Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137302e3235342e3133372e302f32342d3234203d3e203631353837.roa
File:                     3137302e3235342e3133372e302f32342d3234203d3e203631353837.roa (raw, json)
Hash identifier:          E3fychIZtzEErjqJXsYmsE0v2V2Ap5H7QuCIXSvgSIc=
Subject key identifier:   60:E0:B2:D7:C6:B4:B8:0D:9E:82:66:E2:1C:05:1F:6C:7E:9C:6B:4E
Certificate issuer:       /CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
Certificate serial:       7DC49120738DBB9085D0404008F47EDDC789E01D
Authority key identifier: 1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137302e3235342e3133372e302f32342d3234203d3e203631353837.roa
Signing time:             Tue 31 Dec 2024 18:11:56 +0000
ROA not before:           Tue 31 Dec 2024 18:06:56 +0000
ROA not after:            Tue 30 Dec 2025 18:11:56 +0000
asID:                     61587
IP address blocks:        170.254.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl
                          rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 22:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:c4:91:20:73:8d:bb:90:85:d0:40:40:08:f4:7e:dd:c7:89:e0:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
        Validity
            Not Before: Dec 31 18:06:56 2024 GMT
            Not After : Dec 30 18:11:56 2025 GMT
        Subject: CN=60E0B2D7C6B4B80D9E8266E21C051F6C7E9C6B4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1c:3b:42:bf:02:a7:1a:b4:0f:5b:54:bc:b6:
                    80:09:d0:65:e8:6b:c5:01:06:13:d2:05:16:e3:6f:
                    2f:17:22:d1:79:a3:13:c0:bf:c5:4a:4c:33:9a:13:
                    5b:36:15:6b:ff:23:df:56:09:68:97:26:9a:d8:6e:
                    5e:a9:06:21:e7:44:2a:d2:62:e6:a3:af:89:42:ed:
                    f4:1f:23:4c:47:7a:70:51:d8:d0:8c:93:c2:cc:c6:
                    01:68:e0:1d:ea:8f:82:9a:96:5d:13:30:d7:49:68:
                    42:47:75:82:78:b1:bf:2b:17:f5:97:8c:a2:69:20:
                    92:0f:12:cb:b6:4b:20:fa:c6:ba:98:ba:80:d2:1d:
                    80:88:0c:ff:99:d8:e4:64:d8:02:ae:ab:ba:47:0f:
                    3b:26:42:d3:de:b8:d3:fc:43:e2:cf:ad:d7:de:37:
                    94:4b:07:05:67:1f:97:76:cf:7c:36:c7:3d:58:e6:
                    20:c4:d0:f8:01:0e:8e:6c:43:32:66:99:a6:1a:5b:
                    63:a0:a3:fd:c2:00:9a:e2:17:14:6c:7e:64:4e:eb:
                    c9:90:c4:00:5a:97:22:f2:0f:3b:53:70:b4:66:1c:
                    35:06:6d:b4:7f:a5:33:c0:05:f5:ae:95:4f:af:d3:
                    42:01:26:70:16:7a:ae:a8:3b:c0:82:34:d1:ff:eb:
                    bd:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:E0:B2:D7:C6:B4:B8:0D:9E:82:66:E2:1C:05:1F:6C:7E:9C:6B:4E
            X509v3 Authority Key Identifier:
                keyid:1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137302e3235342e3133372e302f32342d3234203d3e203631353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:8d:5d:ff:19:28:db:80:62:9d:2a:ba:1c:dc:2d:31:8a:c7:
         16:cb:29:ba:86:b9:9d:62:ea:61:84:d5:3a:82:70:1a:08:22:
         fb:a6:8d:06:ff:73:dd:24:5e:c9:53:5d:ab:9b:7b:5d:8e:dc:
         77:b2:b9:f1:e7:1d:f6:9f:7b:9e:57:40:f2:b6:ef:3b:2e:2c:
         85:b5:85:30:88:0c:f6:b4:3c:8b:e1:64:26:c1:bb:da:f5:85:
         d6:1c:bc:96:d8:b2:5c:47:5a:1e:fa:1e:e1:6a:b8:ef:71:9e:
         b3:74:57:3b:73:7e:fb:b8:2c:41:96:6a:71:7e:39:64:a0:53:
         9f:88:67:90:21:ba:fe:21:ed:70:c6:6b:73:7f:62:f8:8d:b4:
         cd:21:22:fd:95:46:71:7b:65:f0:7e:b7:f8:01:4f:85:15:df:
         00:02:56:c7:d3:40:74:7b:20:3b:94:7f:f0:75:7e:99:2f:ca:
         9b:f9:e7:0d:20:d2:91:09:8a:8d:4f:3d:05:0c:c3:f9:0b:01:
         5a:88:6b:82:14:c6:30:5a:17:c8:98:98:97:95:bb:86:43:f3:
         41:5e:60:67:28:1c:0a:d1:fd:fb:cf:b0:7c:e1:ff:b0:13:13:
         77:7e:c6:51:46:9e:fe:9f:d5:f6:58:95:b8:51:bf:a3:ca:2b:
         08:6f:11:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:42:33 2025 by rpki-client