Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a343866303a3a2f33332d3333203d3e203631353839.roa
File:                     323830343a343866303a3a2f33332d3333203d3e203631353839.roa (raw, json)
Hash identifier:          BaDgFYNTQJyMMRGFxFcD9giVluVFPXma9qjrvbE343k=
Subject key identifier:   34:41:EC:75:4C:E3:E9:90:32:09:1F:A9:64:F6:09:5D:38:C7:72:FE
Certificate issuer:       /CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
Certificate serial:       0AB2A9F1F8B2C254B64FAE7797708F26E7E9D36E
Authority key identifier: 1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a343866303a3a2f33332d3333203d3e203631353839.roa
Signing time:             Tue 31 Dec 2024 18:12:36 +0000
ROA not before:           Tue 31 Dec 2024 18:07:36 +0000
ROA not after:            Tue 30 Dec 2025 18:12:36 +0000
asID:                     61589
IP address blocks:        2804:48f0::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl
                          rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 21:13:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:b2:a9:f1:f8:b2:c2:54:b6:4f:ae:77:97:70:8f:26:e7:e9:d3:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
        Validity
            Not Before: Dec 31 18:07:36 2024 GMT
            Not After : Dec 30 18:12:36 2025 GMT
        Subject: CN=3441EC754CE3E99032091FA964F6095D38C772FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2c:54:bb:50:07:f6:d7:db:66:82:9f:d2:57:
                    d5:89:f4:28:7a:0a:51:0b:c6:9d:7e:d8:b8:f7:3b:
                    19:84:8d:b9:4a:b7:39:fa:55:6f:2e:bf:64:0b:dd:
                    a0:c0:ef:dd:03:4b:b6:f2:ec:22:58:8e:19:f0:6c:
                    16:c1:9c:5b:db:fb:dc:01:f2:ac:5e:87:22:c8:f0:
                    b3:54:ad:60:de:56:14:80:ad:2b:9d:a9:eb:21:c6:
                    a9:a9:5e:a4:66:06:1d:1d:7f:e5:c1:2d:98:da:96:
                    ec:cc:25:61:36:56:7b:a5:87:f8:76:98:1d:66:d8:
                    a7:4d:45:ac:0d:03:a7:29:90:bd:96:f9:ac:ea:36:
                    ca:e1:e0:63:17:84:c4:dd:9a:cb:63:36:5c:e1:07:
                    05:d8:7a:e5:87:1e:c4:2e:cc:bd:cf:5e:62:6c:6c:
                    3c:67:6f:f5:9f:8a:f6:ad:8c:fb:90:19:92:73:b4:
                    1a:c5:77:52:16:1e:f3:35:b3:c9:20:10:3c:b3:65:
                    39:99:6c:24:1b:21:d7:52:6e:cc:2d:76:51:1f:ad:
                    3e:47:8b:d6:ad:ef:f1:b8:1e:5a:5f:19:a8:f4:6d:
                    9b:08:8e:e1:a8:2d:be:5d:9b:e2:05:6e:59:e3:b0:
                    f8:ee:ca:f1:58:26:53:9e:c4:ee:9e:3a:9c:99:54:
                    3f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:41:EC:75:4C:E3:E9:90:32:09:1F:A9:64:F6:09:5D:38:C7:72:FE
            X509v3 Authority Key Identifier:
                keyid:1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a343866303a3a2f33332d3333203d3e203631353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:48f0::/33

