Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a3a2f33342d3334203d3e203631353837.roa
File:                     323830343a333330303a3a2f33342d3334203d3e203631353837.roa (raw, json)
Hash identifier:          wgx1PL8jmZASVq9Sx4JISgEqGcfOom3aU7eascfchko=
Subject key identifier:   50:BF:37:EE:DA:C4:3A:08:DD:60:31:81:5E:F7:F2:99:BE:18:41:FF
Certificate issuer:       /CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
Certificate serial:       31D2D3D50286D5EC757894CA7A3B2437335C531C
Authority key identifier: 1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a3a2f33342d3334203d3e203631353837.roa
Signing time:             Tue 31 Dec 2024 18:11:29 +0000
ROA not before:           Tue 31 Dec 2024 18:06:29 +0000
ROA not after:            Tue 30 Dec 2025 18:11:29 +0000
asID:                     61587
IP address blocks:        2804:3300::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl
                          rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 06:04:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:d2:d3:d5:02:86:d5:ec:75:78:94:ca:7a:3b:24:37:33:5c:53:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
        Validity
            Not Before: Dec 31 18:06:29 2024 GMT
            Not After : Dec 30 18:11:29 2025 GMT
        Subject: CN=50BF37EEDAC43A08DD6031815EF7F299BE1841FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3f:0a:54:80:62:4f:21:dc:c5:cf:7a:26:07:
                    a3:d8:50:05:dc:dc:6f:88:b1:9c:2e:a2:15:a3:6a:
                    3b:6f:8e:00:74:11:d8:b9:22:bb:52:4a:2a:6a:8b:
                    0c:2c:aa:19:bd:dd:f7:e7:d4:11:0d:b7:7f:f5:b3:
                    2b:2a:e1:4e:5e:f0:bd:71:17:4d:10:ce:29:b1:f5:
                    63:a0:83:ed:fc:21:11:ab:3e:76:c1:61:b3:e7:ae:
                    ef:0f:0e:8f:9e:0c:71:9b:44:b1:2c:91:2c:b8:1f:
                    b5:c3:5c:a1:c2:95:10:6c:88:ab:2a:c2:9f:65:13:
                    51:16:b1:83:44:35:ac:31:05:ee:95:58:89:b8:c5:
                    32:4b:06:e3:4b:f6:b3:3a:66:7d:3a:3f:46:c5:0a:
                    59:de:f8:f4:51:61:cb:10:9c:7e:eb:ba:3e:42:d4:
                    20:aa:77:b8:a7:43:2c:ad:d7:9e:59:14:05:84:02:
                    1f:b8:93:5e:e7:ca:2e:d0:47:68:e7:86:b1:ac:35:
                    bf:d1:ba:0c:69:c7:5a:1c:45:50:7c:23:0d:1c:45:
                    be:93:26:5e:7c:53:cf:ba:9e:fe:3e:ca:80:49:f7:
                    bb:42:35:f8:da:0e:68:db:95:f6:a9:e9:fb:8d:3f:
                    29:02:c4:e5:2c:c3:24:d8:8c:9f:68:81:4b:fe:5f:
                    05:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:BF:37:EE:DA:C4:3A:08:DD:60:31:81:5E:F7:F2:99:BE:18:41:FF
            X509v3 Authority Key Identifier:
                keyid:1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a3a2f33342d3334203d3e203631353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3300::/34

    Signature Algorithm: sha256WithRSAEncryption
         83:4a:18:06:98:c1:4d:1e:68:f2:3d:f1:60:c1:b5:11:11:67:
         a4:77:ec:b9:4b:8b:bd:05:98:f4:73:59:69:d1:62:f5:09:93:
         2f:0d:5a:6f:c7:b4:eb:d1:8a:23:75:3b:c2:98:56:39:24:f0:
         1c:b7:ce:e2:8a:d7:6c:b4:40:32:22:72:f1:f9:57:c8:a4:d5:
         17:a0:b8:64:6e:45:67:67:23:2b:e3:65:e7:99:78:5d:d7:02:
         b4:55:22:90:8f:83:34:2b:11:b2:bb:c1:f4:d8:90:a7:36:a7:
         13:79:38:13:ff:bd:4a:81:12:aa:07:37:4d:41:dd:28:7a:51:
         65:3c:ac:c9:ce:3e:b9:ab:76:12:a9:33:55:62:a6:37:e2:bd:
         ed:48:9c:7c:82:c7:29:59:5f:12:88:50:ca:9b:ec:7a:b1:43:
         f2:f9:a1:1c:8b:90:89:fb:ce:09:c8:7e:64:41:78:e9:f4:b2:
         e6:cb:d3:b0:de:aa:cd:83:26:fa:48:5d:66:01:02:5b:d2:84:
         7c:89:32:81:cc:d4:96:c5:1b:15:4a:0d:a8:2d:89:30:68:a9:
         65:02:cd:b5:40:97:26:57:31:0b:1f:92:a5:f2:96:55:d4:8e:
         cd:c8:fa:c9:23:9b:fd:b0:1f:70:79:da:9d:91:d7:5b:2f:ab:
         8c:b4:11:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 13:18:23 2025 by rpki-client