Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/323830343a333336303a303a3230303a3a2f35352d3535203d3e20323632373235.roa
File:                     323830343a333336303a303a3230303a3a2f35352d3535203d3e20323632373235.roa (raw, json)
Hash identifier:          YnAj4nnRHR0yIlpmVv3W9tpP6AuEMBjIff491ksaPns=
Subject key identifier:   FB:58:4A:C5:46:64:43:D1:A1:61:29:20:98:A2:66:7C:7C:9D:D4:29
Certificate issuer:       /CN=33D99D98BFD993CB7DE4284CD0B834BDAA1FB768
Certificate serial:       062EEC06BAA4C9101110532A51383FEF0EAEE909
Authority key identifier: 33:D9:9D:98:BF:D9:93:CB:7D:E4:28:4C:D0:B8:34:BD:AA:1F:B7:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/323830343a333336303a303a3230303a3a2f35352d3535203d3e20323632373235.roa
Signing time:             Tue 12 Nov 2024 16:18:27 +0000
ROA not before:           Tue 12 Nov 2024 16:13:27 +0000
ROA not after:            Tue 11 Nov 2025 16:18:27 +0000
asID:                     262725
IP address blocks:        2804:3360:0:200::/55 maxlen: 55
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.crl
                          rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 07:33:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:2e:ec:06:ba:a4:c9:10:11:10:53:2a:51:38:3f:ef:0e:ae:e9:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33D99D98BFD993CB7DE4284CD0B834BDAA1FB768
        Validity
            Not Before: Nov 12 16:13:27 2024 GMT
            Not After : Nov 11 16:18:27 2025 GMT
        Subject: CN=FB584AC5466443D1A161292098A2667C7C9DD429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ef:c9:a4:95:e9:55:9f:0b:7c:1a:7d:1e:18:
                    ed:a8:93:8a:78:34:94:1f:c4:fc:09:b1:01:45:c4:
                    6f:44:1f:2c:88:28:9b:38:51:80:bb:a5:15:7c:a6:
                    30:87:3d:49:65:58:ee:eb:91:a5:54:6e:18:41:bc:
                    95:de:87:2f:29:cc:c9:af:ff:43:f2:52:c0:8a:df:
                    09:e4:7a:8d:96:29:87:58:b5:e8:f4:81:bc:90:da:
                    ca:33:24:82:9e:af:4b:15:1f:d4:4c:57:ca:c0:a6:
                    4b:51:84:40:6d:30:ea:3e:b7:66:86:e7:78:0f:14:
                    4a:a1:00:94:95:c4:9c:58:01:a3:82:d2:91:12:95:
                    61:09:3a:e9:d2:de:2b:c3:df:1e:b2:ad:d1:80:a5:
                    26:56:75:75:ff:95:73:08:93:ec:c6:28:83:b5:d2:
                    ad:68:10:fd:64:99:cd:79:4f:d3:bb:37:b1:13:b0:
                    40:fc:69:cf:88:18:97:bc:bd:34:98:1d:62:10:8b:
                    18:f0:34:c9:d7:cf:fc:86:de:73:eb:b0:b5:2a:aa:
                    3f:1d:8f:6d:79:5c:c4:2a:0b:4f:85:53:12:4a:12:
                    68:64:6c:5c:4a:d2:42:a7:a4:f1:54:0f:c8:0b:b1:
                    82:96:5c:a9:a2:c7:9a:b5:48:a4:e3:e0:aa:83:c4:
                    81:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:58:4A:C5:46:64:43:D1:A1:61:29:20:98:A2:66:7C:7C:9D:D4:29
            X509v3 Authority Key Identifier:
                keyid:33:D9:9D:98:BF:D9:93:CB:7D:E4:28:4C:D0:B8:34:BD:AA:1F:B7:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/323830343a333336303a303a3230303a3a2f35352d3535203d3e20323632373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3360:0:200::/55

    Signature Algorithm: sha256WithRSAEncryption
         e6:ff:65:b7:1f:43:98:85:82:bb:60:ee:2d:bf:c8:1e:ec:b7:
         50:3e:27:ca:79:91:da:14:05:3f:f4:34:8f:1d:1b:65:e3:5a:
         70:de:38:cc:a8:50:ec:1e:46:84:de:48:de:6f:e8:ae:6b:26:
         80:65:67:4d:f0:3c:93:e1:57:9d:3a:52:fe:fe:d4:8b:75:17:
         7d:fb:20:6a:1f:a3:91:49:f2:c8:07:da:ba:20:9c:20:9a:5a:
         eb:54:b3:84:fe:fb:40:aa:9a:9a:0c:ae:8d:f2:fb:29:df:9d:
         b4:b1:9b:a8:12:7d:39:1c:f7:28:b2:39:16:12:19:11:4d:af:
         2c:79:51:81:86:38:18:ca:32:45:fe:66:53:2a:95:c1:14:18:
         d0:e0:c9:2f:72:31:88:05:3a:9a:13:f1:27:fa:36:bc:13:16:
         69:af:a3:fd:75:cc:63:b2:8d:25:1d:6c:02:43:bd:f4:e0:0c:
         0b:09:27:f1:8d:81:37:f6:f7:1e:b2:7f:d9:a6:b2:52:78:f0:
         98:77:d8:88:3b:6d:15:f9:61:72:db:fd:b4:c3:8a:d6:78:5e:
         d8:23:7f:f8:83:03:91:0e:32:ac:c8:c4:a4:bf:5c:d2:c0:43:
         a9:a0:ee:f2:ea:47:71:d2:00:d1:27:83:4c:7b:99:e7:bb:3e:
         25:76:86:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:16 2025 by rpki-client