Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/323830343a333366633a653030303a3a2f33352d3335203d3e20323635343239.roa
File:                     323830343a333366633a653030303a3a2f33352d3335203d3e20323635343239.roa (raw, json)
Hash identifier:          kd/3D2gJq/jgqUNXLWgbTUQHKVGiuZKTMAn+ri03m00=
Subject key identifier:   08:0B:7C:D7:8E:D9:1E:29:43:BB:CA:1C:0D:99:98:79:7C:43:95:13
Certificate issuer:       /CN=0059BA88737DAD2C55270BBCF409B62E1276558F
Certificate serial:       2DD9FA614020D04BAC4AA7E1F94242CF9FBFF93E
Authority key identifier: 00:59:BA:88:73:7D:AD:2C:55:27:0B:BC:F4:09:B6:2E:12:76:55:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/323830343a333366633a653030303a3a2f33352d3335203d3e20323635343239.roa
Signing time:             Wed 03 Apr 2024 18:31:28 +0000
ROA not before:           Wed 03 Apr 2024 18:26:28 +0000
ROA not after:            Wed 02 Apr 2025 18:31:28 +0000
asID:                     265429
IP address blocks:        2804:33fc:e000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.crl
                          rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 18:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:d9:fa:61:40:20:d0:4b:ac:4a:a7:e1:f9:42:42:cf:9f:bf:f9:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0059BA88737DAD2C55270BBCF409B62E1276558F
        Validity
            Not Before: Apr  3 18:26:28 2024 GMT
            Not After : Apr  2 18:31:28 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f1:27:f4:44:b1:90:99:d6:ce:84:98:6d:93:
                    40:54:64:9e:26:e4:ec:5a:04:4a:68:70:de:66:53:
                    a4:d7:47:ae:ef:ac:d8:3b:36:b9:26:9b:ea:d3:bc:
                    ac:b5:fe:9e:36:14:31:24:39:76:22:08:d7:fe:2f:
                    6f:5a:1f:b9:09:ac:29:1a:b7:9d:9f:7b:6b:b5:2c:
                    da:11:86:0b:e0:71:54:34:23:19:26:fc:fa:40:5c:
                    37:01:05:de:48:63:e3:03:1e:d7:c6:74:bb:3c:65:
                    4d:eb:c3:f5:9a:24:b6:9b:26:e0:48:25:1f:8d:9b:
                    e0:f9:ac:bb:14:ed:2f:a5:7c:73:e3:32:8d:e6:b3:
                    10:02:f0:61:a3:65:02:37:1b:1d:c9:79:0e:1f:8c:
                    fc:cb:51:f1:41:b2:5c:fa:e9:0d:39:38:78:e6:29:
                    85:a7:43:a8:52:8b:54:9e:72:8d:ba:45:c9:5a:b0:
                    cd:3c:b0:07:b5:7d:fb:86:af:ed:e4:dc:ff:bb:69:
                    e2:b2:e8:b8:71:e7:07:a9:4d:e5:6b:b6:65:c9:76:
                    7d:9e:d8:6d:83:ae:4d:c1:6e:c8:ce:5c:68:ff:59:
                    57:da:d9:4f:17:78:7d:60:f2:64:d6:d9:45:69:5f:
                    d1:62:35:54:87:6f:f5:8b:39:62:f1:c3:60:7a:a8:
                    72:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:0B:7C:D7:8E:D9:1E:29:43:BB:CA:1C:0D:99:98:79:7C:43:95:13
            X509v3 Authority Key Identifier:
                keyid:00:59:BA:88:73:7D:AD:2C:55:27:0B:BC:F4:09:B6:2E:12:76:55:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/0059BA88737DAD2C55270BBCF409B62E1276558F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0059BA88737DAD2C55270BBCF409B62E1276558F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3gXe9oo7UhZjBp2cLFQuZMsNnBcZtagZGQTCWkUKqGNj/1/323830343a333366633a653030303a3a2f33352d3335203d3e20323635343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33fc:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         4a:58:c2:01:60:80:82:f4:76:d7:ef:00:58:46:f0:6d:0a:c9:
         8e:88:e2:59:fd:e9:fe:06:3c:0a:87:1f:be:77:8e:ea:4b:b2:
         57:cf:4c:45:d9:03:b5:95:37:81:2c:fa:d9:93:23:8f:0a:a2:
         1a:80:cb:b9:5d:c5:98:db:27:ce:77:a7:44:75:2a:e4:51:af:
         09:97:b5:c6:4e:99:79:3d:95:b1:47:34:2b:15:3e:2a:fa:86:
         26:d2:b2:52:c7:94:fe:59:61:6e:ae:49:cc:9b:47:4f:59:6a:
         5b:a8:81:ba:06:a3:71:4b:64:1f:2b:bb:83:ef:91:5b:67:d1:
         72:4f:75:5c:2a:53:fd:ea:19:ea:7b:9e:ff:67:1e:77:d1:96:
         46:30:89:7a:bb:48:3d:08:f7:29:e6:90:69:33:8f:89:e4:7c:
         ea:5a:b4:e8:e1:87:8d:7f:5e:2e:bb:fd:f9:43:57:28:6d:5c:
         6e:93:3f:65:d1:74:e0:ff:45:60:09:90:82:1a:36:51:95:fc:
         e3:f5:22:e5:c2:a7:eb:c9:8c:94:d9:64:b3:1e:43:b3:74:f8:
         66:2e:63:54:41:bf:3e:30:d7:a0:3e:5f:3c:3b:06:be:97:f7:
         7c:c1:32:52:a4:ca:bf:9d:45:a3:62:3f:75:67:17:76:87:29:
         77:2b:8f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:33 2024 by rpki-client on console-ams.rpki-client.org