1a:e6:3d:79:ff:df:7d:d8:03:1d:3d:a2:b4:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99EA0E806C73AF40C1309F38B18546C6C8B2FD00
        Validity
            Not Before: Jun 25 11:55:52 2024 GMT
            Not After : Jun 24 12:00:52 2025 GMT
        Subject: CN=E951BEE86B130AE2A5A1224C0646A76497970D54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3b:07:13:d2:04:da:7c:bf:06:e8:59:50:ae:
                    03:3d:90:82:88:c0:ef:ba:9b:3e:fe:6d:30:a3:9a:
                    e8:43:df:7a:26:f7:38:0d:40:4e:3d:d8:a8:e5:52:
                    ce:e1:01:90:0c:3b:db:65:c1:52:17:f2:82:d0:3c:
                    46:3c:b6:85:46:de:c7:11:ca:ce:13:09:5d:85:e6:
                    28:ed:1a:d4:c3:72:b6:c2:9a:97:fe:26:24:be:fd:
                    fa:24:38:e1:eb:d3:bf:01:93:6e:15:6f:16:16:81:
                    05:a4:a3:a2:66:78:43:6a:6f:32:34:05:0e:4a:60:
                    3c:34:1d:1f:ac:d6:2f:f0:e3:18:de:ef:e1:e7:9a:
                    79:c7:e9:6e:ff:7b:10:00:4f:a1:32:ff:26:22:fc:
                    f9:5b:cb:f8:fa:22:4c:e1:37:29:5b:cd:28:52:00:
                    92:10:57:ae:0e:af:af:00:9b:e5:40:24:b8:da:4f:
                    95:5a:d8:12:4d:9d:09:ff:af:a7:41:7c:17:31:5e:
                    54:4d:75:03:f6:dc:2a:24:09:f9:9c:55:c4:50:62:
                    69:58:3a:de:63:31:fb:f9:f5:63:67:38:82:54:b9:
                    f6:8a:11:b0:fb:10:fe:3f:99:85:32:49:de:11:d9:
                    3a:92:38:c9:3a:f5:f6:8d:b6:06:e6:29:d1:85:0f:
                    62:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:51:BE:E8:6B:13:0A:E2:A5:A1:22:4C:06:46:A7:64:97:97:0D:54
            X509v3 Authority Key Identifier:
                keyid:99:EA:0E:80:6C:73:AF:40:C1:30:9F:38:B1:85:46:C6:C8:B2:FD:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6F39u2iPg71fKSJwDZyYXP6cC9RDPqSgsvpUn2V9CPnc/0/99EA0E806C73AF40C1309F38B18546C6C8B2FD00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99EA0E806C73AF40C1309F38B18546C6C8B2FD00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6F39u2iPg71fKSJwDZyYXP6cC9RDPqSgsvpUn2V9CPnc/0/323830343a313631383a3a2f33322d3438203d3e20323633323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1618::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:e0:2e:23:ad:93:b3:c8:a0:36:d3:e8:94:b9:8d:81:cc:7e:
         c6:f8:58:c6:30:8a:47:7e:31:95:1a:9b:96:66:94:33:c4:4d:
         7d:f5:0d:d8:4a:8a:f0:5b:68:a6:24:dc:f0:ac:d1:c6:7e:7a:
         9b:cb:a1:05:cd:57:ef:a0:dd:d4:6c:37:db:70:16:b3:fd:a1:
         ab:23:90:7c:f1:d6:a9:49:8d:8a:dc:39:bb:23:99:2f:e9:d2:
         c4:ff:98:56:ea:a8:2b:02:96:96:0c:3a:f8:c5:0a:a8:5b:6f:
         5a:7e:d9:94:3e:6f:f1:95:82:f0:c9:e7:0b:f3:cf:0e:4e:e2:
         4c:a6:59:1f:e5:e0:48:76:f2:b1:aa:63:1a:8f:e5:1e:b2:b8:
         7b:25:b8:bb:62:45:a3:34:10:e4:ce:90:ed:39:4b:ae:6e:4e:
         93:0e:30:94:9d:40:3d:ad:5c:10:28:cc:89:4e:dd:38:81:f0:
         43:ae:f8:22:28:5e:8e:8b:d2:57:0a:6c:33:39:4c:36:62:1e:
         f8:d0:fc:6a:a0:c3:de:21:00:3b:d0:6f:bd:b0:7e:92:49:b6:
         c0:32:18:7f:52:f6:d2:12:23:ed:59:e9:ad:43:8d:90:30:1c:
         e2:a6:db:80:64:72:e2:d3:7d:cb:85:55:8a:e7:e0:22:1b:24:
         a6:bc:aa:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 11:59:54 2024 by rpki-client on console-fra.rpki-client.org