Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9G89gJgZeyhfjANknxDvMdhkyXhQf6VreXRWReDzbAjg/0/323830343a383039383a3a2f33322d3336203d3e20323731373631.roa
File:                     323830343a383039383a3a2f33322d3336203d3e20323731373631.roa (raw, json)
Hash identifier:          VZdx3an4C6CbS4QMeFEqOAjjb3e2zwboZEb3xzbC3xs=
Subject key identifier:   01:87:D9:B8:F6:AB:3E:9B:7A:DC:11:97:26:1A:BC:03:96:59:55:09
Certificate issuer:       /CN=99CA500F07D2312A78507D8535CEFA751B0618F6
Certificate serial:       350DF2E19DAE831343BE9D23506EE032F79337AB
Authority key identifier: 99:CA:50:0F:07:D2:31:2A:78:50:7D:85:35:CE:FA:75:1B:06:18:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99CA500F07D2312A78507D8535CEFA751B0618F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9G89gJgZeyhfjANknxDvMdhkyXhQf6VreXRWReDzbAjg/0/323830343a383039383a3a2f33322d3336203d3e20323731373631.roa
Signing time:             Tue 25 Jun 2024 21:25:24 +0000
ROA not before:           Tue 25 Jun 2024 21:20:24 +0000
ROA not after:            Tue 24 Jun 2025 21:25:24 +0000
asID:                     271761
IP address blocks:        2804:8098::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9G89gJgZeyhfjANknxDvMdhkyXhQf6VreXRWReDzbAjg/0/99CA500F07D2312A78507D8535CEFA751B0618F6.crl
                          rsync://rpki-repo.registro.br/repo/9G89gJgZeyhfjANknxDvMdhkyXhQf6VreXRWReDzbAjg/0/99CA500F07D2312A78507D8535CEFA751B0618F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99CA500F07D2312A78507D8535CEFA751B0618F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 04 Jul 2024 12:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:0d:f2:e1:9d:ae:83:13:43:be:9d:23:50:6e:e0:32:f7:93:37:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99CA500F07D2312A78507D8535CEFA751B0618F6
        Validity
            Not Before: Jun 25 21:20:24 2024 GMT
            Not After : Jun 24 21:25:24 2025 GMT
        Subject: CN=0187D9B8F6AB3E9B7ADC1197261ABC0396595509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f7:9f:30:06:bb:42:e3:31:d5:e1:ae:d6:fd:
                    ea:13:bc:31:7f:7f:d6:df:80:d9:f7:76:56:90:60:
                    41:c6:21:74:5f:5f:fd:93:53:aa:11:e8:3b:0c:ee:
                    f7:1b:84:18:92:c2:08:ad:a3:31:d2:9e:dc:fc:e3:
                    c6:2e:2d:70:2f:90:ee:02:57:61:75:47:65:6c:ad:
                    c4:47:1f:6b:ef:61:a8:36:2a:fb:9a:f1:06:5b:d7:
                    5a:1d:cf:54:f7:19:81:d0:64:29:30:22:ff:71:90:
                    df:93:b5:fa:f5:a2:5c:98:51:33:cd:4b:7c:32:b8:
                    d4:f8:39:fc:c5:80:65:16:eb:95:7d:fa:d3:42:a1:
                    07:e2:0b:46:5f:9d:75:7d:e6:1e:4a:a9:d7:c9:59:
                    9f:a4:c2:70:5c:ab:30:7c:57:0b:5c:1d:a3:92:26:
                    90:1a:9a:21:2e:40:bd:3d:7c:4f:82:e1:06:00:c7:
                    d9:a8:7a:66:43:76:03:6a:da:4f:51:44:01:61:ef:
                    c2:a0:a9:5b:c6:ee:1f:8c:00:51:91:a7:3a:13:84:
                    fa:74:5d:9f:16:c9:3b:8d:f3:07:44:29:04:84:93:
                    6f:c5:7c:56:db:9e:ae:1a:88:fa:04:71:bd:13:e3:
                    73:19:59:57:87:06:d6:94:05:e8:e0:94:38:87:32:
                    e1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:87:D9:B8:F6:AB:3E:9B:7A:DC:11:97:26:1A:BC:03:96:59:55:09
            X509v3 Authority Key Identifier:
                keyid:99:CA:50:0F:07:D2:31:2A:78:50:7D:85:35:CE:FA:75:1B:06:18:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9G89gJgZeyhfjANknxDvMdhkyXhQf6VreXRWReDzbAjg/0/99CA500F07D2312A78507D8535CEFA751B0618F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99CA500F07D2312A78507D8535CEFA751B0618F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9G89gJgZeyhfjANknxDvMdhkyXhQf6VreXRWReDzbAjg/0/323830343a383039383a3a2f33322d3336203d3e20323731373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8098::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:2a:6b:87:e7:f1:ed:e2:ad:f3:b0:8c:22:9f:f2:db:cf:38:
         60:34:d1:06:07:b0:db:4e:48:43:37:e6:10:3c:c9:7f:d2:27:
         86:f1:24:3d:b2:c4:cc:36:a6:38:e3:1e:f1:18:1e:28:19:14:
         15:e7:e1:ce:75:69:c0:bd:56:00:30:cb:1d:2f:ec:2d:5d:2e:
         90:b6:f5:a9:73:1d:1d:02:02:1b:86:3d:b8:2a:f7:c8:44:38:
         5f:cd:84:96:9f:36:48:14:a8:9a:f9:3b:4e:39:a1:f6:91:45:
         8e:ac:44:f6:d7:cd:3d:73:d3:30:27:7a:d6:d5:4a:2b:5f:34:
         5a:f2:02:19:24:83:3b:14:1e:5a:ba:31:2d:03:23:5a:7c:3d:
         71:b8:70:82:54:cd:fe:94:39:8c:66:c7:85:a0:2b:bf:a3:13:
         f1:79:19:bf:67:bb:5c:ab:84:ce:51:fa:1e:d3:8d:00:31:ec:
         c2:ed:f2:76:12:49:3e:7b:bd:d5:3e:06:ca:93:4d:11:3f:37:
         9e:c9:3d:b0:c4:9d:6b:c3:b9:7f:a7:55:92:03:6f:fb:e5:20:
         ef:33:b8:ce:fc:80:82:b8:10:36:8d:6f:33:63:03:15:f5:4e:
         40:8b:e7:57:35:b4:e6:e9:06:bf:c5:c3:00:d4:90:28:3f:54:
         bf:bf:e7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 12:17:40 2024 by rpki-client on console-ams.rpki-client.org