Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/323830343a333366633a323030303a3a2f33352d3335203d3e20323635343239.roa
File:                     323830343a333366633a323030303a3a2f33352d3335203d3e20323635343239.roa (raw, json)
Hash identifier:          9r1gQTuJDNbDFHi1wT4yxoQxLbcpK+x/1hdoHHI2jSc=
Subject key identifier:   ED:75:73:F2:32:66:EB:5E:D4:8C:42:BD:3E:13:70:46:9C:60:36:D5
Certificate issuer:       /CN=0059BA88737DAD2C55270BBCF409B62E1276558F
Certificate serial:       47D2DE3BD0F268710F9DA09AD13D92A82DE6DCF4
Authority key identifier: 00:59:BA:88:73:7D:AD:2C:55:27:0B:BC:F4:09:B6:2E:12:76:55:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/323830343a333366633a323030303a3a2f33352d3335203d3e20323635343239.roa
Signing time:             Wed 03 Apr 2024 18:31:28 +0000
ROA not before:           Wed 03 Apr 2024 18:26:28 +0000
ROA not after:            Wed 02 Apr 2025 18:31:28 +0000
asID:                     265429
IP address blocks:        2804:33fc:2000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.crl
                          rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 18:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:d2:de:3b:d0:f2:68:71:0f:9d:a0:9a:d1:3d:92:a8:2d:e6:dc:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0059BA88737DAD2C55270BBCF409B62E1276558F
        Validity
            Not Before: Apr  3 18:26:28 2024 GMT
            Not After : Apr  2 18:31:28 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d1:d1:3d:e9:f2:fc:4b:d7:5f:e0:07:49:8e:
                    00:8b:5e:62:f4:42:a3:4e:02:da:13:e6:53:67:71:
                    35:5b:b4:a6:ee:88:f1:d6:03:a3:fa:ed:42:45:cb:
                    90:b0:1b:4d:63:76:0f:6f:93:8c:65:fd:cd:11:79:
                    17:33:6a:1a:c4:2b:50:ea:2d:66:f6:32:40:d5:3b:
                    be:80:4d:e6:7e:a8:95:b3:4a:82:de:52:b6:ac:fe:
                    da:b9:66:39:f6:a2:09:52:15:30:d7:9c:5b:06:11:
                    2b:a6:bf:78:14:03:66:a4:dd:42:bd:de:a4:c6:88:
                    10:c0:ee:85:20:19:a5:99:22:cf:0c:6e:53:a6:c3:
                    6e:b0:a2:cd:42:cc:f3:ca:24:2d:98:96:42:32:8f:
                    cf:24:5b:7d:d3:8e:a6:0d:0c:03:bc:ed:29:96:40:
                    4f:04:11:4e:d0:fa:63:8b:13:95:7b:dd:6c:d1:e9:
                    77:82:eb:f1:f7:82:b7:d2:43:2e:9a:49:f8:b9:c2:
                    f6:f1:e0:5c:71:2c:43:bd:55:eb:90:bd:5c:46:d5:
                    b7:42:d1:d4:f2:5c:b2:c1:24:16:a7:4d:09:6d:0d:
                    20:45:43:78:98:d2:59:68:c8:bc:cc:3d:50:61:bf:
                    ae:e2:f0:a6:14:db:51:a1:0f:46:8f:80:38:e7:8d:
                    29:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:75:73:F2:32:66:EB:5E:D4:8C:42:BD:3E:13:70:46:9C:60:36:D5
            X509v3 Authority Key Identifier:
                keyid:00:59:BA:88:73:7D:AD:2C:55:27:0B:BC:F4:09:B6:2E:12:76:55:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/323830343a333366633a323030303a3a2f33352d3335203d3e20323635343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33fc:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         a6:e5:57:48:ed:51:a4:65:22:81:fb:de:2f:d1:90:80:f1:7d:
         21:93:9e:20:69:97:1f:df:76:e3:98:a6:21:fa:8c:75:2d:b6:
         9e:7d:9d:8f:fa:0e:7a:3e:ee:19:61:42:66:e9:dd:f7:64:70:
         43:84:c6:1d:24:9b:1f:33:77:85:26:58:0c:40:cf:f5:10:10:
         4b:09:9b:48:90:ab:14:b9:66:4f:e5:83:ec:b0:e0:2b:80:5d:
         60:d0:08:34:c6:de:30:38:af:ae:af:a9:01:5e:38:9c:46:68:
         b1:78:88:63:8a:77:87:87:dd:05:c9:46:59:7c:8d:9a:c9:ed:
         8c:53:3d:d8:27:d2:53:46:81:29:0f:85:49:7d:2b:47:4c:58:
         09:c1:fa:1e:7b:c2:bf:b5:1c:5f:0d:bf:01:69:d4:4d:e0:2f:
         c2:bd:f2:2b:98:f4:61:fa:70:12:05:6d:a4:8b:e1:32:5b:5e:
         95:5e:bf:6d:c3:0a:4b:0a:b2:e9:fe:87:9b:59:46:fe:f1:9b:
         81:de:0a:71:a4:f1:2e:f6:5e:80:c3:a8:49:ac:fc:12:91:1d:
         4a:5a:44:3d:18:51:3e:14:43:6f:dd:10:bd:c9:06:ed:90:9f:
         09:42:24:f1:cd:64:7c:40:ad:8f:88:6b:b3:27:95:ee:4b:46:
         1e:38:d3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:46:31 2024 by rpki-client on console-fra.rpki-client.org