Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a633030303a3a2f33342d3334203d3e203631353837.roa
File:                     323830343a333330303a633030303a3a2f33342d3334203d3e203631353837.roa (raw, json)
Hash identifier:          UoQeze+9DEIKs/A+LOKQ/cPubkNNXmiFeLX+rEM4ENM=
Subject key identifier:   58:19:6F:76:FF:ED:D9:A5:F4:B0:09:8B:7F:C3:5F:E5:F4:BC:2D:FD
Certificate issuer:       /CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
Certificate serial:       50863EB0DB3882E359B3810B07EC999549DC2428
Authority key identifier: 1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a633030303a3a2f33342d3334203d3e203631353837.roa
Signing time:             Tue 31 Dec 2024 18:11:39 +0000
ROA not before:           Tue 31 Dec 2024 18:06:39 +0000
ROA not after:            Tue 30 Dec 2025 18:11:39 +0000
asID:                     61587
IP address blocks:        2804:3300:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl
                          rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 06:04:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:86:3e:b0:db:38:82:e3:59:b3:81:0b:07:ec:99:95:49:dc:24:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
        Validity
            Not Before: Dec 31 18:06:39 2024 GMT
            Not After : Dec 30 18:11:39 2025 GMT
        Subject: CN=58196F76FFEDD9A5F4B0098B7FC35FE5F4BC2DFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:98:1b:d5:ea:8b:6b:24:57:a1:12:66:18:86:
                    86:71:36:0e:c6:d6:4f:73:7b:ff:6d:71:55:31:16:
                    aa:e9:34:f6:59:bb:8f:a4:ed:fd:66:29:55:07:66:
                    ac:72:bd:f7:a7:c7:ea:ca:19:d3:cf:60:99:2e:5e:
                    e5:b1:03:a9:41:2a:dc:e7:5a:cd:11:5a:dd:ed:95:
                    b9:2d:09:95:d2:25:6f:bd:f5:23:bd:86:23:f5:70:
                    6e:eb:ac:8c:5b:77:65:24:71:c0:0f:f1:22:87:0c:
                    08:8f:09:cb:51:5d:de:02:87:68:2a:a2:a8:d9:62:
                    98:3c:5e:4b:1e:a3:0e:59:47:12:a1:67:a6:0c:4e:
                    7f:4d:f4:07:d0:c8:a1:0e:ee:7e:9a:de:6a:b3:29:
                    5a:0b:78:5d:5e:3c:65:08:39:da:94:f5:8a:48:8f:
                    ca:2b:bf:63:c5:87:88:3b:0b:c7:c6:ca:01:a7:6f:
                    f1:54:43:48:f9:3e:8f:02:ad:b2:27:9e:e8:d2:c3:
                    dd:61:76:62:fd:98:c4:f6:87:a8:57:2e:cd:96:5b:
                    7d:4e:ef:14:0c:90:01:f3:7f:92:45:33:2d:53:6b:
                    e1:ca:de:f0:60:3f:37:71:96:03:c1:27:67:17:28:
                    3a:88:93:9d:c6:b4:e6:9f:69:7a:c9:aa:b7:ff:35:
                    9a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:19:6F:76:FF:ED:D9:A5:F4:B0:09:8B:7F:C3:5F:E5:F4:BC:2D:FD
            X509v3 Authority Key Identifier:
                keyid:1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a633030303a3a2f33342d3334203d3e203631353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3300:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a8:aa:ce:1f:03:4b:b5:bd:f3:95:b1:c3:47:6e:50:90:2f:12:
         5d:0f:57:52:4a:11:7d:86:56:1f:72:01:63:fc:ca:de:8a:ec:
         79:10:62:cf:0a:7c:8d:e4:b6:89:11:cc:9a:a0:71:d5:2c:71:
         2c:21:a0:b9:91:14:bf:86:27:9b:4d:3f:1d:c0:dc:f3:a9:67:
         ba:b6:f4:25:6b:6c:8a:f5:da:11:97:65:ec:19:5f:40:d3:d8:
         7a:03:06:df:7e:bb:11:8a:d6:62:2d:17:2f:1f:11:b3:74:d4:
         3e:0c:89:90:50:f7:f8:6c:f5:02:45:4b:37:b1:59:b7:70:27:
         a1:67:48:53:04:d9:34:d5:f2:4c:8d:6d:bf:a5:41:9a:8f:4a:
         24:33:05:cd:e0:94:56:d9:3a:0e:ed:7d:e9:7c:02:e4:97:51:
         93:97:60:ac:29:03:9b:93:1b:e6:c9:b6:54:43:8f:06:a2:14:
         53:53:0b:8c:a5:8e:dc:e7:64:40:d3:ea:87:ca:9f:52:c8:1d:
         c9:8a:26:8c:cd:83:1c:65:62:11:1a:ce:1c:41:f6:c2:26:f7:
         b4:35:4b:3c:9e:df:17:07:68:c5:68:90:2f:70:7f:38:c5:bd:
         95:6d:df:b5:5d:6e:5d:62:5a:6b:71:7b:25:61:a4:cc:b0:5a:
         de:96:4f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 13:19:44 2025 by rpki-client