Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/323830343a333366633a633030303a3a2f33352d3335203d3e20323635343239.roa
File:                     323830343a333366633a633030303a3a2f33352d3335203d3e20323635343239.roa (raw, json)
Hash identifier:          ShfJ1YcapSF9zRtcssJB/RdC5MawlY+S0b1ciqIqowA=
Subject key identifier:   F8:F3:14:DC:BC:6E:71:E9:45:DC:4F:DB:D4:AB:98:37:84:9F:6F:85
Certificate issuer:       /CN=0059BA88737DAD2C55270BBCF409B62E1276558F
Certificate serial:       36ACED2CDCA7F713737C3011402FC018776DA341
Authority key identifier: 00:59:BA:88:73:7D:AD:2C:55:27:0B:BC:F4:09:B6:2E:12:76:55:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/323830343a333366633a633030303a3a2f33352d3335203d3e20323635343239.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     265429
IP address blocks:        2804:33fc:c000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.crl
                          rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 03:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:ac:ed:2c:dc:a7:f7:13:73:7c:30:11:40:2f:c0:18:77:6d:a3:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0059BA88737DAD2C55270BBCF409B62E1276558F
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:10:3d:cb:6f:84:05:69:40:e6:0a:90:4e:4b:
                    de:47:4e:3c:4d:b3:ce:4f:af:5a:1b:34:aa:f2:44:
                    ba:5f:39:f8:86:ca:57:93:9e:02:c0:fe:60:28:b8:
                    c5:0e:96:d8:e6:df:ce:d9:1e:8d:dc:90:51:f0:bc:
                    30:23:94:5d:34:08:cf:66:98:d0:a3:50:b7:47:d9:
                    80:40:49:0b:3e:4a:cb:61:18:35:04:e9:25:96:28:
                    43:f5:14:5b:8c:f8:ed:6d:34:d2:4a:ff:1b:d3:54:
                    d8:02:ed:36:e2:d7:82:92:08:7c:5c:1b:dc:44:e0:
                    e4:99:07:0a:63:31:93:a1:dc:a0:af:a9:07:8d:a2:
                    23:db:00:ff:63:59:4e:7c:ae:fb:35:f0:0e:ec:36:
                    01:24:a8:e8:d0:ae:ee:39:1b:0c:6a:a9:8e:17:85:
                    58:ab:38:1a:ef:e1:9d:b5:ce:af:f0:26:f9:47:c8:
                    4b:b8:59:43:26:42:d7:65:a9:bd:75:94:eb:80:04:
                    c2:e4:27:3b:26:28:9d:03:8f:dc:92:66:b0:19:ae:
                    c5:c1:a1:6e:5a:61:e1:d8:d4:a9:9f:46:ee:71:ef:
                    70:90:92:b8:02:c4:eb:38:2d:f0:06:89:b9:44:bf:
                    15:d1:bb:9e:54:65:5c:50:0d:b1:1e:8b:69:3c:90:
                    7c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F3:14:DC:BC:6E:71:E9:45:DC:4F:DB:D4:AB:98:37:84:9F:6F:85
            X509v3 Authority Key Identifier:
                keyid:00:59:BA:88:73:7D:AD:2C:55:27:0B:BC:F4:09:B6:2E:12:76:55:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/323830343a333366633a633030303a3a2f33352d3335203d3e20323635343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33fc:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         47:53:57:0f:4d:9e:a4:f3:c8:e8:b2:2c:8c:bc:fa:02:df:99:
         3f:70:55:22:26:8b:ca:4d:0c:75:57:1f:3c:8a:d0:6f:57:8a:
         8a:e3:c5:50:4e:05:b1:6e:ef:8a:82:3f:b4:2b:a7:94:2f:f2:
         68:b7:cd:a1:65:1e:17:4c:2d:8e:ee:66:4b:5d:40:61:7d:ff:
         15:30:51:48:3a:a9:3c:1f:35:31:05:fd:29:ea:ab:0f:c1:67:
         69:46:ba:3a:ad:ff:47:55:61:e7:04:da:af:e2:8c:b8:5a:cd:
         5a:db:b8:f0:56:8a:b8:61:1a:2c:84:23:ae:52:31:74:ff:17:
         30:2a:70:a1:0d:f5:33:60:a9:45:e8:4e:7d:31:c5:8b:cb:90:
         f2:29:ee:6c:70:0c:14:5c:82:15:5d:32:15:e6:18:bb:74:dd:
         32:97:46:c0:db:58:d2:a0:09:18:25:f9:49:17:67:ff:f9:ad:
         9a:ca:25:72:30:b2:83:f1:56:56:0a:bf:c4:49:3b:54:9b:75:
         5b:3e:8d:a6:e8:30:7e:ed:ca:f1:f1:92:f1:18:44:41:cc:33:
         cb:a3:4c:72:75:cf:fe:5c:3a:ae:0a:19:e6:f1:e9:87:47:9e:
         25:cf:98:00:c5:6a:3d:d5:b0:3e:71:fc:13:68:15:77:df:15:
         9c:51:98:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:47:48 2025 by rpki-client