Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/323830343a333366633a613030303a3a2f33352d3335203d3e20323635343239.roa
File:                     323830343a333366633a613030303a3a2f33352d3335203d3e20323635343239.roa (raw, json)
Hash identifier:          31ihwys79gaJ23b9nRWR6MaVEi1c8X4id/vrfN/V5gw=
Subject key identifier:   4E:0E:34:16:67:1F:D0:CD:97:B3:B6:1A:F2:B7:72:00:B5:A1:AB:52
Certificate issuer:       /CN=0059BA88737DAD2C55270BBCF409B62E1276558F
Certificate serial:       21781A67F5F12AEBADA4ABADC4F99084CBFF3D88
Authority key identifier: 00:59:BA:88:73:7D:AD:2C:55:27:0B:BC:F4:09:B6:2E:12:76:55:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/323830343a333366633a613030303a3a2f33352d3335203d3e20323635343239.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     265429
IP address blocks:        2804:33fc:a000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.crl
                          rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 19:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:78:1a:67:f5:f1:2a:eb:ad:a4:ab:ad:c4:f9:90:84:cb:ff:3d:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0059BA88737DAD2C55270BBCF409B62E1276558F
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8d:11:ec:d8:de:a7:5f:c3:f0:18:6a:44:88:
                    19:1f:04:a6:c7:93:13:92:9a:e2:8a:7a:cf:c4:c9:
                    10:7b:f6:ae:86:61:d0:d5:8d:1d:6f:c7:b1:50:ef:
                    c1:8f:48:b7:d7:01:57:79:c7:8a:16:79:7f:9c:22:
                    09:4b:02:f2:66:97:04:32:f4:eb:8d:d4:9a:29:de:
                    d8:fb:da:59:71:9b:78:f4:1f:87:37:c7:09:06:6c:
                    09:4c:29:9b:1f:ee:1b:e3:13:24:39:c2:0e:e0:cd:
                    90:1a:60:4f:b8:dd:fc:ac:0c:0e:59:85:47:8a:6d:
                    64:85:7a:67:ac:02:88:43:96:54:24:d1:79:58:fc:
                    41:e9:7d:23:5e:91:fb:0e:72:ec:d1:26:a0:d7:ed:
                    44:ad:62:ff:1b:9c:e4:2c:27:96:07:c9:71:9b:9c:
                    36:0e:44:e4:e8:84:ff:7d:60:f8:6e:fe:fb:5b:a7:
                    2c:f9:15:db:6b:7d:95:a8:8b:04:f0:ae:21:09:c4:
                    ae:64:ba:cf:b1:d2:2a:b9:3c:d6:c3:8e:4f:6a:c2:
                    b8:d3:57:09:70:3c:7b:f3:44:3d:dc:d2:f6:19:20:
                    b8:e8:5b:7f:1e:98:be:24:79:1d:a1:0b:ff:8a:fa:
                    4d:dc:61:8d:87:20:e4:df:50:a5:68:cf:2a:8a:f1:
                    43:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:0E:34:16:67:1F:D0:CD:97:B3:B6:1A:F2:B7:72:00:B5:A1:AB:52
            X509v3 Authority Key Identifier:
                keyid:00:59:BA:88:73:7D:AD:2C:55:27:0B:BC:F4:09:B6:2E:12:76:55:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/323830343a333366633a613030303a3a2f33352d3335203d3e20323635343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33fc:a000::/35

    Signature Algorithm: sha256WithRSAEncryption
         20:f9:f6:0a:37:0f:b0:3c:c8:6b:8e:c1:36:d7:99:ed:80:66:
         ce:d2:88:93:9d:f4:2e:2e:aa:2b:8c:66:c8:bc:22:d9:5c:ec:
         01:a3:31:e0:09:19:35:99:72:d8:0a:46:3c:9b:26:fb:12:bd:
         42:fe:f8:82:f4:46:fb:30:bf:08:f1:ae:c4:01:4d:b2:92:0e:
         89:04:f0:fd:8f:af:16:00:97:37:fa:22:f1:e1:b5:74:17:bc:
