Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/323830343a333366633a323030303a3a2f33352d3335203d3e20323635343239.roa
File:                     323830343a333366633a323030303a3a2f33352d3335203d3e20323635343239.roa (raw, json)
Hash identifier:          LabNusa2PNPm02EuLc//d9dsT1cMwrEwnw78ewLJfv0=
Subject key identifier:   43:77:25:CA:13:B6:E4:25:77:8A:ED:E2:0D:EB:2A:19:DE:1F:6D:E3
Certificate issuer:       /CN=0059BA88737DAD2C55270BBCF409B62E1276558F
Certificate serial:       593E8147712F308DB7EE3D01CE5E0997FD53ABA2
Authority key identifier: 00:59:BA:88:73:7D:AD:2C:55:27:0B:BC:F4:09:B6:2E:12:76:55:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/323830343a333366633a323030303a3a2f33352d3335203d3e20323635343239.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     265429
IP address blocks:        2804:33fc:2000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.crl
                          rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 19:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:3e:81:47:71:2f:30:8d:b7:ee:3d:01:ce:5e:09:97:fd:53:ab:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0059BA88737DAD2C55270BBCF409B62E1276558F
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e2:1b:ab:91:23:f8:35:ea:a5:bf:a6:1e:bf:
                    8b:e4:41:2d:c2:05:f2:4c:36:e0:b8:e0:0f:a7:58:
                    04:8b:15:96:d6:3a:92:5b:46:5b:1b:ce:b9:43:b3:
                    17:6e:a4:59:ca:2a:3e:1b:0c:90:b2:3e:a1:56:d0:
                    0b:77:a6:1b:78:31:55:db:6f:01:4e:07:2c:f3:1f:
                    57:a2:47:14:13:d9:9d:62:bd:57:07:dd:aa:ba:e3:
                    b5:30:47:96:9c:d9:b3:24:6d:46:f7:e7:a8:11:5f:
                    f8:d6:aa:9a:91:51:b2:8d:3a:09:57:cd:54:e4:4f:
                    2c:10:b1:67:3b:3e:64:8b:d0:4f:5f:a0:79:75:e2:
                    26:e3:b5:15:a8:2a:a9:dc:5c:0b:fe:b8:c9:70:3c:
                    9f:ee:83:a7:14:8b:7f:09:a0:78:83:11:a6:84:99:
                    bd:ca:9d:a0:48:dc:6d:b2:e8:d5:97:b6:b5:fd:ef:
                    69:04:a3:5b:68:7f:2f:74:6b:e1:1a:e5:90:30:e7:
                    f4:b1:4c:bd:b1:20:b0:f0:43:68:24:3e:fb:a0:ce:
                    6c:6d:2f:7d:e6:17:46:bf:64:29:25:de:b3:fe:20:
                    d1:a8:8b:eb:4e:82:ff:9a:02:44:ed:c2:fb:a5:d9:
                    5a:c4:a7:45:e8:9b:aa:49:c6:f2:b1:61:1d:11:5e:
                    bc:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:77:25:CA:13:B6:E4:25:77:8A:ED:E2:0D:EB:2A:19:DE:1F:6D:E3
            X509v3 Authority Key Identifier:
                keyid:00:59:BA:88:73:7D:AD:2C:55:27:0B:BC:F4:09:B6:2E:12:76:55:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/323830343a333366633a323030303a3a2f33352d3335203d3e20323635343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33fc:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         9c:fb:21:2f:de:17:95:ab:c6:53:dc:4d:5a:31:ba:77:8e:91:
         5e:53:bb:74:47:8e:ec:20:84:87:82:56:ce:2e:37:83:43:5f:
         bb:a7:a8:3d:d1:fb:a6:98:fe:89:c5:90:8e:e3:85:28:9e:96:
         53:77:08:c4:dc:f3:00:e2:99:0b:45:da:ff:11:75:6e:78:31:
         4b:af:0b:dc:2d:43:e1:24:40:84:9d:9b:68:bc:f3:97:19:31:
         bb:5c:15:13:0f:fe:e6:66:f3:df:b4:68:91:8e:f1:4c:3a:00:
         64:ea:e3:f1:84:5f:a7:fb:5b:39:ec:02:ca:5d:91:92:16:b4:
         3d:41:31:b3:fe:e8:2b:ed:07:e9:ff:06:b3:24:75:19:9d:c4:
         7a:9f:11:5e:85:5b:47:91:62:9a:b0:f5:b6:0f:38:72:2d:ab:
         e5:68:62:98:37:98:05:07:bf:a9:ec:de:8e:61:67:1b:b2:d5:
         fc:98:3b:e5:56:84:18:8d:0d:a6:4a:98:34:cd:7c:c2:ff:9f:
         dd:84:6a:2b:32:e2:d8:d5:e4:89:33:22:6f:c6:f3:69:cb:cb:
         72:fb:90:d7:f8:d0:f3:22:c4:36:9e:f8:04:52:66:01:6f:ef:
         2a:6a:a6:3e:ca:13:f3:a2:fe:f9:11:5a:af:30:13:f4:ff:5e:
         c3:e7:54:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:17:55 2025 by rpki-client