Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/323830343a3937303a383030303a3a2f33332d3333203d3e20323633303836.roa
File:                     323830343a3937303a383030303a3a2f33332d3333203d3e20323633303836.roa (raw, json)
Hash identifier:          aScYqqLh27UazV5vBTYOhAVYhsVnwotUsD8gFv/mCjk=
Subject key identifier:   E1:72:85:4C:5C:40:F8:35:A8:74:F5:97:65:0D:67:66:DD:8F:65:36
Certificate issuer:       /CN=99075A5B6164230A73705A6E393D26CF802B45B4
Certificate serial:       63038FA0542AB479061BF3944339D55AED10F57D
Authority key identifier: 99:07:5A:5B:61:64:23:0A:73:70:5A:6E:39:3D:26:CF:80:2B:45:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99075A5B6164230A73705A6E393D26CF802B45B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/323830343a3937303a383030303a3a2f33332d3333203d3e20323633303836.roa
Signing time:             Thu 04 Apr 2024 15:03:05 +0000
ROA not before:           Thu 04 Apr 2024 14:58:05 +0000
ROA not after:            Thu 03 Apr 2025 15:03:05 +0000
asID:                     263086
IP address blocks:        2804:970:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/99075A5B6164230A73705A6E393D26CF802B45B4.crl
                          rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/99075A5B6164230A73705A6E393D26CF802B45B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99075A5B6164230A73705A6E393D26CF802B45B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:03:8f:a0:54:2a:b4:79:06:1b:f3:94:43:39:d5:5a:ed:10:f5:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99075A5B6164230A73705A6E393D26CF802B45B4
        Validity
            Not Before: Apr  4 14:58:05 2024 GMT
            Not After : Apr  3 15:03:05 2025 GMT
        Subject: CN=E172854C5C40F835A874F597650D6766DD8F6536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9a:39:f0:65:b2:c7:22:81:55:66:c7:9d:91:
                    5a:fb:eb:4b:39:98:09:aa:1a:aa:ce:89:70:48:ec:
                    6c:44:f0:c5:14:37:fd:94:a4:1b:a4:e1:f0:ab:6e:
                    8c:ce:74:53:b6:c2:b8:fe:b5:37:4e:a5:3d:72:db:
                    d9:cd:92:d4:6c:b0:fb:e0:7a:28:46:40:62:9d:8c:
                    4f:53:e2:c3:87:ed:cd:d1:cc:55:15:2e:c2:be:f4:
                    56:ed:51:b7:bf:31:43:ed:7f:81:17:6d:7a:1f:14:
                    ce:e0:c3:c8:5f:ea:bb:06:c6:cc:62:56:71:0b:e2:
                    fb:a7:52:de:9e:3c:17:84:aa:7f:cf:89:23:03:48:
                    33:dc:55:1e:be:10:02:60:3e:7e:c7:d1:50:af:43:
                    e0:18:11:c6:33:41:b8:63:ab:34:41:04:a8:e1:14:
                    4a:2d:33:d7:c6:59:b4:bb:11:ae:ec:84:be:8b:d8:
                    08:cb:7c:fb:8f:07:6a:e9:79:90:3a:4d:51:a0:8f:
                    4e:68:3f:e5:88:73:3c:1f:ba:ca:32:45:a5:83:33:
                    69:f3:07:3d:ae:d4:f0:70:ef:93:b2:6f:4f:1e:e1:
                    8a:67:ba:40:14:62:47:cb:fb:a5:9a:f6:83:27:d3:
                    58:40:0f:83:4e:cd:16:b7:11:a1:25:47:34:5a:77:
                    64:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:72:85:4C:5C:40:F8:35:A8:74:F5:97:65:0D:67:66:DD:8F:65:36
            X509v3 Authority Key Identifier:
                keyid:99:07:5A:5B:61:64:23:0A:73:70:5A:6E:39:3D:26:CF:80:2B:45:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/99075A5B6164230A73705A6E393D26CF802B45B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99075A5B6164230A73705A6E393D26CF802B45B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/323830343a3937303a383030303a3a2f33332d3333203d3e20323633303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:970:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         03:58:95:eb:bc:f4:be:0a:83:91:68:57:17:b4:05:52:3d:65:
         39:cf:af:78:79:e2:5f:6b:54:bd:67:bb:20:d3:23:2a:7a:c4:
         2e:22:79:d8:7b:6b:6a:d8:24:fd:8e:d1:85:c9:71:c4:1f:0d:
         3d:9e:10:bf:65:a4:f2:c5:3d:4e:60:ae:40:69:f8:34:12:1b:
         c6:88:73:ef:2e:6c:f5:df:f2:5a:70:be:57:62:f0:9b:06:4b:
         e0:d6:d0:77:29:24:eb:78:8d:18:4a:7c:f5:cb:a0:0b:8f:e6:
         07:28:4d:f5:eb:b9:47:cf:c4:c0:1c:51:3c:19:6f:09:ba:7f:
         7a:df:fd:9b:2e:03:d3:f1:df:ed:58:4c:72:4c:c4:f6:71:92:
         82:00:97:d0:0d:71:57:fa:4c:ce:81:f7:e2:cc:d1:53:fe:ff:
         e1:59:60:7f:55:99:a0:b9:3e:e2:85:1c:09:b9:bb:89:75:0c:
         ad:70:9a:8b:0f:09:4d:6e:fe:96:47:04:96:0d:2a:23:05:4b:
         41:65:eb:b5:db:01:85:46:04:c7:4d:c2:21:1e:bd:d3:00:b6:
         97:34:a5:97:a0:90:23:a2:b5:15:48:f8:9d:37:8d:67:33:0c:
         d4:fa:c3:f9:84:99:ac:d3:ba:06:0a:ea:c7:b7:0d:69:8b:1c:
         c8:bf:64:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:11 2024 by rpki-client on console-ams.rpki-client.org