Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a383030303a3a2f33342d3334203d3e203631353837.roa
File:                     323830343a333330303a383030303a3a2f33342d3334203d3e203631353837.roa (raw, json)
Hash identifier:          zT7Xcc6KVYfCO+NZ9amkrX1fN1wRH0E8i70NUMYClPc=
Subject key identifier:   1A:9A:EA:A6:47:CF:1B:00:B5:B8:BA:C2:E7:34:4D:BC:FD:D9:A0:37
Certificate issuer:       /CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
Certificate serial:       4BF4FE6F620DEB4C4D97AF912A8585C8EAA24A6E
Authority key identifier: 1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a383030303a3a2f33342d3334203d3e203631353837.roa
Signing time:             Tue 31 Dec 2024 18:11:37 +0000
ROA not before:           Tue 31 Dec 2024 18:06:37 +0000
ROA not after:            Tue 30 Dec 2025 18:11:37 +0000
asID:                     61587
IP address blocks:        2804:3300:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl
                          rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 22:55:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:f4:fe:6f:62:0d:eb:4c:4d:97:af:91:2a:85:85:c8:ea:a2:4a:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
        Validity
            Not Before: Dec 31 18:06:37 2024 GMT
            Not After : Dec 30 18:11:37 2025 GMT
        Subject: CN=1A9AEAA647CF1B00B5B8BAC2E7344DBCFDD9A037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:16:f6:ee:bd:65:68:e6:75:4e:63:27:79:e6:
                    82:b1:36:86:69:a7:13:4b:d2:81:31:a1:3c:99:29:
                    bd:33:eb:6d:b4:48:ed:a0:f5:64:21:69:b8:97:c6:
                    35:3e:b4:50:15:fa:bc:bb:9c:70:c9:a6:c8:2f:bf:
                    e0:86:6a:52:10:a0:6b:9a:cf:85:a3:99:16:ac:99:
                    b2:c2:90:c6:06:82:19:cc:93:3a:6a:15:b3:62:d6:
                    25:7a:ec:98:42:9d:0b:62:0d:72:ae:ce:8d:2c:01:
                    7b:b4:cf:bc:49:b4:16:43:d7:9b:c3:5e:cf:da:d9:
                    a8:d9:13:b9:b9:89:38:63:26:91:32:83:3c:00:e0:
                    f7:59:fe:a4:37:be:23:35:4a:c8:d4:e3:44:e3:d2:
                    6a:7c:e8:ff:03:57:d9:f9:fa:89:c5:5d:d7:bb:f5:
                    f9:2a:d4:b6:16:04:cc:2a:f7:3a:ca:d8:c5:0f:e7:
                    7c:0f:29:e1:6f:a6:21:f3:6d:c6:d2:15:d0:f3:34:
                    40:b5:6d:d7:d9:bd:f5:1d:e5:58:d9:ff:09:31:37:
                    aa:72:6b:de:cf:7b:03:e9:f3:99:73:9d:95:c1:3c:
                    56:32:44:f2:02:a4:e1:d5:2e:bb:55:8c:69:cb:07:
                    55:df:74:a2:e4:67:b1:eb:9b:cc:be:33:67:c5:ae:
                    c6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:9A:EA:A6:47:CF:1B:00:B5:B8:BA:C2:E7:34:4D:BC:FD:D9:A0:37
            X509v3 Authority Key Identifier:
                keyid:1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a383030303a3a2f33342d3334203d3e203631353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3300:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         0f:0a:1a:50:b9:77:32:e2:f6:9b:63:6e:64:66:cf:90:b4:30:
         09:cb:53:d5:a9:53:1e:8e:08:b8:3b:da:8b:85:06:13:ef:ea:
         6a:71:b8:53:2b:8c:3a:c3:55:bd:5f:a7:df:ac:6b:1b:42:8f:
         85:44:f8:ea:66:38:3d:d4:98:35:b1:10:94:12:3f:13:fb:7e:
         a5:8e:31:3d:0e:c8:04:57:c2:46:bd:bc:c3:97:c5:55:41:f6:
         4a:a6:1e:e3:a3:a2:62:7a:cf:62:9a:dc:47:ee:8f:74:65:ed:
         0c:c4:f2:e1:65:da:45:5d:62:82:47:20:3c:e1:90:6b:56:ff:
         81:52:18:c7:67:38:80:98:90:9b:3c:2f:1c:c8:77:f6:d0:e1:
         0a:01:e3:8f:3e:47:bb:e0:a4:50:f7:0f:dc:3a:56:0c:eb:92:
         b0:a1:85:88:9d:07:2a:5b:cc:d0:93:15:35:ff:c6:29:ee:4d:
         82:f4:f4:94:a4:a8:9b:0c:9a:3c:74:b8:f6:3a:cd:9b:dd:15:
         22:ef:e0:12:80:21:e8:10:5a:c5:9a:ca:72:19:3f:79:de:02:
         94:62:0e:16:08:50:5c:d5:4a:ac:c5:e3:e9:12:b9:a3:1c:6f:
         ea:2c:7b:e7:cd:83:e5:29:23:57:8b:5b:f4:90:3e:81:48:b2:
         c2:fa:90:89
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUS/T+b2IN60xNl6+RKoWFyOqiSm4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUYxMUU1NThGQzc1RDlEQTE1MDM5RUE1OEQ1QTE2NkE2
RjVFRjEwQjAeFw0yNDEyMzExODA2MzdaFw0yNTEyMzAxODExMzdaMDMxMTAvBgNV
BAMTKDFBOUFFQUE2NDdDRjFCMDBCNUI4QkFDMkU3MzQ0REJDRkREOUEwMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpFvbuvWVo5nVOYyd55oKxNoZp
pxNL0oExoTyZKb0z6220SO2g9WQhabiXxjU+tFAV+ry7nHDJpsgvv+CGalIQoGua
z4WjmRasmbLCkMYGghnMkzpqFbNi1iV67JhCnQtiDXKuzo0sAXu0z7xJtBZD15vD
Xs/a2ajZE7m5iThjJpEygzwA4PdZ/qQ3viM1SsjU40Tj0mp86P8DV9n5+onFXde7
9fkq1LYWBMwq9zrK2MUP53wPKeFvpiHzbcbSFdDzNEC1bdfZvfUd5VjZ/wkxN6py
a97PewPp85lznZXBPFYyRPICpOHVLrtVjGnLB1XfdKLkZ7Hrm8y+M2fFrsZPAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUGprqpkfPGwC1uLrC5zRNvP3ZoDcwHwYDVR0j
BBgwFoAUHxHlWPx12doVA56ljVoWam9e8QswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjVtYXpYcXl3NFVjcGN3a1BkUWJQMVdqeWt3UDdraGpYRmQ5MXd6eExY
ZTYvMC8xRjExRTU1OEZDNzVEOURBMTUwMzlFQTU4RDVBMTY2QTZGNUVGMTBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGMTFFNTU4RkM3NUQ5REEx
NTAzOUVBNThENUExNjZBNkY1RUYxMEIuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzI1bWF6WHF5dzRVY3Bjd2tQZFFiUDFXanlrd1A3a2hqWEZkOTF3enhMWGU2LzAv
MzIzODMwMzQzYTMzMzMzMDMwM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDM2MzEzNTM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYoBDMAgDANBgkqhkiG9w0BAQsFAAOC
AQEADwoaULl3MuL2m2NuZGbPkLQwCctT1alTHo4IuDvai4UGE+/qanG4UyuMOsNV
vV+n36xrG0KPhUT46mY4PdSYNbEQlBI/E/t+pY4xPQ7IBFfCRr28w5fFVUH2SqYe
46OiYnrPYprcR+6PdGXtDMTy4WXaRV1igkcgPOGQa1b/gVIYx2c4gJiQmzwvHMh3
9tDhCgHjjz5Hu+CkUPcP3DpWDOuSsKGFiJ0HKlvM0JMVNf/GKe5NgvT0lKSomwya
PHS49jrNm90VIu/gEoAh6BBaxZrKchk/ed4ClGIOFghQXNVKrMXj6RK5oxxv6ix7
582D5SkjV4tb9JA+gUiywvqQiQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 13:51:05 2025 by rpki-client