Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/323830343a3961383a633030303a3a2f33342d3336203d3e20323632393739.roa
File:                     323830343a3961383a633030303a3a2f33342d3336203d3e20323632393739.roa (raw, json)
Hash identifier:          qRK5k4AB6fhTHx3sVqMlDB90OpQoVK83qqoJ3kHznkA=
Subject key identifier:   FA:99:49:96:BD:72:39:D8:69:07:B8:34:3F:14:00:5F:E9:DD:0A:CA
Certificate issuer:       /CN=99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D
Certificate serial:       116EA881E08EFED094002D6DC431ADBEA69811F1
Authority key identifier: 99:E9:DF:48:0C:5E:7F:AC:EE:AD:7E:77:59:E5:EE:F3:C4:73:0E:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/323830343a3961383a633030303a3a2f33342d3336203d3e20323632393739.roa
Signing time:             Thu 27 Feb 2025 20:15:06 +0000
ROA not before:           Thu 27 Feb 2025 20:10:06 +0000
ROA not after:            Thu 26 Feb 2026 20:15:06 +0000
asID:                     262979
IP address blocks:        2804:9a8:c000::/34 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.crl
                          rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 16:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:6e:a8:81:e0:8e:fe:d0:94:00:2d:6d:c4:31:ad:be:a6:98:11:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D
        Validity
            Not Before: Feb 27 20:10:06 2025 GMT
            Not After : Feb 26 20:15:06 2026 GMT
        Subject: CN=FA994996BD7239D86907B8343F14005FE9DD0ACA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ba:fc:80:43:df:20:28:fd:5e:f6:b9:80:0b:
                    20:9b:b7:dc:60:5f:96:22:d1:b2:a3:42:1b:8a:74:
                    b6:d6:e2:ab:a1:f6:1b:ad:92:98:04:94:5d:87:9a:
                    43:d9:8b:fa:1a:32:ec:dc:e9:7d:9f:10:97:b6:b4:
                    0c:6b:30:fa:c0:c8:09:53:9c:3f:82:01:14:43:c1:
                    04:0b:14:ae:95:43:03:a5:27:8a:65:53:80:ee:62:
                    f5:b4:5e:6e:d5:98:8d:43:15:e6:fb:9b:88:52:77:
                    f5:93:d4:ff:0f:af:ff:0a:0d:f9:58:6d:26:0c:cd:
                    1b:c7:f6:b7:50:43:4c:44:29:d7:e5:8c:36:19:b2:
                    d1:07:23:4c:3e:92:81:1a:ee:98:e3:b5:09:d5:88:
                    79:18:e9:7d:c6:f3:23:58:9f:08:2b:56:49:37:d6:
                    4c:b1:ee:7d:70:b3:88:fd:36:41:62:eb:2d:16:a2:
                    a5:fa:ed:ad:66:07:3c:88:f3:ee:19:69:d0:19:74:
                    33:84:5e:5b:6f:03:5e:e5:56:26:97:c3:a9:17:f0:
                    0e:b1:3c:8d:8e:49:f8:1b:c2:b5:37:04:15:34:b7:
                    b0:3c:09:25:3b:eb:b1:ed:c0:b1:ab:a0:fd:d1:45:
                    f4:6d:e6:7c:42:52:f8:5d:2b:fb:4e:e0:1d:d2:e2:
                    75:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:99:49:96:BD:72:39:D8:69:07:B8:34:3F:14:00:5F:E9:DD:0A:CA
            X509v3 Authority Key Identifier:
                keyid:99:E9:DF:48:0C:5E:7F:AC:EE:AD:7E:77:59:E5:EE:F3:C4:73:0E:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/323830343a3961383a633030303a3a2f33342d3336203d3e20323632393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9a8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         04:a1:56:bd:5d:6a:81:9b:a2:1b:fb:10:0f:53:2f:02:4f:da:
         7d:2b:9e:75:72:95:82:0c:11:ec:c3:63:12:7f:9d:96:d1:89:
         12:60:ae:b5:25:04:98:26:cc:2d:38:89:f9:92:51:cb:15:4c:
         25:ac:26:d0:8d:98:8b:ce:9a:7e:e9:e1:9a:86:d9:25:43:d3:
         a6:6e:41:0e:97:b8:31:1c:c0:b7:ad:a7:ca:2d:ca:2a:38:6b:
         07:e9:52:3f:b8:ed:f2:a7:1f:c9:9a:c6:0c:5c:08:7d:39:84:
         fb:85:28:9c:ff:ab:5c:0c:62:93:e3:91:7e:90:ba:f6:ef:4a:
         9f:89:86:ba:f6:35:d1:6b:e3:86:51:1a:28:24:b8:56:f8:5b:
         5d:3a:d5:4e:9a:a7:98:5a:67:b6:fa:78:ee:d4:ec:a1:54:79:
         27:b3:81:ee:b2:00:76:20:fd:a2:65:83:e3:b5:4b:1d:4d:a6:
         31:42:d6:72:98:13:bd:84:e0:5b:6d:3c:40:44:f1:17:21:60:
         bc:9d:3d:93:1f:fb:23:9b:b9:56:fc:ed:42:f8:18:e0:b8:51:
         f2:a7:8f:0a:16:65:01:b0:9f:44:34:04:85:c7:94:9d:7d:98:
         ed:ef:f4:a9:ed:2c:4a:60:02:35:65:f7:2c:d3:56:c4:8e:f1:
         37:43:a3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:39:58 2025 by rpki-client