Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/323830343a333366633a633030303a3a2f33352d3335203d3e20323635343239.roa
File:                     323830343a333366633a633030303a3a2f33352d3335203d3e20323635343239.roa (raw, json)
Hash identifier:          E1O6h68uaDRjzZuTOPL1YcRSSFOAC5UErNtVydPRjgs=
Subject key identifier:   2A:05:99:96:7B:26:E5:56:B6:33:FC:17:3B:20:29:76:9D:CD:6C:A6
Certificate issuer:       /CN=0059BA88737DAD2C55270BBCF409B62E1276558F
Certificate serial:       03F4BD29E89E9EABEC380450A4A1E2B3EC557AA9
Authority key identifier: 00:59:BA:88:73:7D:AD:2C:55:27:0B:BC:F4:09:B6:2E:12:76:55:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/323830343a333366633a633030303a3a2f33352d3335203d3e20323635343239.roa
Signing time:             Wed 03 Apr 2024 18:31:29 +0000
ROA not before:           Wed 03 Apr 2024 18:26:29 +0000
ROA not after:            Wed 02 Apr 2025 18:31:29 +0000
asID:                     265429
IP address blocks:        2804:33fc:c000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.crl
                          rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 18:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:f4:bd:29:e8:9e:9e:ab:ec:38:04:50:a4:a1:e2:b3:ec:55:7a:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0059BA88737DAD2C55270BBCF409B62E1276558F
        Validity
            Not Before: Apr  3 18:26:29 2024 GMT
            Not After : Apr  2 18:31:29 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:11:61:37:29:7f:f9:15:be:ee:4b:b5:4b:d8:
                    ee:2e:cc:cd:b2:27:6c:e9:e5:3d:84:3b:2e:55:b8:
                    6d:06:c7:ed:1c:76:08:ec:16:6b:92:da:e0:6f:0d:
                    a4:d3:e9:53:cc:ee:9f:2e:a2:0e:68:59:05:c7:02:
                    ee:3c:02:ef:cc:61:0f:ad:d0:78:20:a0:1f:c8:71:
                    05:0a:7c:f8:b0:9f:70:b0:15:8b:80:a3:97:26:83:
                    7a:4e:9f:66:c7:46:05:a4:27:f8:f8:dd:0f:1c:e1:
                    ab:70:80:cb:80:81:e7:93:16:8c:df:5f:b8:9e:2a:
                    35:6e:2f:69:81:59:ee:58:d5:bb:7e:3a:d3:88:31:
                    68:67:82:cb:45:d6:04:9d:fe:12:45:2a:48:48:55:
                    78:2f:bf:7b:a5:dc:f2:42:f8:4b:57:e8:eb:7f:40:
                    06:f4:31:2f:ae:90:00:db:86:04:02:ee:90:f2:d3:
                    cd:26:bb:b4:27:ed:a6:33:f2:40:f6:3d:02:6c:be:
                    7d:ba:92:cd:73:55:b9:3c:7e:ba:3a:53:72:d0:89:
                    2e:8e:bc:ac:3c:d3:d1:8a:86:5d:92:d1:6c:0e:9f:
                    50:ac:97:c4:77:0d:84:da:b8:bd:68:30:d4:ad:f8:
                    a4:46:8e:fb:2b:af:f5:29:45:ba:56:dd:f3:d8:4c:
                    a0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:05:99:96:7B:26:E5:56:B6:33:FC:17:3B:20:29:76:9D:CD:6C:A6
            X509v3 Authority Key Identifier:
                keyid:00:59:BA:88:73:7D:AD:2C:55:27:0B:BC:F4:09:B6:2E:12:76:55:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/323830343a333366633a633030303a3a2f33352d3335203d3e20323635343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33fc:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         78:3c:f0:cc:b0:3f:db:3f:0b:a1:28:fe:c5:1b:85:bc:07:05:
         c1:26:a5:01:67:60:6a:e8:a8:6b:a5:21:34:df:c6:b9:0b:55:
         d3:de:58:0f:1a:ee:c5:a7:bd:e3:3b:85:0c:3b:af:37:ff:5f:
