Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JAJH98rVPPhUhu4XgphGqxW9miXsbZAPM4qm2WBZ5vzc/1/323830343a366164303a383030303a3a2f33332d3333203d3e20323730333630.roa
File:                     323830343a366164303a383030303a3a2f33332d3333203d3e20323730333630.roa (raw, json)
Hash identifier:          +9bxdoOajrD8G5X5ujCcypjpw9FZFAnGcXlSROnopps=
Subject key identifier:   78:E1:02:10:11:50:C4:59:3A:75:DD:5D:8D:81:9E:2A:44:23:B5:3F
Certificate issuer:       /CN=6099A1F2EF8D0923920E7211AC2ED8921B81B66F
Certificate serial:       76101104E8A0B6D994AC095BC47C2627603F990F
Authority key identifier: 60:99:A1:F2:EF:8D:09:23:92:0E:72:11:AC:2E:D8:92:1B:81:B6:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6099A1F2EF8D0923920E7211AC2ED8921B81B66F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JAJH98rVPPhUhu4XgphGqxW9miXsbZAPM4qm2WBZ5vzc/1/323830343a366164303a383030303a3a2f33332d3333203d3e20323730333630.roa
Signing time:             Wed 03 Apr 2024 18:32:39 +0000
ROA not before:           Wed 03 Apr 2024 18:27:39 +0000
ROA not after:            Wed 02 Apr 2025 18:32:39 +0000
asID:                     270360
IP address blocks:        2804:6ad0:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JAJH98rVPPhUhu4XgphGqxW9miXsbZAPM4qm2WBZ5vzc/1/6099A1F2EF8D0923920E7211AC2ED8921B81B66F.crl
                          rsync://rpki-repo.registro.br/repo/JAJH98rVPPhUhu4XgphGqxW9miXsbZAPM4qm2WBZ5vzc/1/6099A1F2EF8D0923920E7211AC2ED8921B81B66F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6099A1F2EF8D0923920E7211AC2ED8921B81B66F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:10:11:04:e8:a0:b6:d9:94:ac:09:5b:c4:7c:26:27:60:3f:99:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6099A1F2EF8D0923920E7211AC2ED8921B81B66F
        Validity
            Not Before: Apr  3 18:27:39 2024 GMT
            Not After : Apr  2 18:32:39 2025 GMT
        Subject: CN=78E102101150C4593A75DD5D8D819E2A4423B53F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:58:9f:e3:c4:90:a4:7d:75:9a:6e:51:9c:9c:
                    75:e5:cd:56:49:13:a7:88:7e:aa:3b:ce:db:b5:41:
                    94:84:24:ef:0d:c8:1e:8e:34:45:b9:82:75:f3:0f:
                    ba:19:7f:e9:26:31:7c:50:a2:07:6b:da:b4:64:83:
                    4e:b3:7e:43:8d:30:f9:52:a5:eb:6a:92:fd:db:75:
                    99:d2:2f:26:3b:60:dd:15:5e:16:74:be:cc:91:81:
                    5b:1d:31:d9:c6:8d:d5:02:86:1c:a0:96:23:de:96:
                    bf:6b:c2:55:26:76:65:ad:fd:96:90:29:c5:f8:08:
                    c4:4e:66:dc:b9:20:0a:4d:24:66:2e:8f:d0:78:96:
                    e0:6b:69:f6:87:d7:b3:95:cf:36:ef:cf:4a:bf:65:
                    32:08:68:37:c5:d1:c9:fa:71:7c:55:b5:d2:01:e6:
                    6f:4b:29:3e:40:ff:8f:b8:7a:86:9a:81:84:15:93:
                    9e:66:f4:c9:39:87:e1:83:4a:26:76:c8:56:f8:05:
                    59:30:68:c3:80:42:26:7e:93:4d:5e:4d:07:c0:4b:
                    2f:71:a2:a8:b3:8b:b6:64:c3:bf:aa:14:a3:cd:d2:
                    41:42:8d:39:4d:3e:05:9e:e4:14:a3:ef:6c:5a:82:
                    be:20:4d:a7:8e:c9:e0:95:a8:eb:95:b5:ee:e0:fc:
                    31:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E1:02:10:11:50:C4:59:3A:75:DD:5D:8D:81:9E:2A:44:23:B5:3F
            X509v3 Authority Key Identifier:
                keyid:60:99:A1:F2:EF:8D:09:23:92:0E:72:11:AC:2E:D8:92:1B:81:B6:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JAJH98rVPPhUhu4XgphGqxW9miXsbZAPM4qm2WBZ5vzc/1/6099A1F2EF8D0923920E7211AC2ED8921B81B66F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6099A1F2EF8D0923920E7211AC2ED8921B81B66F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JAJH98rVPPhUhu4XgphGqxW9miXsbZAPM4qm2WBZ5vzc/1/323830343a366164303a383030303a3a2f33332d3333203d3e20323730333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ad0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         15:58:e2:64:c8:ec:3e:ae:d5:d6:8e:58:65:14:d2:4f:dd:73:
         00:b2:2e:05:64:f8:e1:c2:3b:66:e8:6b:ea:b5:7d:aa:ae:b3:
         c0:0c:97:2b:27:bf:bf:c9:b3:69:89:b9:85:8e:6c:99:3c:ed:
         a4:5c:64:0c:4a:9f:5f:f5:10:e4:30:c3:3f:54:63:28:9b:e8:
         c7:b1:68:d9:ff:19:e2:98:a4:de:9a:84:80:bb:a2:73:80:29:
         c3:48:bd:a9:3c:a5:f6:6a:16:fa:33:b3:2e:2f:cb:22:51:6a:
         fd:ba:b7:1d:87:31:26:d4:b7:59:76:d5:f4:e1:35:3d:e6:43:
         9d:1a:2c:dc:e1:b7:52:2f:87:4e:74:c4:e4:88:f5:71:0c:a4:
         86:cb:4b:a1:56:71:fd:9c:59:27:f8:13:01:9b:b5:44:89:e2:
         a4:4d:d9:a3:8d:02:9a:41:95:b7:68:77:7d:1f:cb:51:66:99:
         26:be:f0:e7:70:b7:7e:9b:c4:9c:82:39:b0:b4:c4:b7:2b:34:
         18:c8:c8:11:8c:6b:ed:d2:aa:36:f2:dc:d8:37:c0:e4:e0:47:
         a9:c9:96:bc:9d:e4:a7:58:68:47:14:d6:09:94:f1:b5:54:72:
         78:7c:cf:b5:9a:86:e9:a4:ee:f0:3a:15:dd:c4:65:a6:c8:05:
         2a:7d:96:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:38 2024 by rpki-client on console-fra.rpki-client.org