Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/323830343a333366633a363030303a3a2f33352d3335203d3e20323635343239.roa
File:                     323830343a333366633a363030303a3a2f33352d3335203d3e20323635343239.roa (raw, json)
Hash identifier:          c2xgNil7XTyB8ahOi85xh1hb+u2EL1m2fc1X/XdREp8=
Subject key identifier:   EE:0B:03:73:09:C5:4C:A0:80:9A:AE:53:5D:A0:89:BD:6B:8F:1F:26
Certificate issuer:       /CN=0059BA88737DAD2C55270BBCF409B62E1276558F
Certificate serial:       296E2E2076E341F25C76A04BCEC7EF6337D5F966
Authority key identifier: 00:59:BA:88:73:7D:AD:2C:55:27:0B:BC:F4:09:B6:2E:12:76:55:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/323830343a333366633a363030303a3a2f33352d3335203d3e20323635343239.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     265429
IP address blocks:        2804:33fc:6000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.crl
                          rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 03:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:6e:2e:20:76:e3:41:f2:5c:76:a0:4b:ce:c7:ef:63:37:d5:f9:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0059BA88737DAD2C55270BBCF409B62E1276558F
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:49:9b:83:36:89:57:a2:b6:f1:c5:05:f5:dc:
                    d8:c7:dc:17:16:40:43:ca:55:5d:da:79:d4:5e:25:
                    39:53:60:02:dd:f9:f1:64:0a:8e:67:95:bd:3e:db:
                    27:7b:45:55:a2:80:5e:a9:e2:73:54:82:64:a7:94:
                    1a:64:91:59:4d:54:eb:20:89:cf:b6:6b:3f:df:7d:
                    e8:7c:4b:65:18:76:77:16:7a:97:58:a2:e9:ca:2c:
                    00:b2:a0:2b:99:3f:d6:4f:b3:ce:56:88:15:b7:07:
                    69:b9:51:9a:3d:ad:c7:6a:e6:00:6c:6a:bb:e1:ca:
                    37:33:5d:cf:0e:a7:27:9c:65:4c:3e:71:f6:40:b4:
                    f9:51:83:a1:2a:9d:4a:ac:cc:d3:15:0b:3e:7e:13:
                    b0:41:e6:8c:52:df:03:27:24:0f:c7:31:5e:e8:db:
                    7b:6d:46:4b:e2:a8:d4:4e:b1:57:e1:d6:c0:cb:db:
                    0b:ad:87:c0:95:96:82:bd:81:10:ac:fc:6d:1a:1c:
                    14:cd:91:61:97:0b:a4:58:73:5f:a2:15:da:81:56:
                    8c:2b:06:91:e6:80:c5:9c:5a:9e:b7:38:b3:db:2c:
                    56:71:c6:2a:4a:5a:a5:35:fe:16:c2:4d:57:e0:18:
                    a8:d2:63:56:e3:c3:d0:dc:c1:87:47:80:84:44:ba:
                    2a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:0B:03:73:09:C5:4C:A0:80:9A:AE:53:5D:A0:89:BD:6B:8F:1F:26
            X509v3 Authority Key Identifier:
                keyid:00:59:BA:88:73:7D:AD:2C:55:27:0B:BC:F4:09:B6:2E:12:76:55:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/323830343a333366633a363030303a3a2f33352d3335203d3e20323635343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33fc:6000::/35

    Signature Algorithm: sha256WithRSAEncryption
         b2:23:0a:b6:45:85:62:b0:3a:cf:5c:7e:44:ae:0d:01:d9:51:
         ef:c1:69:07:9a:06:ff:b0:82:5b:40:37:79:a4:c3:3c:01:39:
         dc:5f:95:9c:7b:3f:52:29:d3:9c:7c:2d:e8:4b:36:de:40:f3:
         eb:8c:57:55:3f:21:8f:fd:97:4c:53:24:9a:87:94:0f:46:f3:
         22:89:28:b5:f4:8d:6e:b1:86:89:b6:b6:34:95:d9:cc:67:38:
         ff:20:97:af:cd:cc:7c:d2:d4:f4:06:e2:6b:ae:56:0b:58:69:
         08:4c:ee:93:e6:40:29:88:a5:c5:43:40:cf:b4:5c:df:4f:4c:
         07:44:e0:df:34:60:94:46:a0:b4:41:9a:66:ca:6f:6b:13:f1:
         08:89:af:f8:a7:48:dc:90:eb:df:a0:06:72:fc:2c:d5:6a:15:
         0c:a8:7c:e0:4d:1f:ab:54:d9:f7:53:92:54:f0:49:ae:82:86:
         b8:53:cb:64:23:6d:11:c9:74:9d:b6:14:79:23:10:46:8e:62:
         d1:01:7e:8e:bb:59:e3:da:76:24:e4:c2:ec:0b:cb:d3:1f:7b:
         eb:56:cd:86:37:7e:83:3f:38:88:89:b3:3a:6f:60:0a:ce:a6:
         fe:88:2c:cf:34:b9:3a:9c:b9:61:9a:c0:58:bb:56:33:4a:2e:
         a2:01:63:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:47:41 2025 by rpki-client