         e4:7c:05:ad:bd:e4:ab:19:53:6c:4b:6b:b9:34:25:3e:b3:08:
         98:7d:57:4d:a4:55:53:c0:4f:27:a4:69:d2:9b:45:a9:19:9c:
         09:fc:14:91:12:6f:33:32:36:d6:ab:1a:4a:49:f7:31:ab:32:
         68:58:ee:e7:3c:da:4b:4e:45:d2:27:1a:96:fb:f1:c5:1c:e6:
         38:e4:1b:0b:18:2c:38:e8:ac:7e:82:38:8b:71:83:db:3a:aa:
         ca:a2:b3:45:f4:5d:11:4d:54:e7:fd:55:f7:02:11:78:66:5a:
         b5:d9:aa:1f:73:fd:26:fc:94:f8:1c:69:21:d3:05:17:a0:58:
         98:6f:92:fd:e9:6e:bf:96:de:d6:d7:4d:83:dd:65:f0:91:f5:
         74:ce:1e:1d:30:ff:92:f6:6f:37:ca:e2:44:f7:4b:55:ce:d3:
         f2:44:7c:a6:57:39:a3:e1:44:db:64:22:cd:26:8b:f1:2d:f8:
         68:8f:53:fc:4e:04:3f:ed:9f:52:99:b1:15:0a:10:43:e0:99:
         6e:18:07:35
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUA/S9KeienqvsOARQpKHis+xVeqkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDA1OUJBODg3MzdEQUQyQzU1MjcwQkJDRjQwOUI2MkUx
Mjc2NTU4RjAeFw0yNDA0MDMxODI2MjlaFw0yNTA0MDIxODMxMjlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOUYxMTYxMzcyOTdGRjkxNUJF
RUU0QkI1NEJEOEVFMkVDQ0NEQjIyNzZDRTlFNTNEODQzQjJFNTVCODZEMDZDN0VE
MUM3NjA4RUMxNjZCOTJEQUUwNkYwREE0RDNFOTUzQ0NFRTlGMkVBMjBFNjg1OTA1
QzcwMkVFM0MwMkVGQ0M2MTBGQUREMDc4MjBBMDFGQzg3MTA1MEE3Q0Y4QjA5Rjcw
QjAxNThCODBBMzk3MjY4MzdBNEU5RjY2Qzc0NjA1QTQyN0Y4RjhERDBGMUNFMUFC
NzA4MENCODA4MUU3OTMxNjhDREY1RkI4OUUyQTM1NkUyRjY5ODE1OUVFNThENUJC
N0UzQUQzODgzMTY4Njc4MkNCNDVENjA0OURGRTEyNDUyQTQ4NDg1NTc4MkZCRjdC
QTVEQ0YyNDJGODRCNTdFOEVCN0Y0MDA2RjQzMTJGQUU5MDAwREI4NjA0MDJFRTkw
RjJEM0NEMjZCQkI0MjdFREE2MzNGMjQwRjYzRDAyNkNCRTdEQkE5MkNENzM1NUI5
M0M3RUJBM0E1MzcyRDA4OTJFOEVCQ0FDM0NEM0QxOEE4NjVEOTJEMTZDMEU5RjUw
QUM5N0M0NzcwRDg0REFCOEJENjgzMEQ0QURGOEE0NDY4RUZCMkJBRkY1Mjk0NUJB
NTZEREYzRDg0Q0EwNTEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAnxFhNyl/+RW+7ku1S9juLszNsids6eU9hDsuVbhtBsftHHYI7BZr
ktrgbw2k0+lTzO6fLqIOaFkFxwLuPALvzGEPrdB4IKAfyHEFCnz4sJ9wsBWLgKOX
JoN6Tp9mx0YFpCf4+N0PHOGrcIDLgIHnkxaM31+4nio1bi9pgVnuWNW7fjrTiDFo
Z4LLRdYEnf4SRSpISFV4L797pdzyQvhLV+jrf0AG9DEvrpAA24YEAu6Q8tPNJru0
J+2mM/JA9j0CbL59upLNc1W5PH66OlNy0IkujrysPNPRioZdktFsDp9QrJfEdw2E
2ri9aDDUrfikRo77K6/1KUW6Vt3z2EygUQIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FCoFmZZ7JuVWtjP8FzsgKXadzWymMB8GA1UdIwQYMBaAFABZuohzfa0sVScLvPQJ
ti4SdlWPMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNnWGU5b283VWhaakJw
MmNMRlF1Wk1zTm5CY1p0YWdaR1FUQ1drVUtxR05qLzEvMDA1OUJBODg3MzdEQUQy
QzU1MjcwQkJDRjQwOUI2MkUxMjc2NTU4Ri5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8wMDU5QkE4ODczN0RBRDJDNTUyNzBCQkNGNDA5QjYyRTEyNzY1
NThGLmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zZ1hlOW9vN1VoWmpCcDJjTEZR
dVpNc05uQmNadGFnWkdRVENXa1VLcUdOai8xLzMyMzgzMDM0M2EzMzMzNjY2MzNh
NjMzMDMwMzAzYTNhMmYzMzM1MmQzMzM1MjAzZDNlMjAzMjM2MzUzNDMyMzkucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgUoBDP8wDANBgkqhkiG9w0BAQsFAAOCAQEAeDzwzLA/2z8LoSj+xRuF
vAcFwSalAWdgauioa6UhNN/GuQtV095YDxruxae94zuFDDuvN/9f5HwFrb3kqxlT
bEtruTQlPrMImH1XTaRVU8BPJ6Rp0ptFqRmcCfwUkRJvMzI21qsaSkn3MasyaFju
5zzaS05F0icalvvxxRzmOOQbCxgsOOisfoI4i3GD2zqqyqKzRfRdEU1U5/1V9wIR
eGZatdmqH3P9JvyU+BxpIdMFF6BYmG+S/eluv5be1tdNg91l8JH1dM4eHTD/kvZv
N8riRPdLVc7T8kR8plc5o+FE22QizSaL8S34aI9T/E4EP+2fUpmxFQoQQ+CZbhgH
NQ==
-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:33 2024 by rpki-client on console-ams.rpki-client.org