Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/323830343a333366633a383030303a3a2f33352d3335203d3e20323635343239.roa
File:                     323830343a333366633a383030303a3a2f33352d3335203d3e20323635343239.roa (raw, json)
Hash identifier:          orN6n6CfMC+2u5pCZ+/OTZCIFcc17uXesRLXmPK1TwQ=
Subject key identifier:   9C:84:B1:1C:3B:34:71:D5:0A:F8:8A:B8:B0:76:1F:3F:5F:A6:90:F2
Certificate issuer:       /CN=0059BA88737DAD2C55270BBCF409B62E1276558F
Certificate serial:       2CB6F06C6F7406432C37FDD6FC7075EB30EA7ADB
Authority key identifier: 00:59:BA:88:73:7D:AD:2C:55:27:0B:BC:F4:09:B6:2E:12:76:55:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/323830343a333366633a383030303a3a2f33352d3335203d3e20323635343239.roa
Signing time:             Wed 03 Apr 2024 18:31:29 +0000
ROA not before:           Wed 03 Apr 2024 18:26:29 +0000
ROA not after:            Wed 02 Apr 2025 18:31:29 +0000
asID:                     265429
IP address blocks:        2804:33fc:8000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.crl
                          rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 18:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:b6:f0:6c:6f:74:06:43:2c:37:fd:d6:fc:70:75:eb:30:ea:7a:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0059BA88737DAD2C55270BBCF409B62E1276558F
        Validity
            Not Before: Apr  3 18:26:29 2024 GMT
            Not After : Apr  2 18:31:29 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cc:3f:a5:6c:0e:e3:08:0a:b2:8c:4b:fd:be:
                    9d:3d:08:da:db:62:79:12:af:81:a3:91:26:76:80:
                    99:68:01:4d:d3:5a:ad:d0:17:f3:74:74:7a:a1:73:
                    a5:9f:07:ee:80:25:c1:09:ce:af:fd:2c:d6:33:0c:
                    9c:d5:0e:71:70:40:c7:86:eb:60:4b:54:23:82:d9:
                    4c:85:c6:28:5a:f9:23:07:0e:1f:23:3d:29:ed:3f:
                    6d:fb:36:28:7d:fb:2f:40:0d:05:59:0f:80:f7:26:
                    31:f5:14:6a:4f:b1:68:2d:9c:38:99:4f:4f:61:f1:
                    cd:dc:0f:51:79:1d:53:d2:6c:c8:a5:15:6d:fd:4b:
                    82:c0:fb:79:34:04:ce:09:04:8f:10:43:06:f5:b1:
                    87:9c:c2:ac:39:e1:c7:0c:64:36:5b:04:aa:df:65:
                    be:9e:d0:b7:18:52:43:28:a0:47:f1:4e:e3:b6:51:
                    f3:72:0e:25:a8:c4:5b:fb:dc:2c:16:3b:91:15:1b:
                    ca:66:e8:fb:8d:4f:c2:d0:bb:b2:a9:c7:26:0d:d7:
                    ea:2f:cd:78:31:81:ea:c1:ba:0c:ca:db:b5:1d:0d:
                    d5:4b:90:a0:e0:89:41:10:31:ff:e7:94:7c:34:67:
                    ef:59:3c:40:18:7a:90:e8:aa:19:c3:b8:11:11:a3:
                    52:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:84:B1:1C:3B:34:71:D5:0A:F8:8A:B8:B0:76:1F:3F:5F:A6:90:F2
            X509v3 Authority Key Identifier:
                keyid:00:59:BA:88:73:7D:AD:2C:55:27:0B:BC:F4:09:B6:2E:12:76:55:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/323830343a333366633a383030303a3a2f33352d3335203d3e20323635343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33fc:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         33:8e:1a:fa:ca:80:1e:80:ed:0e:7c:66:1d:2e:94:28:66:7d:
         b0:d0:22:3c:39:1e:f5:c7:cb:b7:01:33:91:f5:a0:fd:bd:2f:
         bd:88:2b:2d:cd:30:73:11:9e:7d:86:81:6b:2d:42:7e:b4:59:
         9f:cb:ea:44:ae:f5:4e:55:af:53:0d:40:b4:a5:dd:c0:21:13:
         d3:54:94:a9:d6:58:35:8d:0e:cd:ff:b8:88:48:17:00:8b:92:
         2e:1a:14:85:c0:34:b6:41:22:35:8e:80:52:9c:35:9e:3c:73:
         13:91:49:55:c7:6d:1b:20:a0:02:1d:91:3d:05:be:b4:e2:c5:
         b1:84:96:d3:0f:8f:e8:84:a9:f1:a3:20:e4:ff:00:56:b5:44:
         b7:c0:b7:6b:8a:1d:db:75:fd:86:eb:f3:27:a8:65:0c:72:64:
         03:06:ed:f7:6d:8e:1d:fe:29:1c:ca:02:dc:c6:91:42:39:26:
         76:51:cb:4b:72:08:b1:7a:18:7f:d2:f2:d2:04:5e:b1:25:0b:
         fa:a8:72:05:a7:71:a7:5f:16:2d:22:cb:db:c6:bc:40:34:04:
         14:33:11:e5:81:31:1f:2d:11:5a:88:dc:c6:86:95:b7:86:6c:
         14:12:14:75:bf:6a:ab:0e:32:0c:26:1f:b5:79:1a:ca:ab:87:
         98:ae:a3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:46:31 2024 by rpki-client on console-fra.rpki-client.org