Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/323830343a333366633a3a2f33322d3334203d3e20323635343239.roa
File:                     323830343a333366633a3a2f33322d3334203d3e20323635343239.roa (raw, json)
Hash identifier:          dkaWKS424Vq8WZbOHAzi9smVg+zMM4MleQSSm4DSyL8=
Subject key identifier:   E0:CE:41:FF:09:57:50:55:9C:AA:E3:8E:53:D9:02:25:15:DF:EE:81
Certificate issuer:       /CN=0059BA88737DAD2C55270BBCF409B62E1276558F
Certificate serial:       2915AFD092825A436CE49B056DA3B88B3CF7D48D
Authority key identifier: 00:59:BA:88:73:7D:AD:2C:55:27:0B:BC:F4:09:B6:2E:12:76:55:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/323830343a333366633a3a2f33322d3334203d3e20323635343239.roa
Signing time:             Wed 03 Apr 2024 18:31:28 +0000
ROA not before:           Wed 03 Apr 2024 18:26:28 +0000
ROA not after:            Wed 02 Apr 2025 18:31:28 +0000
asID:                     265429
IP address blocks:        2804:33fc::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.crl
                          rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 18:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:15:af:d0:92:82:5a:43:6c:e4:9b:05:6d:a3:b8:8b:3c:f7:d4:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0059BA88737DAD2C55270BBCF409B62E1276558F
        Validity
            Not Before: Apr  3 18:26:28 2024 GMT
            Not After : Apr  2 18:31:28 2025 GMT
        Subject: CN=3082010A0282010100A3E2B064F3F08BEA8AD67E44C8007D25C546D3319DB749E8FC70B72722D35C7A44121B92078AC5C6D1749E96B8198739156FCFEF60F9EEBF57B315BB642A33959FACF36DC732035EA76F5E35FD392AD0982074AF94A04FFA512C89D9CF6CADB574855ABF1EB93343299B8C4A5676607C58663B40293BE58F2D212A0BDA76429268511F9E4183196B8ACCB8B20E256107C4D6CB052FD27416A8C9F97A2051748C63025E478074D52E05D06E3AA1B31B3DDFB56D9DD3F74609AD5237354E33D87FEFE3AB481B1AE9E2778B57238E4854EF1887E916538F7A185DA33B2355B6C8051636645884932A2F135A3F361EE621262F30A9E13B697BB51CBC415EC644F9F50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e2:b0:64:f3:f0:8b:ea:8a:d6:7e:44:c8:00:
                    7d:25:c5:46:d3:31:9d:b7:49:e8:fc:70:b7:27:22:
                    d3:5c:7a:44:12:1b:92:07:8a:c5:c6:d1:74:9e:96:
                    b8:19:87:39:15:6f:cf:ef:60:f9:ee:bf:57:b3:15:
                    bb:64:2a:33:95:9f:ac:f3:6d:c7:32:03:5e:a7:6f:
                    5e:35:fd:39:2a:d0:98:20:74:af:94:a0:4f:fa:51:
                    2c:89:d9:cf:6c:ad:b5:74:85:5a:bf:1e:b9:33:43:
                    29:9b:8c:4a:56:76:60:7c:58:66:3b:40:29:3b:e5:
                    8f:2d:21:2a:0b:da:76:42:92:68:51:1f:9e:41:83:
                    19:6b:8a:cc:b8:b2:0e:25:61:07:c4:d6:cb:05:2f:
                    d2:74:16:a8:c9:f9:7a:20:51:74:8c:63:02:5e:47:
                    80:74:d5:2e:05:d0:6e:3a:a1:b3:1b:3d:df:b5:6d:
                    9d:d3:f7:46:09:ad:52:37:35:4e:33:d8:7f:ef:e3:
                    ab:48:1b:1a:e9:e2:77:8b:57:23:8e:48:54:ef:18:
                    87:e9:16:53:8f:7a:18:5d:a3:3b:23:55:b6:c8:05:
                    16:36:64:58:84:93:2a:2f:13:5a:3f:36:1e:e6:21:
                    26:2f:30:a9:e1:3b:69:7b:b5:1c:bc:41:5e:c6:44:
                    f9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:CE:41:FF:09:57:50:55:9C:AA:E3:8E:53:D9:02:25:15:DF:EE:81
            X509v3 Authority Key Identifier:
                keyid:00:59:BA:88:73:7D:AD:2C:55:27:0B:BC:F4:09:B6:2E:12:76:55:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/323830343a333366633a3a2f33322d3334203d3e20323635343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:67:fe:fd:9a:d6:cc:08:5a:d7:4f:90:d3:1a:9f:6a:84:be:
