Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/323830343a333366633a3a2f33352d3335203d3e20323635343239.roa
File:                     323830343a333366633a3a2f33352d3335203d3e20323635343239.roa (raw, json)
Hash identifier:          LlC4ABZ+yQR57uIxqmuN8Xpg8X3B91Fhz3cTLycypaY=
Subject key identifier:   61:EB:8E:FE:8F:6F:39:60:7D:68:D2:01:57:B2:2F:03:55:93:8A:B2
Certificate issuer:       /CN=0059BA88737DAD2C55270BBCF409B62E1276558F
Certificate serial:       02CB4C687C4FF74B5B536B6DBE371BFAAA3A6210
Authority key identifier: 00:59:BA:88:73:7D:AD:2C:55:27:0B:BC:F4:09:B6:2E:12:76:55:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/323830343a333366633a3a2f33352d3335203d3e20323635343239.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     265429
IP address blocks:        2804:33fc::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.crl
                          rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 03:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:cb:4c:68:7c:4f:f7:4b:5b:53:6b:6d:be:37:1b:fa:aa:3a:62:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0059BA88737DAD2C55270BBCF409B62E1276558F
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a6:66:8d:95:82:ea:0d:2b:2e:82:19:40:6c:
                    2e:b7:b7:c3:84:47:ca:16:25:e8:dc:42:2f:ac:bc:
                    44:a5:95:fd:47:60:0b:e4:34:59:a6:bc:d4:d3:8e:
                    72:e1:0c:01:2d:8d:8e:63:c6:33:c9:a7:1e:a0:4f:
                    e1:3a:df:c1:32:a5:8b:16:b4:23:61:3b:48:1a:66:
                    58:7d:b5:cb:97:09:12:6a:04:1f:8d:64:0f:b5:ff:
                    ee:40:83:b9:ca:24:cc:b6:c9:86:f0:fd:20:1c:ad:
                    1f:92:4f:11:49:5c:33:34:d3:71:c4:50:e8:30:53:
                    62:a9:47:de:6f:5d:6b:b6:c7:96:1a:3d:b5:55:ac:
                    4f:7d:43:99:60:b6:92:9e:aa:a2:65:e1:75:a9:5c:
                    8c:a9:62:52:6b:41:cb:84:44:e6:29:80:6e:e4:0c:
                    8f:17:40:5b:20:94:38:7f:48:9a:59:8a:09:b5:c2:
                    f3:d3:8a:c3:9f:be:da:67:2c:84:ba:ac:63:bd:18:
                    92:36:6e:48:0d:63:5c:fa:cc:9a:ba:3a:dd:d4:39:
                    fe:b0:ae:59:bb:c6:8b:1e:2a:f7:67:a0:0f:92:bb:
                    c4:f4:53:37:ca:c0:91:62:ee:8d:af:78:ef:fa:52:
                    4a:19:c8:be:74:2d:e9:02:f7:2c:31:f9:51:28:b7:
                    db:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:EB:8E:FE:8F:6F:39:60:7D:68:D2:01:57:B2:2F:03:55:93:8A:B2
            X509v3 Authority Key Identifier:
                keyid:00:59:BA:88:73:7D:AD:2C:55:27:0B:BC:F4:09:B6:2E:12:76:55:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/323830343a333366633a3a2f33352d3335203d3e20323635343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33fc::/35

    Signature Algorithm: sha256WithRSAEncryption
         a9:3e:11:b4:7f:0a:19:95:fe:5d:1f:29:12:4b:5a:d1:76:e1:
         74:08:ff:ee:b2:46:ed:3f:d6:95:de:ad:ec:93:8b:be:b3:31:
         24:44:3c:48:c9:6c:82:1f:fe:1f:f2:26:d2:fc:7a:f8:68:77:
         2f:f6:0e:dc:a4:35:ef:ab:5b:d2:7e:b7:15:bd:7b:8b:c5:c9:
         80:fb:a0:7b:11:91:53:09:6d:42:e9:e7:bf:7a:79:3f:35:c7:
         35:2c:f0:cd:33:11:bd:a8:71:23:56:2f:61:e6:b0:73:c3:18:
         9f:45:bd:70:4b:c8:60:fd:ef:27:d9:e0:0e:7b:b9:da:4b:8c:
         0a:5a:e9:9e:14:87:d6:b1:fa:6d:ae:ae:77:89:f8:2a:bf:c0:
         48:bf:a8:10:cd:77:df:81:31:f5:94:12:38:c0:15:25:d4:76:
         3e:c4:65:37:95:a3:c2:b4:a1:f7:83:f6:f4:9b:89:89:bd:45:
         3e:0c:d2:60:11:7f:c4:92:aa:8b:2f:8c:88:2c:7a:a5:4f:6c:
         a4:52:3d:c3:cf:7a:62:2d:5c:ed:2c:31:90:98:67:fc:ae:5d:
         ea:fb:87:97:1c:4b:33:3b:e2:2a:52:0d:71:6e:3f:5d:b0:d3:
         a5:9a:2d:00:14:08:c2:39:67:c5:5d:fb:61:cf:63:10:fb:b2:
         29:4d:21:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:45:25 2025 by rpki-client