    Signature Algorithm: sha256WithRSAEncryption
         36:e3:b8:28:f0:2d:b6:f7:dc:10:b1:a4:71:52:b0:4b:6a:01:
         59:36:30:b2:65:ba:a7:a0:55:a5:54:3e:d7:63:25:9e:8e:05:
         05:fc:29:bc:f1:c2:2e:6c:93:5d:65:5e:44:a9:35:79:c9:a9:
         8d:53:71:9f:f6:da:e2:20:17:bd:ab:f6:59:1f:0e:9f:82:4a:
         c1:ed:d2:57:0a:df:d9:9b:6b:32:e4:90:9b:0c:9a:cd:b1:70:
         29:1f:a6:c5:a1:30:51:ea:1f:7b:22:ba:60:bb:a9:3b:69:4d:
         7d:5b:ee:3a:1b:21:28:f3:57:c1:ef:03:31:9d:bd:ff:ae:94:
         84:35:e0:7f:60:f5:ce:28:90:e7:04:dd:c1:83:3a:54:fc:0e:
         60:34:af:db:e9:c8:6a:23:96:1a:68:b0:fa:25:b9:77:5a:97:
         4d:7f:8e:b6:49:ba:10:d8:ea:ca:28:63:90:67:40:43:d4:8c:
         b5:ac:14:6a:a6:db:70:87:01:72:ca:1c:b1:8b:de:7f:5e:7a:
         64:8a:0e:50:df:2a:f8:c5:ad:59:aa:a2:a8:83:7a:96:41:69:
         01:10:ed:80:84:3b:65:d6:74:64:46:ea:87:f5:ae:ee:bc:1e:
         93:c2:d7:07:45:53:fe:55:43:57:d0:44:d4:02:50:5e:05:e1:
         5a:5a:03:7a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUCrKp8fiywlS2T653l3CPJufp024wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUYxMUU1NThGQzc1RDlEQTE1MDM5RUE1OEQ1QTE2NkE2
RjVFRjEwQjAeFw0yNDEyMzExODA3MzZaFw0yNTEyMzAxODEyMzZaMDMxMTAvBgNV
BAMTKDM0NDFFQzc1NENFM0U5OTAzMjA5MUZBOTY0RjYwOTVEMzhDNzcyRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnLFS7UAf219tmgp/SV9WJ9Ch6
ClELxp1+2Lj3OxmEjblKtzn6VW8uv2QL3aDA790DS7by7CJYjhnwbBbBnFvb+9wB
8qxehyLI8LNUrWDeVhSArSudqeshxqmpXqRmBh0df+XBLZjaluzMJWE2Vnulh/h2
mB1m2KdNRawNA6cpkL2W+azqNsrh4GMXhMTdmstjNlzhBwXYeuWHHsQuzL3PXmJs
bDxnb/WfivatjPuQGZJztBrFd1IWHvM1s8kgEDyzZTmZbCQbIddSbswtdlEfrT5H
i9at7/G4HlpfGaj0bZsIjuGoLb5dm+IFblnjsPjuyvFYJlOexO6eOpyZVD+PAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUNEHsdUzj6ZAyCR+pZPYJXTjHcv4wHwYDVR0j
BBgwFoAUHxHlWPx12doVA56ljVoWam9e8QswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjVtYXpYcXl3NFVjcGN3a1BkUWJQMVdqeWt3UDdraGpYRmQ5MXd6eExY
ZTYvMC8xRjExRTU1OEZDNzVEOURBMTUwMzlFQTU4RDVBMTY2QTZGNUVGMTBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGMTFFNTU4RkM3NUQ5REEx
NTAzOUVBNThENUExNjZBNkY1RUYxMEIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzI1bWF6WHF5dzRVY3Bjd2tQZFFiUDFXanlrd1A3a2hqWEZkOTF3enhMWGU2LzAv
MzIzODMwMzQzYTM0Mzg2NjMwM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzYzMTM1
MzgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwDgQCAAIwCAMGBygESPAAMA0GCSqGSIb3DQEBCwUAA4IBAQA247go8C22
99wQsaRxUrBLagFZNjCyZbqnoFWlVD7XYyWejgUF/Cm88cIubJNdZV5EqTV5yamN
U3Gf9triIBe9q/ZZHw6fgkrB7dJXCt/Zm2sy5JCbDJrNsXApH6bFoTBR6h97Irpg
u6k7aU19W+46GyEo81fB7wMxnb3/rpSENeB/YPXOKJDnBN3BgzpU/A5gNK/b6chq
I5YaaLD6Jbl3WpdNf462SboQ2OrKKGOQZ0BD1Iy1rBRqpttwhwFyyhyxi95/Xnpk
ig5Q3yr4xa1ZqqKog3qWQWkBEO2AhDtl1nRkRuqH9a7uvB6TwtcHRVP+VUNX0ETU
AlBeBeFaWgN6
-----END CERTIFICATE-----
Generated at Fri Mar 14 00:38:18 2025 by rpki-client