         93:51:5e:64:bf:9d:bc:da:8b:b7:c5:63:89:f4:96:e4:4d:7a:
         4e:67:15:64:f6:ec:b0:dc:9e:9d:ab:ad:0e:3e:3e:c9:9e:cf:
         b8:27:89:d1:5c:b4:19:b4:8f:50:51:ae:b7:a8:5b:a1:94:ca:
         69:7e:9d:9b:da:3e:9d:7e:6e:7a:16:f9:d8:c9:cb:94:d2:67:
         a8:c4:d0:4c:1e:3d:4f:e8:26:dc:a8:73:72:fb:0b:a6:38:6c:
         71:74:4c:56:38:d8:ec:10:3a:51:80:59:cc:59:87:cd:05:1d:
         8a:53:51:df:e6:b0:b9:e8:2d:5a:51:27:68:da:20:58:55:a4:
         27:1d:8c:1c:e0:13:7f:d7:fc:b1:9f:47:73:11:37:c6:8e:58:
         d5:d1:83:bc:cb:4f:47:d9:fe:bd:4b:b8:a2:56:a1:8a:e1:e3:
         57:83:80:41:2b:4d:db:4a:99:60:6a:b4:da:c0:ba:fa:c6:9b:
         66:e2:2f:9d:ff:e2:2d:c0:0b:d2:2e:03:00:cd:c3:8d:ef:75:
         e3:36:fe:01:b0:ef:cd:af:c4:ac:1a:1f:a8:b9:03:c2:67:6a:
         20:f5:ba:d9:59:c0:92:85:62:98:0c:87:28:a2:a4:1e:5c:fc:
         e1:4a:9b:5c
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUKRWv0JKCWkNs5JsFbaO4izz31I0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDA1OUJBODg3MzdEQUQyQzU1MjcwQkJDRjQwOUI2MkUx
Mjc2NTU4RjAeFw0yNDA0MDMxODI2MjhaFw0yNTA0MDIxODMxMjhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTNFMkIwNjRGM0YwOEJFQThB
RDY3RTQ0QzgwMDdEMjVDNTQ2RDMzMTlEQjc0OUU4RkM3MEI3MjcyMkQzNUM3QTQ0
MTIxQjkyMDc4QUM1QzZEMTc0OUU5NkI4MTk4NzM5MTU2RkNGRUY2MEY5RUVCRjU3
QjMxNUJCNjQyQTMzOTU5RkFDRjM2REM3MzIwMzVFQTc2RjVFMzVGRDM5MkFEMDk4
MjA3NEFGOTRBMDRGRkE1MTJDODlEOUNGNkNBREI1NzQ4NTVBQkYxRUI5MzM0MzI5
OUI4QzRBNTY3NjYwN0M1ODY2M0I0MDI5M0JFNThGMkQyMTJBMEJEQTc2NDI5MjY4
NTExRjlFNDE4MzE5NkI4QUNDQjhCMjBFMjU2MTA3QzRENkNCMDUyRkQyNzQxNkE4
QzlGOTdBMjA1MTc0OEM2MzAyNUU0NzgwNzRENTJFMDVEMDZFM0FBMUIzMUIzRERG
QjU2RDlERDNGNzQ2MDlBRDUyMzczNTRFMzNEODdGRUZFM0FCNDgxQjFBRTlFMjc3
OEI1NzIzOEU0ODU0RUYxODg3RTkxNjUzOEY3QTE4NURBMzNCMjM1NUI2QzgwNTE2
MzY2NDU4ODQ5MzJBMkYxMzVBM0YzNjFFRTYyMTI2MkYzMEE5RTEzQjY5N0JCNTFD
QkM0MTVFQzY0NEY5RjUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAo+KwZPPwi+qK1n5EyAB9JcVG0zGdt0no/HC3JyLTXHpEEhuSB4rF
xtF0npa4GYc5FW/P72D57r9XsxW7ZCozlZ+s823HMgNep29eNf05KtCYIHSvlKBP
+lEsidnPbK21dIVavx65M0Mpm4xKVnZgfFhmO0ApO+WPLSEqC9p2QpJoUR+eQYMZ
a4rMuLIOJWEHxNbLBS/SdBaoyfl6IFF0jGMCXkeAdNUuBdBuOqGzGz3ftW2d0/dG
Ca1SNzVOM9h/7+OrSBsa6eJ3i1cjjkhU7xiH6RZTj3oYXaM7I1W2yAUWNmRYhJMq
LxNaPzYe5iEmLzCp4Ttpe7UcvEFexkT59QIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FODOQf8JV1BVnKrjjlPZAiUV3+6BMB8GA1UdIwQYMBaAFABZuohzfa0sVScLvPQJ
ti4SdlWPMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNnWGU5b283VWhaakJw
MmNMRlF1Wk1zTm5CY1p0YWdaR1FUQ1drVUtxR05qLzEvMDA1OUJBODg3MzdEQUQy
QzU1MjcwQkJDRjQwOUI2MkUxMjc2NTU4Ri5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8wMDU5QkE4ODczN0RBRDJDNTUyNzBCQkNGNDA5QjYyRTEyNzY1
NThGLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zZ1hlOW9vN1VoWmpCcDJjTEZR
dVpNc05uQmNadGFnWkdRVENXa1VLcUdOai8xLzMyMzgzMDM0M2EzMzMzNjY2MzNh
M2EyZjMzMzIyZDMzMzQyMDNkM2UyMDMyMzYzNTM0MzIzOS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
M/wwDQYJKoZIhvcNAQELBQADggEBAIpn/v2a1swIWtdPkNMan2qEvpNRXmS/nbza
i7fFY4n0luRNek5nFWT27LDcnp2rrQ4+Psmez7gnidFctBm0j1BRrreoW6GUyml+
nZvaPp1+bnoW+djJy5TSZ6jE0EwePU/oJtyoc3L7C6Y4bHF0TFY42OwQOlGAWcxZ
h80FHYpTUd/msLnoLVpRJ2jaIFhVpCcdjBzgE3/X/LGfR3MRN8aOWNXRg7zLT0fZ
/r1LuKJWoYrh41eDgEErTdtKmWBqtNrAuvrGm2biL53/4i3AC9IuAwDNw43vdeM2
/gGw782vxKwaH6i5A8JnaiD1utlZwJKFYpgMhyiipB5c/OFKm1w=
-----END CERTIFICATE-----
Generated at Mon Nov 25 19:46:31 2024 by rpki-client on console-fra.rpki-client.org