Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a3a2f33322d3332203d3e203631353837.roa
File:                     323830343a333330303a3a2f33322d3332203d3e203631353837.roa (raw, json)
Hash identifier:          CHufkcreOMoRm/d+eu9Q0e3b5NGygOXgGyjU/MtjkEw=
Subject key identifier:   67:9E:18:61:BD:17:F8:BA:BF:24:51:55:67:39:23:D8:33:F4:62:21
Certificate issuer:       /CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
Certificate serial:       471D8DDD8ED8027B8566E3C6845FABAD5B89B8E3
Authority key identifier: 1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a3a2f33322d3332203d3e203631353837.roa
Signing time:             Tue 31 Dec 2024 18:11:18 +0000
ROA not before:           Tue 31 Dec 2024 18:06:18 +0000
ROA not after:            Tue 30 Dec 2025 18:11:18 +0000
asID:                     61587
IP address blocks:        2804:3300::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl
                          rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 21:13:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:1d:8d:dd:8e:d8:02:7b:85:66:e3:c6:84:5f:ab:ad:5b:89:b8:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
        Validity
            Not Before: Dec 31 18:06:18 2024 GMT
            Not After : Dec 30 18:11:18 2025 GMT
        Subject: CN=679E1861BD17F8BABF245155673923D833F46221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:51:4e:a0:a8:6a:fd:50:d2:a9:96:66:fa:33:
                    8d:88:c8:e3:25:2e:1d:8e:7d:46:9d:f7:19:29:0a:
                    b1:9d:d4:a8:b2:5b:e7:aa:6f:34:99:48:ff:49:81:
                    a4:00:27:f9:81:e6:d8:a9:37:ee:99:ea:c3:36:11:
                    76:75:0a:12:1a:e8:64:bc:9d:ff:32:ce:a6:95:f0:
                    64:05:dd:91:12:bf:d1:8e:93:44:39:4d:68:f2:e4:
                    9e:81:78:3e:87:23:06:44:38:47:dc:ac:68:ee:4f:
                    34:d6:60:f1:eb:a1:bd:6d:99:25:ad:29:57:3a:d3:
                    9c:f4:4f:74:9e:b7:13:33:24:b3:84:75:c0:03:bb:
                    89:86:7c:19:b7:bb:36:f8:80:2a:90:41:83:6f:87:
                    2f:f7:a8:1c:3a:f1:bf:d8:05:01:ca:e3:72:e4:92:
                    9e:19:79:f7:b4:f2:a8:fa:32:34:85:0d:74:a4:08:
                    47:c0:21:21:96:77:ff:54:e7:8f:b8:0c:c3:0d:fb:
                    1f:13:5c:41:f4:ae:dc:64:54:f6:4a:5e:4c:9f:cb:
                    25:e8:de:b0:30:fa:95:00:bd:e6:16:2c:37:f5:67:
                    b9:48:eb:cf:51:22:e2:22:1f:75:d7:f1:99:39:4b:
                    ff:36:dd:31:02:6b:80:05:aa:c3:66:1a:81:c4:77:
                    53:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:9E:18:61:BD:17:F8:BA:BF:24:51:55:67:39:23:D8:33:F4:62:21
            X509v3 Authority Key Identifier:
                keyid:1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a3a2f33322d3332203d3e203631353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3300::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:d2:bf:22:27:dd:22:01:40:e8:70:5e:0e:76:f7:88:ff:a7:
         11:b6:44:c6:fc:c1:9d:e0:87:34:78:04:80:a4:16:85:a8:14:
         a7:69:31:88:cb:81:d5:f1:83:fc:37:cf:37:91:90:7a:42:6b:
         3a:b4:6f:9c:4d:18:bb:ca:16:1e:5b:7a:b9:82:4f:52:80:55:
         95:ac:3d:64:aa:67:4e:65:1d:68:f8:dc:6c:e2:9c:e0:b9:2d:
         b1:28:f7:9b:12:54:7e:2c:a8:ad:91:71:c1:7e:24:87:ea:98:
         b4:1c:6c:32:d9:30:a2:81:e4:d4:15:96:7d:58:ec:f4:c6:57:
         92:6f:8c:86:f8:e4:42:3a:3b:b2:8b:f1:2a:06:be:94:9e:cd:
         37:c8:b8:7b:0c:5c:dc:31:75:52:1b:5f:c2:e4:b8:b7:97:5d:
         55:af:05:07:5b:4a:50:9a:e2:82:e9:f3:b8:3c:53:2e:bc:aa:
         0a:97:f9:14:32:26:00:b8:5f:0e:4c:64:5a:9c:9f:df:6d:f7:
         2d:34:a4:c9:82:3d:53:9e:0f:db:57:92:32:56:54:ec:de:22:
         71:47:0e:38:16:60:fa:f8:62:06:4d:94:4f:91:53:8d:9b:db:
         e7:0c:87:56:ee:fc:c9:34:e6:79:d4:0d:87:d6:43:31:64:5c:
         80:45:78:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 00:39:28 2025 by rpki-client