         1b:e2:42:f6:1d:7d:5c:b1:92:81:a7:f4:f6:58:8b:b8:48:9f:
         9d:bd:bb:57:54:79:13:2a:af:75:be:f6:2d:25:99:23:5b:7e:
         7d:28:18:b2:11:56:ab:4e:da:70:f2:b9:10:c9:f5:d8:5d:da:
         14:8d:40:d5:f7:79:b7:45:04:76:2f:92:4c:85:ac:1a:12:8b:
         ed:14:f7:8c:18:9b:68:1a:9e:19:d3:37:da:68:cb:ed:66:9b:
         38:26:cf:fa:fd:3a:23:3a:22:46:84:b4:ab:46:8b:0f:b5:c3:
         8b:8d:98:0d:0f:a4:2e:ce:93:b9:b6:7c:fe:14:56:ff:8a:c4:
         f8:9b:0e:64:bd:96:f9:4f:26:27:aa:05:e0:36:36:28:99:ee:
         6c:90:72:5d:31:5d:29:77:35:a7:65:d9:bd:ac:ba:4c:96:4c:
         60:51:19:02
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUIXgaZ/XxKuutpKutxPmQhMv/PYgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDA1OUJBODg3MzdEQUQyQzU1MjcwQkJDRjQwOUI2MkUx
Mjc2NTU4RjAeFw0yNTAzMDUxODU1MDFaFw0yNjAzMDQxOTAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOUU4RDExRUNEOERFQTc1RkMz
RjAxODZBNDQ4ODE5MUYwNEE2Qzc5MzEzOTI5QUUyOEE3QUNGQzRDOTEwN0JGNkFF
ODY2MUQwRDU4RDFENkZDN0IxNTBFRkMxOEY0OEI3RDcwMTU3NzlDNzhBMTY3OTdG
OUMyMjA5NEIwMkYyNjY5NzA0MzJGNEVCOERENDlBMjlERUQ4RkJEQTU5NzE5Qjc4
RjQxRjg3MzdDNzA5MDY2QzA5NEMyOTlCMUZFRTFCRTMxMzI0MzlDMjBFRTBDRDkw
MUE2MDRGQjhEREZDQUMwQzBFNTk4NTQ3OEE2RDY0ODU3QTY3QUMwMjg4NDM5NjU0
MjREMTc5NThGQzQxRTk3RDIzNUU5MUZCMEU3MkVDRDEyNkEwRDdFRDQ0QUQ2MkZG
MUI5Q0U0MkMyNzk2MDdDOTcxOUI5QzM2MEU0NEU0RTg4NEZGN0Q2MEY4NkVGRUZC
NUJBNzJDRjkxNURCNkI3RDk1QTg4QjA0RjBBRTIxMDlDNEFFNjRCQUNGQjFEMjJB
QjkzQ0Q2QzM4RTRGNkFDMkI4RDM1NzA5NzAzQzdCRjM0NDNERENEMkY2MTkyMEI4
RTg1QjdGMUU5OEJFMjQ3OTFEQTEwQkZGOEFGQTREREM2MThEODcyMEU0REY1MEE1
NjhDRjJBOEFGMTQzNzkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAno0R7Njep1/D8BhqRIgZHwSmx5MTkpriinrPxMkQe/auhmHQ1Y0d
b8exUO/Bj0i31wFXeceKFnl/nCIJSwLyZpcEMvTrjdSaKd7Y+9pZcZt49B+HN8cJ
BmwJTCmbH+4b4xMkOcIO4M2QGmBPuN38rAwOWYVHim1khXpnrAKIQ5ZUJNF5WPxB
6X0jXpH7DnLs0Sag1+1ErWL/G5zkLCeWB8lxm5w2DkTk6IT/fWD4bv77W6cs+RXb
a32VqIsE8K4hCcSuZLrPsdIquTzWw45PasK401cJcDx780Q93NL2GSC46Ft/Hpi+
JHkdoQv/ivpN3GGNhyDk31ClaM8qivFDeQIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FE4ONBZnH9DNl7O2GvK3cgC1oatSMB8GA1UdIwQYMBaAFABZuohzfa0sVScLvPQJ
ti4SdlWPMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNnWGU5b283VWhaakJw
MmNMRlF1Wk1zTm5CY1p0YWdaR1FUQ1drVUtxR05qLzEvMDA1OUJBODg3MzdEQUQy
QzU1MjcwQkJDRjQwOUI2MkUxMjc2NTU4Ri5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8wMDU5QkE4ODczN0RBRDJDNTUyNzBCQkNGNDA5QjYyRTEyNzY1
NThGLmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zZ1hlOW9vN1VoWmpCcDJjTEZR
dVpNc05uQmNadGFnWkdRVENXa1VLcUdOai8xLzMyMzgzMDM0M2EzMzMzNjY2MzNh
NjEzMDMwMzAzYTNhMmYzMzM1MmQzMzM1MjAzZDNlMjAzMjM2MzUzNDMyMzkucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgUoBDP8oDANBgkqhkiG9w0BAQsFAAOCAQEAIPn2CjcPsDzIa47BNteZ
7YBmztKIk530Li6qK4xmyLwi2VzsAaMx4AkZNZly2ApGPJsm+xK9Qv74gvRG+zC/
CPGuxAFNspIOiQTw/Y+vFgCXN/oi8eG1dBe8G+JC9h19XLGSgaf09liLuEifnb27
V1R5Eyqvdb72LSWZI1t+fSgYshFWq07acPK5EMn12F3aFI1A1fd5t0UEdi+STIWs
GhKL7RT3jBibaBqeGdM32mjL7WabOCbP+v06IzoiRoS0q0aLD7XDi42YDQ+kLs6T
ubZ8/hRW/4rE+JsOZL2W+U8mJ6oF4DY2KJnubJByXTFdKXc1p2XZvay6TJZMYFEZ
Ag==
-----END CERTIFICATE-----
Generated at Sat Apr 19 06:32:01 2025 by rpki-client