Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/323830343a333366633a343030303a3a2f33352d3335203d3e20323635343239.roa
File:                     323830343a333366633a343030303a3a2f33352d3335203d3e20323635343239.roa (raw, json)
Hash identifier:          jGH9jxGWd2ryWJrznuolh3fcOFWy5xKMWZXQyFKPwHg=
Subject key identifier:   EF:59:6F:3E:6B:D9:1F:CD:42:AD:16:6E:54:E6:6F:83:81:1C:AD:37
Certificate issuer:       /CN=0059BA88737DAD2C55270BBCF409B62E1276558F
Certificate serial:       2E19CD039B97255F1F5083C41DEB065DDFECB5A3
Authority key identifier: 00:59:BA:88:73:7D:AD:2C:55:27:0B:BC:F4:09:B6:2E:12:76:55:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/323830343a333366633a343030303a3a2f33352d3335203d3e20323635343239.roa
Signing time:             Wed 03 Apr 2024 18:31:28 +0000
ROA not before:           Wed 03 Apr 2024 18:26:28 +0000
ROA not after:            Wed 02 Apr 2025 18:31:28 +0000
asID:                     265429
IP address blocks:        2804:33fc:4000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.crl
                          rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 18:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:19:cd:03:9b:97:25:5f:1f:50:83:c4:1d:eb:06:5d:df:ec:b5:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0059BA88737DAD2C55270BBCF409B62E1276558F
        Validity
            Not Before: Apr  3 18:26:28 2024 GMT
            Not After : Apr  2 18:31:28 2025 GMT
        Subject: CN=3082010A0282010100CA4245BB8AD892FD67B3C505A51639BA3D639A48CBB22EB53665A226BC1BA93011DD28FD7D18134C1C2502DE468820A21C925BC9D9735B0EB0CD41D39E8D391B2FAC0F94E16A30348475D05FED7CD36C5C0963D14005FE47E2A772BDE0ACCB317EDA43AB83872511DEDBA9CDCD4AD58CB85B5817506D8A2BE5D89153E4541C96025638E9855D71B3340574F25C8C4FE5D2FEE9052EBCD7815DA4FE73A2B5C508E00479EF0061907359A7313D70995076FDD485EED7B8FB2E06A42C73F285B10D13E2492AEB57C82042ACF28026AFF248F1CC83BBAD2493C4998C7FD451958C774B2C6715D602B88F0343E611D5E38EAB2C3257B0C39F15CFC43BA3850B4BCFD90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:42:45:bb:8a:d8:92:fd:67:b3:c5:05:a5:16:
                    39:ba:3d:63:9a:48:cb:b2:2e:b5:36:65:a2:26:bc:
                    1b:a9:30:11:dd:28:fd:7d:18:13:4c:1c:25:02:de:
                    46:88:20:a2:1c:92:5b:c9:d9:73:5b:0e:b0:cd:41:
                    d3:9e:8d:39:1b:2f:ac:0f:94:e1:6a:30:34:84:75:
                    d0:5f:ed:7c:d3:6c:5c:09:63:d1:40:05:fe:47:e2:
                    a7:72:bd:e0:ac:cb:31:7e:da:43:ab:83:87:25:11:
                    de:db:a9:cd:cd:4a:d5:8c:b8:5b:58:17:50:6d:8a:
                    2b:e5:d8:91:53:e4:54:1c:96:02:56:38:e9:85:5d:
                    71:b3:34:05:74:f2:5c:8c:4f:e5:d2:fe:e9:05:2e:
                    bc:d7:81:5d:a4:fe:73:a2:b5:c5:08:e0:04:79:ef:
                    00:61:90:73:59:a7:31:3d:70:99:50:76:fd:d4:85:
                    ee:d7:b8:fb:2e:06:a4:2c:73:f2:85:b1:0d:13:e2:
                    49:2a:eb:57:c8:20:42:ac:f2:80:26:af:f2:48:f1:
                    cc:83:bb:ad:24:93:c4:99:8c:7f:d4:51:95:8c:77:
                    4b:2c:67:15:d6:02:b8:8f:03:43:e6:11:d5:e3:8e:
                    ab:2c:32:57:b0:c3:9f:15:cf:c4:3b:a3:85:0b:4b:
                    cf:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:59:6F:3E:6B:D9:1F:CD:42:AD:16:6E:54:E6:6F:83:81:1C:AD:37
            X509v3 Authority Key Identifier:
                keyid:00:59:BA:88:73:7D:AD:2C:55:27:0B:BC:F4:09:B6:2E:12:76:55:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/323830343a333366633a343030303a3a2f33352d3335203d3e20323635343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33fc:4000::/35

    Signature Algorithm: sha256WithRSAEncryption
         29:01:76:8f:35:18:e2:06:5c:4f:08:93:ff:74:26:7d:8f:dc:
         48:3c:2f:7b:c2:84:54:57:31:6b:2a:a7:8d:c7:68:01:96:0b:
         16:83:23:c8:af:10:67:58:6a:1b:9c:db:f2:f4:37:ce:64:a6:
         71:29:d0:91:27:46:19:62:af:5c:fe:4d:42:59:0c:29:12:bf:
         aa:24:82:42:ae:64:fd:b6:7e:60:16:6e:c1:1b:d4:00:3f:14:
         66:51:8c:aa:9f:3c:50:ad:d1:37:ea:b6:45:ac:ec:34:61:0f:
         a4:55:ae:2c:05:ac:ba:00:08:b8:15:14:b9:06:e2:1d:67:a9:
         67:b4:c3:fd:b6:38:f9:7c:4a:66:a8:df:27:09:89:d3:2b:1b:
         1f:e6:60:bc:4a:61:fb:ab:d2:ed:a3:ac:93:41:0e:c5:82:bb:
         34:ba:ab:a7:dc:74:44:e9:51:54:08:f1:ef:c5:a8:07:a6:9c:
         05:e8:7e:7f:a9:19:6f:4e:17:24:d8:18:64:05:ed:14:e9:2e:
         bf:d8:d2:2b:3b:a8:36:ee:85:1a:38:30:c8:e6:b3:4b:7b:a4:
         52:cd:b2:7e:f1:29:15:80:03:4e:9a:d7:e0:a9:4c:58:43:33:
         35:11:b0:11:7a:02:c9:cc:c7:3c:2d:12:be:1b:b2:4c:ae:cc:
         31:82:15:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:46:31 2024 by rpki-client on console-fra.rpki-client.org