Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/323830343a3961383a343030303a3a2f33342d3334203d3e20323632393739.roa
File:                     323830343a3961383a343030303a3a2f33342d3334203d3e20323632393739.roa (raw, json)
Hash identifier:          Qm0tSgQTPEe7dsKHJf9XlxrruuB+P+nX8Pj/Bsc4CPw=
Subject key identifier:   8B:79:16:49:FA:14:55:CF:60:1A:4F:2F:27:78:78:74:BD:58:A4:27
Certificate issuer:       /CN=99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D
Certificate serial:       1812AF2A98AF32DE8F5325907D1CAF207D06890C
Authority key identifier: 99:E9:DF:48:0C:5E:7F:AC:EE:AD:7E:77:59:E5:EE:F3:C4:73:0E:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/323830343a3961383a343030303a3a2f33342d3334203d3e20323632393739.roa
Signing time:             Sat 12 Apr 2025 13:56:07 +0000
ROA not before:           Sat 12 Apr 2025 13:51:07 +0000
ROA not after:            Sat 11 Apr 2026 13:56:07 +0000
asID:                     262979
IP address blocks:        2804:9a8:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.crl
                          rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 16:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:12:af:2a:98:af:32:de:8f:53:25:90:7d:1c:af:20:7d:06:89:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D
        Validity
            Not Before: Apr 12 13:51:07 2025 GMT
            Not After : Apr 11 13:56:07 2026 GMT
        Subject: CN=8B791649FA1455CF601A4F2F27787874BD58A427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:3a:04:12:b6:5e:f0:d6:f8:c3:f9:df:f1:31:
                    e9:e0:f5:24:fb:5b:af:79:bc:74:be:65:52:1a:3f:
                    47:4f:0a:25:0c:e4:e9:c1:b3:15:1b:5a:ed:e6:a9:
                    e2:73:d7:d3:a3:28:ff:5e:70:f0:29:24:4d:f1:22:
                    b5:27:62:70:a0:12:88:4d:05:82:9d:7b:52:47:c0:
                    20:a0:1e:35:e6:fb:48:b4:de:55:c2:03:43:42:0d:
                    57:4f:8e:e8:46:b1:7c:60:68:6c:84:3e:f6:f4:c1:
                    29:88:49:03:70:65:30:f1:7a:37:30:be:29:c7:4c:
                    45:bd:2c:e9:05:7e:c7:12:a2:47:b0:08:47:95:69:
                    96:06:7f:2e:e6:63:a9:8a:38:b8:d7:05:55:c9:b1:
                    29:bc:36:71:33:ce:d8:40:b8:f0:f8:4e:f8:38:b0:
                    7b:d1:e4:e8:39:f1:c8:77:ed:a3:1e:ad:7a:78:cc:
                    5c:d4:fa:bd:d0:d2:8f:d5:21:78:2c:88:12:df:80:
                    3c:0d:21:ec:eb:38:ab:cb:6e:bb:d8:cc:85:25:fc:
                    ef:0c:4a:a6:a8:03:a3:ef:33:6e:35:50:51:98:ea:
                    53:5a:65:25:07:29:35:ae:d6:25:b0:1c:d4:fa:47:
                    be:aa:ae:84:f6:56:6c:d4:90:67:65:33:ab:20:0a:
                    0f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:79:16:49:FA:14:55:CF:60:1A:4F:2F:27:78:78:74:BD:58:A4:27
            X509v3 Authority Key Identifier:
                keyid:99:E9:DF:48:0C:5E:7F:AC:EE:AD:7E:77:59:E5:EE:F3:C4:73:0E:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/323830343a3961383a343030303a3a2f33342d3334203d3e20323632393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9a8:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         0d:b5:76:f5:6f:95:43:93:9b:f4:a3:fc:13:37:92:aa:97:3d:
         12:34:36:fb:88:7b:f2:2a:32:a1:d2:c3:44:7a:68:55:22:e7:
         c0:6e:e2:0b:f7:fd:81:21:e4:a1:68:ba:37:9f:61:56:a4:e8:
         90:5b:2b:ef:84:9e:3c:84:4a:01:0e:7e:e8:87:32:8e:7c:fe:
         b7:61:ac:d3:19:63:a6:70:02:09:e3:c5:6c:fb:fe:85:a7:b8:
         ce:c5:2a:06:65:07:33:1b:6e:8e:1e:32:7c:4d:c4:6e:d2:b3:
         6a:74:6e:12:49:79:fc:7e:23:89:bd:d3:02:a5:e9:4f:a8:0f:
         ba:c7:b4:75:15:c6:1d:7d:f5:67:8f:aa:c4:ba:ef:f5:26:31:
         07:19:24:83:2e:57:f0:ae:95:ad:3d:d0:52:4d:70:4c:3b:a1:
         7b:1f:50:66:dc:97:c1:4e:75:5f:82:41:c1:bd:a6:1b:81:8e:
         21:57:3c:b0:a1:0d:65:84:d8:51:81:fb:85:4a:94:46:2e:b6:
         e1:7f:a6:d3:66:7c:65:eb:fe:8b:1d:3f:8c:05:69:a8:92:6d:
         2c:2d:3b:5c:be:74:74:36:2d:31:0d:1b:98:2f:33:3b:e4:23:
         32:86:1e:5b:77:bc:92:e7:09:cc:53:cd:7e:bc:f6:a7:e4:23:
         49:2a:d9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:39:55 2025 by rpki-client