Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/323830343a3961383a383030303a3a2f33342d3334203d3e20323632393739.roa
File:                     323830343a3961383a383030303a3a2f33342d3334203d3e20323632393739.roa (raw, json)
Hash identifier:          UCN0tXU+v6JiP4i5sXaHg7zaxgJAkQYyWnktXNiM464=
Subject key identifier:   06:87:9F:3D:BB:D6:56:69:2E:0A:AB:01:84:CB:37:67:E5:87:00:11
Certificate issuer:       /CN=99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D
Certificate serial:       75606144B97EEA95BEAEC1809F3975A5DE7B97CA
Authority key identifier: 99:E9:DF:48:0C:5E:7F:AC:EE:AD:7E:77:59:E5:EE:F3:C4:73:0E:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/323830343a3961383a383030303a3a2f33342d3334203d3e20323632393739.roa
Signing time:             Sat 12 Apr 2025 13:56:13 +0000
ROA not before:           Sat 12 Apr 2025 13:51:13 +0000
ROA not after:            Sat 11 Apr 2026 13:56:13 +0000
asID:                     262979
IP address blocks:        2804:9a8:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.crl
                          rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 16:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:60:61:44:b9:7e:ea:95:be:ae:c1:80:9f:39:75:a5:de:7b:97:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D
        Validity
            Not Before: Apr 12 13:51:13 2025 GMT
            Not After : Apr 11 13:56:13 2026 GMT
        Subject: CN=06879F3DBBD656692E0AAB0184CB3767E5870011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:94:3a:10:f4:5d:6b:0c:4e:5d:89:c7:56:ff:
                    9e:94:4e:59:05:bb:3f:94:b6:cc:ee:b0:bc:80:e5:
                    9e:db:6e:d1:5c:19:26:48:f7:1f:e9:b5:5f:70:45:
                    d6:e5:0e:1b:05:c9:dd:9e:84:4a:ae:31:45:5c:d9:
                    a8:90:56:df:a4:32:6a:31:f6:f0:a0:8f:54:19:03:
                    76:19:4d:19:58:c2:82:8e:d3:03:d9:d5:19:a2:cd:
                    34:f9:da:e3:33:01:3d:32:c1:46:77:cc:e6:b2:c4:
                    d5:ee:0e:6f:9e:6b:9f:5a:1b:83:9c:9c:14:51:90:
                    e8:86:16:cf:48:79:41:ea:2e:4d:74:cf:fa:c6:5a:
                    64:57:85:8e:ca:fb:f1:a4:d0:84:ac:7b:4b:2f:85:
                    a7:e9:e3:04:06:fa:f9:02:3f:b1:cb:b9:f8:c9:a3:
                    6f:93:0e:9d:dd:ba:28:0e:ec:98:93:e1:e7:4d:d2:
                    49:de:b7:8b:d9:8d:7b:3c:4f:f3:72:4d:53:60:65:
                    34:29:ae:f4:31:a5:ac:22:77:45:c0:7a:63:7d:b8:
                    20:e5:60:d7:3b:e1:c4:d3:b7:7c:fa:c4:7d:3b:34:
                    df:f8:a3:66:eb:d6:cd:d1:eb:ce:7c:72:7b:1e:8f:
                    9c:6b:65:93:82:0b:f4:00:15:19:25:60:b0:0f:e7:
                    67:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:87:9F:3D:BB:D6:56:69:2E:0A:AB:01:84:CB:37:67:E5:87:00:11
            X509v3 Authority Key Identifier:
                keyid:99:E9:DF:48:0C:5E:7F:AC:EE:AD:7E:77:59:E5:EE:F3:C4:73:0E:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/323830343a3961383a383030303a3a2f33342d3334203d3e20323632393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9a8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         4c:b7:c1:10:86:af:c6:c4:9a:70:e3:0b:7f:96:b8:71:17:76:
         be:45:3a:73:5a:d9:d9:14:a3:68:49:9b:c3:c4:7d:57:26:8b:
         2e:3f:05:d2:e0:d0:b1:59:4e:ff:80:cd:8e:bd:8e:bb:9f:80:
         16:0e:b5:ad:c3:11:f9:3d:fc:ed:d7:d2:02:fc:b7:53:c5:7c:
         6f:46:07:20:6c:3c:31:d7:eb:99:95:27:60:7d:29:42:ab:20:
         65:58:fb:51:33:3b:2b:c6:63:9a:95:f3:99:7d:21:8b:fb:31:
         69:bb:52:4b:b2:fb:36:75:ec:ca:05:c6:77:18:fb:2d:40:d6:
         07:1b:f5:bb:c6:05:c8:e2:27:64:3f:4d:2a:54:d7:24:4a:50:
         33:93:30:a5:da:14:b1:46:a7:e3:22:c1:09:70:75:b3:0f:5a:
         d2:6b:99:40:a3:3b:3f:66:ee:8a:4d:44:9e:52:f3:86:79:13:
         c4:ae:ab:fe:ff:a4:62:8b:00:8f:b8:a7:99:78:2d:07:d9:8a:
         06:33:47:0f:0a:00:68:e7:e5:cc:22:07:b1:6d:7a:26:ec:c3:
         0f:89:71:e8:2d:dd:5f:be:11:77:ac:b1:b4:69:95:c8:71:a9:
         54:73:1a:8f:8a:b4:49:0d:8f:ad:f8:5a:a4:00:e9:14:a8:de:
         a5:31:49:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:45:32 2025 by rpki-client