Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JAJH98rVPPhUhu4XgphGqxW9miXsbZAPM4qm2WBZ5vzc/1/323830343a366164303a3a2f33332d3333203d3e20323730333630.roa
File:                     323830343a366164303a3a2f33332d3333203d3e20323730333630.roa (raw, json)
Hash identifier:          8SQ+BZTfPMkIEkCYHuIJMqJkwrr4UB5gv44IvD7sjvk=
Subject key identifier:   91:6F:8D:0C:93:C5:F8:E2:6B:9B:B1:D2:08:F5:19:CA:CF:8F:62:95
Certificate issuer:       /CN=6099A1F2EF8D0923920E7211AC2ED8921B81B66F
Certificate serial:       76C635C8E87356A85474E7AE9E3BB81DEDF33840
Authority key identifier: 60:99:A1:F2:EF:8D:09:23:92:0E:72:11:AC:2E:D8:92:1B:81:B6:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6099A1F2EF8D0923920E7211AC2ED8921B81B66F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JAJH98rVPPhUhu4XgphGqxW9miXsbZAPM4qm2WBZ5vzc/1/323830343a366164303a3a2f33332d3333203d3e20323730333630.roa
Signing time:             Wed 03 Apr 2024 18:32:39 +0000
ROA not before:           Wed 03 Apr 2024 18:27:39 +0000
ROA not after:            Wed 02 Apr 2025 18:32:39 +0000
asID:                     270360
IP address blocks:        2804:6ad0::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JAJH98rVPPhUhu4XgphGqxW9miXsbZAPM4qm2WBZ5vzc/1/6099A1F2EF8D0923920E7211AC2ED8921B81B66F.crl
                          rsync://rpki-repo.registro.br/repo/JAJH98rVPPhUhu4XgphGqxW9miXsbZAPM4qm2WBZ5vzc/1/6099A1F2EF8D0923920E7211AC2ED8921B81B66F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6099A1F2EF8D0923920E7211AC2ED8921B81B66F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:c6:35:c8:e8:73:56:a8:54:74:e7:ae:9e:3b:b8:1d:ed:f3:38:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6099A1F2EF8D0923920E7211AC2ED8921B81B66F
        Validity
            Not Before: Apr  3 18:27:39 2024 GMT
            Not After : Apr  2 18:32:39 2025 GMT
        Subject: CN=916F8D0C93C5F8E26B9BB1D208F519CACF8F6295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:18:eb:c6:54:61:4d:b2:6e:5a:68:d4:be:c1:
                    c8:7b:10:ed:9f:94:23:62:eb:bb:e1:7b:1b:b0:e4:
                    56:a3:ab:bb:2d:3c:e4:0e:6e:3e:65:dd:f5:33:d5:
                    a4:33:07:69:79:0c:a6:ec:d7:75:0c:ba:b0:e7:09:
                    c2:3a:ba:7f:7d:2f:85:3a:4a:04:12:82:5f:1a:de:
                    ed:8e:fc:50:c6:81:97:90:1a:e3:c4:af:8b:fa:bd:
                    e1:6e:3b:ea:32:fa:f3:e3:66:d5:28:0b:68:3d:1e:
                    61:85:bc:47:06:ce:6a:7e:31:9a:c7:be:9a:3c:84:
                    a3:4e:04:d8:fd:53:0b:c9:26:d3:14:4c:62:c1:93:
                    50:a7:80:6d:7e:ad:97:5e:6c:dd:c2:b0:d2:5f:a2:
                    6e:7a:ab:95:e2:3d:73:08:bd:4b:cb:d6:bc:d7:43:
                    ce:61:d0:49:39:b5:50:4e:80:22:53:7d:dc:02:5a:
                    78:ab:8f:06:30:9e:62:0d:55:0a:58:91:6c:1a:fa:
                    f2:3b:28:50:da:b3:54:e8:18:8d:15:bb:37:08:76:
                    c1:fc:ca:e9:0f:96:e7:90:72:35:4f:6b:05:52:56:
                    42:e2:bc:62:c1:fc:cb:06:b9:fa:67:91:7f:45:6b:
                    7a:ed:84:97:b9:d8:e9:75:16:a3:33:2d:da:ab:c7:
                    12:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:6F:8D:0C:93:C5:F8:E2:6B:9B:B1:D2:08:F5:19:CA:CF:8F:62:95
            X509v3 Authority Key Identifier:
                keyid:60:99:A1:F2:EF:8D:09:23:92:0E:72:11:AC:2E:D8:92:1B:81:B6:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JAJH98rVPPhUhu4XgphGqxW9miXsbZAPM4qm2WBZ5vzc/1/6099A1F2EF8D0923920E7211AC2ED8921B81B66F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6099A1F2EF8D0923920E7211AC2ED8921B81B66F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JAJH98rVPPhUhu4XgphGqxW9miXsbZAPM4qm2WBZ5vzc/1/323830343a366164303a3a2f33332d3333203d3e20323730333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ad0::/33

    Signature Algorithm: sha256WithRSAEncryption
         bf:38:80:77:16:04:a7:51:90:73:7c:5e:4a:b4:d8:80:a2:0e:
         55:25:17:47:cd:ae:d1:5c:1d:f2:e5:10:c0:80:60:50:ec:9e:
         20:fe:ce:3a:26:dc:56:f6:ae:96:93:64:1e:63:99:85:31:92:
         8c:33:c0:2d:a9:c2:a7:b0:18:80:f7:21:9b:a7:81:3f:40:b4:
         82:cc:c6:4b:c9:2d:05:a8:7b:de:10:49:00:0f:b5:b8:35:bc:
         f0:63:62:8d:99:6b:a7:ec:b2:c5:b0:14:fa:83:54:f9:34:8b:
         43:c5:c0:7d:e5:1b:c0:17:27:e6:80:41:2c:86:73:50:b7:f2:
         d3:67:b2:88:02:5f:2a:dd:04:87:0c:37:0c:d6:6d:f4:33:ae:
         9f:13:21:f0:54:52:21:18:58:81:c7:c4:2c:0b:fb:36:14:60:
         9a:91:f3:e7:01:59:0a:3e:0e:fc:b9:ee:a5:6f:a0:2b:7c:73:
         ee:b8:af:79:d9:07:9d:df:bb:da:9b:6e:0f:44:e8:42:84:d5:
         f3:db:e5:73:59:c9:c8:2d:31:06:98:84:66:2c:3f:6d:98:85:
         04:7d:26:fa:da:77:d0:b9:6a:d5:61:4e:e1:c8:47:a7:74:74:
         ac:74:f0:96:f1:0d:8c:8c:0f:3d:8d:37:f9:00:ed:80:34:e9:
         f0:ab:ce:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:48 2024 by rpki-client on console-ams.rpki-client.org