Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137392e34382e3134382e302f32322d3232203d3e203631353837.roa
File:                     3137392e34382e3134382e302f32322d3232203d3e203631353837.roa (raw, json)
Hash identifier:          HHit6qYKpk60rZNA70bHTwK2Fw3GV/SHQtrQTS30eCk=
Subject key identifier:   2D:0D:65:CF:C4:32:14:41:97:80:CF:9A:B8:C7:DE:2D:A1:2E:8F:B0
Certificate issuer:       /CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
Certificate serial:       7AD126B190E221528A05AF4B7C4BD13EBE1B4609
Authority key identifier: 1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137392e34382e3134382e302f32322d3232203d3e203631353837.roa
Signing time:             Tue 31 Dec 2024 18:12:13 +0000
ROA not before:           Tue 31 Dec 2024 18:07:13 +0000
ROA not after:            Tue 30 Dec 2025 18:12:13 +0000
asID:                     61587
IP address blocks:        179.48.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl
                          rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 16:16:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:d1:26:b1:90:e2:21:52:8a:05:af:4b:7c:4b:d1:3e:be:1b:46:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
        Validity
            Not Before: Dec 31 18:07:13 2024 GMT
            Not After : Dec 30 18:12:13 2025 GMT
        Subject: CN=2D0D65CFC43214419780CF9AB8C7DE2DA12E8FB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d0:a7:bf:76:b3:59:a5:ef:a8:62:b1:3d:07:
                    72:a7:2f:2e:02:0c:1e:54:37:ad:ab:35:47:cd:f0:
                    ac:c9:aa:95:e8:66:f9:f2:5f:02:dc:d4:d8:17:f0:
                    9b:da:03:87:ef:8c:5f:dc:ca:71:94:8e:8e:8c:90:
                    d9:8d:c1:ff:cb:1b:ca:1b:10:40:de:a4:a0:ec:2e:
                    db:57:23:1f:2c:39:52:e2:f1:8c:de:d4:1c:c2:6b:
                    89:60:33:66:06:70:a8:a4:af:74:23:25:5a:74:f7:
                    3e:5b:8e:53:d3:24:e8:4b:c6:9d:37:eb:aa:10:72:
                    40:9e:3a:f5:5d:61:38:9a:24:3e:56:21:c6:27:6a:
                    bf:1d:7f:33:28:96:18:63:6c:a8:aa:f9:83:dd:c1:
                    0a:e2:1b:b0:c9:a8:d8:5f:45:c5:12:17:07:25:58:
                    18:3e:3b:6b:59:2e:6a:6c:89:61:27:c9:fc:40:b5:
                    f9:63:88:6f:30:b0:8d:d9:67:f5:25:38:3e:23:0e:
                    cc:aa:c7:59:30:b6:a7:48:b3:cf:22:15:c3:d6:ef:
                    79:58:2d:8c:da:86:7b:7f:3f:b5:13:f5:25:75:57:
                    88:b0:3b:f3:e8:7e:c3:ac:26:54:a2:e7:b6:35:de:
                    83:bf:4d:b3:19:9b:3b:c6:6d:2d:da:1f:0f:f6:37:
                    4b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:0D:65:CF:C4:32:14:41:97:80:CF:9A:B8:C7:DE:2D:A1:2E:8F:B0
            X509v3 Authority Key Identifier:
                keyid:1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137392e34382e3134382e302f32322d3232203d3e203631353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:e1:00:c8:92:c7:2c:9a:e4:f2:46:98:e8:90:f2:da:07:44:
         08:bc:ef:72:cb:48:67:90:4e:2c:94:0f:be:5e:f4:a0:35:34:
         f7:56:36:db:90:08:b5:4f:71:1e:bc:92:db:18:dd:e6:2c:cc:
         5e:32:90:32:ac:d6:b2:31:3b:d1:22:9a:77:5d:75:a7:41:38:
         31:72:d3:2e:af:ea:2b:3e:b4:de:31:7c:76:56:ad:c4:b7:01:
         9c:4b:ec:a7:e2:20:f1:67:e6:d8:94:05:55:19:4c:4f:cc:67:
         b8:1f:3d:5b:c0:28:ee:59:4b:43:4a:2c:2d:ae:b4:72:87:29:
         3f:99:d7:e8:81:b8:05:c1:fc:e4:9a:88:e6:0b:7b:1a:b8:d6:
         a4:0e:f5:ad:47:8e:83:7a:d7:ba:24:70:80:11:80:cd:1b:1c:
         27:8d:b9:f8:f3:a5:9f:31:42:c3:c8:7d:75:fa:a3:a9:01:02:
         5e:df:4f:8e:16:ae:34:89:14:a2:9a:0c:39:52:4c:ac:94:a8:
         32:b3:aa:e5:77:f5:4b:c0:f1:b2:c2:af:d3:f6:51:a2:76:7e:
         49:ff:95:3d:47:97:c0:22:a8:53:44:63:dc:14:51:d2:8d:3c:
         64:de:cc:3f:16:be:13:9e:19:9a:9d:de:70:ae:38:f0:cc:56:
         0a:73:c4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:09:46 2025 by rpki-client