Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/323830343a3663343a393030303a3a2f33362d313238203d3e20323632383933.roa
File:                     323830343a3663343a393030303a3a2f33362d313238203d3e20323632383933.roa (raw, json)
Hash identifier:          c5T2FEwfBejqfkavLbP4aDquaY268d8XzH1nT9TtbnA=
Subject key identifier:   BF:8F:CE:23:F7:76:A1:05:7A:CC:78:0A:D1:AC:72:D2:EE:99:38:90
Certificate issuer:       /CN=99B35081E0645635AD4D8BE70E34F035910FB764
Certificate serial:       62BBE51DE4020F172D6ECA82F34AE6C0EAAFE10F
Authority key identifier: 99:B3:50:81:E0:64:56:35:AD:4D:8B:E7:0E:34:F0:35:91:0F:B7:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99B35081E0645635AD4D8BE70E34F035910FB764.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/323830343a3663343a393030303a3a2f33362d313238203d3e20323632383933.roa
Signing time:             Fri 07 Mar 2025 05:20:25 +0000
ROA not before:           Fri 07 Mar 2025 05:15:25 +0000
ROA not after:            Fri 06 Mar 2026 05:20:25 +0000
asID:                     262893
IP address blocks:        2804:6c4:9000::/36 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/99B35081E0645635AD4D8BE70E34F035910FB764.crl
                          rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/99B35081E0645635AD4D8BE70E34F035910FB764.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99B35081E0645635AD4D8BE70E34F035910FB764.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:43:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:bb:e5:1d:e4:02:0f:17:2d:6e:ca:82:f3:4a:e6:c0:ea:af:e1:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99B35081E0645635AD4D8BE70E34F035910FB764
        Validity
            Not Before: Mar  7 05:15:25 2025 GMT
            Not After : Mar  6 05:20:25 2026 GMT
        Subject: CN=BF8FCE23F776A1057ACC780AD1AC72D2EE993890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:97:66:cd:3b:39:31:fc:21:a7:35:f5:f7:2a:
                    eb:80:dc:d1:9a:28:52:a7:34:60:50:32:60:f1:fb:
                    7b:d9:03:c1:84:f5:da:f2:8a:74:2a:af:18:36:42:
                    f7:ec:5b:83:13:f3:91:a1:17:d6:08:59:ef:32:8f:
                    03:ab:a7:ee:0e:9f:c6:60:af:7e:91:b0:b2:4b:5f:
                    51:79:e4:dd:0d:7c:c8:54:f4:f5:ce:f7:0d:4a:96:
                    84:12:4c:98:40:4a:ee:5d:29:0e:3e:96:0a:e4:b8:
                    e9:00:16:12:96:06:d7:79:c6:9b:ab:1e:2f:83:0e:
                    05:95:49:30:c3:8b:59:40:c4:ca:fa:0c:05:03:82:
                    94:c0:c4:fb:9f:5a:26:ec:54:bc:60:26:5d:6a:ea:
                    3d:dc:67:5b:9c:bb:2d:53:e1:f2:96:0b:0a:90:9a:
                    16:d1:22:76:81:71:02:57:19:5e:78:ca:3b:d8:c3:
                    20:69:4c:41:1f:1c:41:50:52:1c:c2:c4:2a:bd:dd:
                    f2:6c:99:7c:20:49:e6:ed:0a:22:8e:63:81:2c:04:
                    97:b8:f5:a7:eb:23:9c:21:bb:28:3b:7f:9d:ed:6c:
                    a5:a4:89:a0:3d:ed:00:36:90:eb:64:a8:bd:8e:3f:
                    f2:08:a7:ff:1a:d7:20:fc:c4:98:a2:08:1d:46:9a:
                    b4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:8F:CE:23:F7:76:A1:05:7A:CC:78:0A:D1:AC:72:D2:EE:99:38:90
            X509v3 Authority Key Identifier:
                keyid:99:B3:50:81:E0:64:56:35:AD:4D:8B:E7:0E:34:F0:35:91:0F:B7:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/99B35081E0645635AD4D8BE70E34F035910FB764.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99B35081E0645635AD4D8BE70E34F035910FB764.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/1/323830343a3663343a393030303a3a2f33362d313238203d3e20323632383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c4:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         c0:63:14:2a:75:24:f8:59:00:46:e3:38:63:97:ca:d5:ff:a8:
         0b:d4:de:63:72:de:83:ec:94:2b:05:15:9c:80:cc:bc:f3:8e:
         4b:cc:43:21:50:9a:10:f6:35:82:44:8f:35:9d:cd:56:09:f3:
         80:b2:db:8d:85:39:86:18:5b:80:26:99:d5:93:de:57:d5:62:
         34:17:05:a0:7e:70:13:39:fb:b1:ef:8c:93:7e:21:07:13:b5:
         1c:c9:28:b0:a8:a1:59:e7:72:39:64:7a:91:35:71:e4:c9:8f:
         04:99:2d:bf:98:dd:fa:6a:87:ce:f7:09:e8:a6:d2:42:3f:ae:
         9d:c4:32:28:ac:67:e0:e7:dd:a4:2b:ea:2f:c1:6b:92:68:4d:
         58:6b:95:b4:6d:68:29:51:79:2d:71:a5:c9:8a:3f:f1:00:aa:
         e7:c2:01:d6:19:7d:2f:81:50:95:ad:26:25:1b:ec:86:43:59:
         d5:c6:4e:4d:22:00:b7:af:43:4b:9f:63:e1:ae:3a:15:e3:9f:
         84:67:2c:c4:f7:03:f7:c9:c7:c6:9f:69:d3:86:26:60:00:f3:
         2f:6c:f1:97:e3:e8:ba:11:8b:de:7b:a5:db:a8:8c:eb:46:b5:
         7f:aa:61:70:14:e1:79:1b:45:c7:b4:07:c5:86:6c:74:5a:cb:
         72:7c:91:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:24 2025 by rpki-client on console.sobornost.net