Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137392e34382e3134382e302f32332d3233203d3e203631353837.roa
File:                     3137392e34382e3134382e302f32332d3233203d3e203631353837.roa (raw, json)
Hash identifier:          7v612oW/+MEEXYxTXDWv8iwp8vdHjPq1yUlSYwUlTnM=
Subject key identifier:   65:37:33:D1:A0:D2:C3:3B:78:2C:E1:04:61:36:77:9B:84:AF:CB:2A
Certificate issuer:       /CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
Certificate serial:       6EBA0B1C71C891974739748EC5B5F030E33CF423
Authority key identifier: 1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137392e34382e3134382e302f32332d3233203d3e203631353837.roa
Signing time:             Tue 31 Dec 2024 18:12:17 +0000
ROA not before:           Tue 31 Dec 2024 18:07:17 +0000
ROA not after:            Tue 30 Dec 2025 18:12:17 +0000
asID:                     61587
IP address blocks:        179.48.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl
                          rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 06:04:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ba:0b:1c:71:c8:91:97:47:39:74:8e:c5:b5:f0:30:e3:3c:f4:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
        Validity
            Not Before: Dec 31 18:07:17 2024 GMT
            Not After : Dec 30 18:12:17 2025 GMT
        Subject: CN=653733D1A0D2C33B782CE1046136779B84AFCB2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f2:cb:3e:a2:25:78:3c:2a:9d:59:cf:36:25:
                    aa:6f:9d:60:ba:3c:7c:28:a2:98:58:f0:62:4d:dd:
                    4c:e6:e9:d3:5e:fb:0a:2e:74:b8:03:d8:39:af:ef:
                    62:cb:3b:e3:98:e2:bf:15:aa:14:80:17:39:0c:7c:
                    08:2c:d3:af:eb:9a:53:f9:05:c5:c3:c5:9d:78:59:
                    0a:26:7c:db:0f:dc:c9:0a:f4:d5:c9:aa:08:77:8d:
                    7d:d1:97:07:c8:c2:1f:64:cd:e8:12:a6:17:42:1c:
                    77:c3:a0:21:4f:b9:58:9e:2b:cb:6d:69:66:05:6c:
                    82:bd:6d:84:12:f6:aa:de:f0:cf:fe:5e:d9:b1:cf:
                    b4:70:bb:84:0b:fa:cc:e0:00:fd:27:2b:6e:84:bd:
                    e0:d1:44:51:3d:86:93:58:a4:73:01:5c:51:ed:27:
                    6c:43:2a:9b:6f:02:5d:44:dc:1b:a2:8c:08:f5:7a:
                    e3:27:ca:ee:29:ae:74:fa:3c:6a:25:26:30:fb:5e:
                    52:b8:42:62:8f:02:c9:81:92:12:d7:87:28:e6:d7:
                    eb:7b:d7:64:4c:1c:b3:f3:67:af:29:c0:11:d8:0d:
                    f7:86:c1:c6:6d:35:b1:87:16:99:62:20:13:35:57:
                    f7:71:1d:ba:2e:72:76:61:9e:1b:78:a7:b1:25:bf:
                    0f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:37:33:D1:A0:D2:C3:3B:78:2C:E1:04:61:36:77:9B:84:AF:CB:2A
            X509v3 Authority Key Identifier:
                keyid:1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137392e34382e3134382e302f32332d3233203d3e203631353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:4b:e9:06:1c:23:f5:4b:c6:3c:3d:19:9d:b7:eb:a2:80:c8:
         70:6f:4d:3e:fb:80:46:c6:c7:d7:b4:f2:79:d8:e9:29:c0:6d:
         da:47:09:c1:dd:92:23:0e:74:a7:52:20:63:91:34:c4:d4:e7:
         08:64:da:97:4e:2d:52:b3:a6:a1:87:66:cb:3a:d6:86:c4:ac:
         46:18:25:79:b3:52:56:a0:8b:f5:9e:a1:54:dc:a8:73:16:94:
         87:2a:5b:ab:3f:4c:1b:63:84:ca:11:b3:72:d7:a4:8a:1a:fc:
         35:60:36:73:75:90:41:e3:95:08:29:18:37:db:c7:25:ac:bf:
         c7:5c:e7:a0:94:ca:9f:87:eb:b6:08:30:12:e7:02:2c:47:79:
         49:c6:c1:1e:ec:79:bf:ba:90:10:f1:7f:16:b9:c3:6a:b0:2e:
         f3:9b:fd:4d:d6:e0:b2:46:ea:a3:b6:42:a3:5a:cc:9f:9b:fc:
         0c:9f:27:ec:cf:90:09:50:75:9f:0e:89:7c:ce:7d:5a:24:f8:
         2d:39:8f:4f:aa:3b:31:18:ad:65:15:68:e9:a0:1d:f1:5c:55:
         64:79:e1:8c:8d:9a:58:3b:dc:5e:dc:72:8f:7e:00:86:14:77:
         aa:f2:fe:e5:26:b0:e9:39:c3:39:f5:4e:4e:2b:1a:94:e0:78:
         a7:f1:8c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 13:27:52 2025 by rpki-client