Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/323830343a3961383a3a2f33322d3334203d3e20323632393739.roa
File:                     323830343a3961383a3a2f33322d3334203d3e20323632393739.roa (raw, json)
Hash identifier:          /4iDBPjawseg5ACHnof3u3z/jB3FrlrwHcR17gnB5C4=
Subject key identifier:   0E:98:B4:AC:7B:13:91:92:E0:49:94:0F:C2:E7:28:96:31:62:E6:E6
Certificate issuer:       /CN=99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D
Certificate serial:       13344DE14CDBC4CB82400CE4A2E0F743BF1AC2A3
Authority key identifier: 99:E9:DF:48:0C:5E:7F:AC:EE:AD:7E:77:59:E5:EE:F3:C4:73:0E:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/323830343a3961383a3a2f33322d3334203d3e20323632393739.roa
Signing time:             Thu 04 Apr 2024 05:47:49 +0000
ROA not before:           Thu 04 Apr 2024 05:42:49 +0000
ROA not after:            Thu 03 Apr 2025 05:47:49 +0000
asID:                     262979
IP address blocks:        2804:9a8::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.crl
                          rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:11:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:34:4d:e1:4c:db:c4:cb:82:40:0c:e4:a2:e0:f7:43:bf:1a:c2:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D
        Validity
            Not Before: Apr  4 05:42:49 2024 GMT
            Not After : Apr  3 05:47:49 2025 GMT
        Subject: CN=0E98B4AC7B139192E049940FC2E728963162E6E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:be:93:e1:82:e0:cd:4c:d1:cf:a1:3e:a5:88:
                    4f:56:9a:72:c5:3e:4d:3c:48:25:d5:29:a7:b3:5a:
                    ba:a3:02:50:22:5a:c0:2d:d5:f9:5e:4a:0e:9e:a5:
                    47:fc:b4:81:d0:f5:94:37:04:e0:79:39:2b:d4:a0:
                    99:28:06:bf:18:e1:fb:05:83:e7:fc:5f:e8:83:c7:
                    8f:ac:1d:f0:eb:8e:38:29:8f:e7:b0:d8:fd:9d:b3:
                    9f:1a:b9:fc:54:15:dc:44:82:8c:e0:c2:11:40:b3:
                    21:ec:21:68:b0:49:7b:25:42:bf:56:11:7a:d8:91:
                    78:34:03:3f:40:c7:2b:e9:fa:11:0f:e1:88:a1:34:
                    15:7f:d4:4c:68:ae:0b:9a:f9:79:b4:ee:51:4e:ff:
                    6a:b7:8a:06:e5:8e:21:9f:37:e2:1f:05:3d:f2:aa:
                    99:88:6f:00:33:56:35:76:23:04:4c:af:5a:bd:b2:
                    ad:1c:95:be:2d:47:c6:69:92:19:f1:d3:9f:d9:44:
                    e3:d1:58:e2:b3:ce:56:5b:c7:5a:f0:88:47:ff:29:
                    06:c8:24:ca:93:b0:21:58:43:a2:a8:61:a8:e9:db:
                    e6:9e:19:ce:d6:19:49:3c:5f:e2:80:ba:45:f0:1a:
                    c6:e4:58:40:a8:4e:78:8d:dc:9b:fd:69:bd:25:dd:
                    0e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:98:B4:AC:7B:13:91:92:E0:49:94:0F:C2:E7:28:96:31:62:E6:E6
            X509v3 Authority Key Identifier:
                keyid:99:E9:DF:48:0C:5E:7F:AC:EE:AD:7E:77:59:E5:EE:F3:C4:73:0E:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/323830343a3961383a3a2f33322d3334203d3e20323632393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:71:89:b7:67:b6:7f:6b:1d:b4:65:57:6c:22:ec:07:bc:ba:
         6b:7b:81:02:8b:00:4d:e3:97:78:a1:4e:85:71:5e:6f:d4:fb:
         a8:d2:ba:c8:ea:27:f4:dc:76:ce:c6:09:c9:16:dd:22:94:f9:
         cc:c0:36:50:10:0e:fb:b2:69:97:bb:2c:ca:62:58:6f:c6:84:
         f8:9e:ad:f0:75:e9:ad:5b:a0:a3:a2:65:dd:d9:49:ea:e7:17:
         16:48:e2:0d:88:b0:88:78:bf:b1:40:f6:2f:2a:61:6c:34:5f:
         f9:17:9b:6c:67:ef:a4:e5:8d:19:d2:f1:1b:64:9b:5e:40:c7:
         69:5a:17:c7:e6:76:66:99:f3:a0:18:d1:24:18:0e:95:a1:17:
         e1:d6:aa:f3:ec:f3:1c:9e:8b:72:38:14:fd:73:99:49:04:ab:
         f2:19:41:fd:67:5a:3a:60:18:3f:7c:bd:53:f3:73:43:f0:eb:
         0c:88:31:71:8b:31:e9:70:1d:f4:c7:fc:5f:f3:40:af:b5:02:
         c0:53:6d:9b:52:bc:94:28:35:68:d4:47:12:de:bf:e0:e6:01:
         23:38:c5:4c:a1:53:8c:ce:99:fc:b4:37:8b:93:e3:c1:cb:86:
         ab:c9:a4:1e:f8:99:ea:ca:79:e5:46:a7:65:95:73:fa:f8:13:
         3b:d4:0c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:13 2024 by rpki-client on console-ams.rpki-client.org