Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/323830343a333366633a3a2f33322d3334203d3e20323635343239.roa
File:                     323830343a333366633a3a2f33322d3334203d3e20323635343239.roa (raw, json)
Hash identifier:          H4EsWw33QZdoKzWqL91LKEHDh7rcqmNB0b+x4jE2lbA=
Subject key identifier:   9B:44:42:78:69:55:B0:59:48:19:5C:E4:C2:D0:78:EB:A0:D2:EB:27
Certificate issuer:       /CN=0059BA88737DAD2C55270BBCF409B62E1276558F
Certificate serial:       4D4FA6C4A38BE5E0066B640F11B94A981AC69BED
Authority key identifier: 00:59:BA:88:73:7D:AD:2C:55:27:0B:BC:F4:09:B6:2E:12:76:55:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/323830343a333366633a3a2f33322d3334203d3e20323635343239.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     265429
IP address blocks:        2804:33fc::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.crl
                          rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 03:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:4f:a6:c4:a3:8b:e5:e0:06:6b:64:0f:11:b9:4a:98:1a:c6:9b:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0059BA88737DAD2C55270BBCF409B62E1276558F
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject: CN=3082010A0282010100B00F7A0F4D6717B29102C08E6B632D96E8567B3201931380B91A7CE384990CCF41299800EADE733D9C37F5C105EC455B59472100121FB15742C5AF5467980807AFD1DD29D6E604A02A7CC759221573036E0BE55DDF235CADABA11712721BBB180F2BFBE6A9C8025F6EF4BA5F7B2E8530959C178EC2F9F879CE0CEB84079A454209C8BF186D1C73FA9FAD956B2A5292A11D08F92504D1E76D02970BB254D33EFBD7CD841CFF959E997C1F078FD4307E043872D669F6F8BFAFFAAC25E20021C6BCD0C94BEC58C32B7C4698CAA6439885CA231B16CA9E15C30C8C0A897C302EBBD09295DF9A855040034EE869CD2710A6591BC12DF2E4755A76894C7589A53E39630203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0f:7a:0f:4d:67:17:b2:91:02:c0:8e:6b:63:
                    2d:96:e8:56:7b:32:01:93:13:80:b9:1a:7c:e3:84:
                    99:0c:cf:41:29:98:00:ea:de:73:3d:9c:37:f5:c1:
                    05:ec:45:5b:59:47:21:00:12:1f:b1:57:42:c5:af:
                    54:67:98:08:07:af:d1:dd:29:d6:e6:04:a0:2a:7c:
                    c7:59:22:15:73:03:6e:0b:e5:5d:df:23:5c:ad:ab:
                    a1:17:12:72:1b:bb:18:0f:2b:fb:e6:a9:c8:02:5f:
                    6e:f4:ba:5f:7b:2e:85:30:95:9c:17:8e:c2:f9:f8:
                    79:ce:0c:eb:84:07:9a:45:42:09:c8:bf:18:6d:1c:
                    73:fa:9f:ad:95:6b:2a:52:92:a1:1d:08:f9:25:04:
                    d1:e7:6d:02:97:0b:b2:54:d3:3e:fb:d7:cd:84:1c:
                    ff:95:9e:99:7c:1f:07:8f:d4:30:7e:04:38:72:d6:
                    69:f6:f8:bf:af:fa:ac:25:e2:00:21:c6:bc:d0:c9:
                    4b:ec:58:c3:2b:7c:46:98:ca:a6:43:98:85:ca:23:
                    1b:16:ca:9e:15:c3:0c:8c:0a:89:7c:30:2e:bb:d0:
                    92:95:df:9a:85:50:40:03:4e:e8:69:cd:27:10:a6:
                    59:1b:c1:2d:f2:e4:75:5a:76:89:4c:75:89:a5:3e:
                    39:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:44:42:78:69:55:B0:59:48:19:5C:E4:C2:D0:78:EB:A0:D2:EB:27
            X509v3 Authority Key Identifier:
                keyid:00:59:BA:88:73:7D:AD:2C:55:27:0B:BC:F4:09:B6:2E:12:76:55:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/323830343a333366633a3a2f33322d3334203d3e20323635343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:e6:ae:e9:53:71:fb:4e:42:5b:7c:1b:3f:f6:30:c6:fe:60:
         3c:fe:28:33:b4:35:d0:e8:85:f2:71:64:35:92:67:bf:5a:16:
         66:df:64:af:37:91:45:da:9c:99:66:29:ed:a4:f5:41:7a:be:
         c2:9c:4f:82:10:c9:5d:c6:b6:2f:b4:31:e2:5e:5a:0f:d2:b9:
         74:3d:3c:a8:35:e5:f1:e4:fa:1f:08:34:af:ff:65:52:5b:30:
         67:95:c0:ac:a2:02:e7:62:25:59:69:9d:a4:14:3f:20:b6:69:
         a2:e8:7b:fa:ce:11:05:a9:6d:6d:0a:f4:1a:71:ce:33:7a:b2:
         a3:bd:5a:51:88:1e:5b:f1:29:4a:5d:6c:6e:23:9d:a0:13:da:
         00:82:a5:0f:92:2f:7c:2a:ac:17:55:92:08:32:3e:4a:ff:37:
         97:9d:7c:28:cb:bb:8c:fd:4e:85:c6:dc:0d:41:cf:d3:a3:44:
         2c:9e:f4:dd:e0:df:91:f6:cc:44:f2:48:99:b4:4c:07:be:98:
         a5:6e:3f:24:b3:3a:65:a3:8f:03:60:b7:f4:c7:77:fc:3d:70:
         c4:04:db:aa:c0:91:0f:2f:a9:da:5e:f9:10:74:c7:55:03:24:
         15:3c:50:fc:7c:67:72:e5:e3:ef:4e:6c:fd:5b:74:e8:14:df:
         1d:f1:a3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:47:46 2025 by rpki-client