Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137392e34382e3134382e302f32342d3234203d3e203631353837.roa
File:                     3137392e34382e3134382e302f32342d3234203d3e203631353837.roa (raw, json)
Hash identifier:          3FvcIqEm43wJ8qexO+U7sSJj5ZMe0z+HnwXSBCRKG1c=
Subject key identifier:   08:20:4A:E4:9F:C1:CC:A7:E4:97:B9:65:18:9B:80:FE:78:18:F0:CD
Certificate issuer:       /CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
Certificate serial:       2D6AF4FBBBC38C65F82955EEF13E23EF5503B452
Authority key identifier: 1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137392e34382e3134382e302f32342d3234203d3e203631353837.roa
Signing time:             Tue 31 Dec 2024 18:12:20 +0000
ROA not before:           Tue 31 Dec 2024 18:07:20 +0000
ROA not after:            Tue 30 Dec 2025 18:12:20 +0000
asID:                     61587
IP address blocks:        179.48.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl
                          rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 24 Apr 2025 09:56:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:6a:f4:fb:bb:c3:8c:65:f8:29:55:ee:f1:3e:23:ef:55:03:b4:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
        Validity
            Not Before: Dec 31 18:07:20 2024 GMT
            Not After : Dec 30 18:12:20 2025 GMT
        Subject: CN=08204AE49FC1CCA7E497B965189B80FE7818F0CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7e:8c:15:2b:40:55:26:2c:55:19:59:f5:56:
                    49:1b:b0:09:93:87:2d:63:aa:d0:a4:ad:df:ff:09:
                    e3:50:96:14:57:c7:01:37:09:20:ca:f6:14:2b:f8:
                    0a:53:d6:62:4a:49:3b:cb:91:2a:ef:9a:78:bb:1f:
                    9f:f6:b1:0c:70:ae:79:0b:f4:cf:ef:3a:11:74:c3:
                    b9:cd:01:f9:a6:56:62:5d:cd:72:d0:49:19:30:86:
                    84:d5:dd:ed:18:65:56:42:39:0e:69:f7:e7:cd:c0:
                    c1:48:36:56:a8:a5:c7:21:99:5c:8a:3d:81:c1:39:
                    ce:95:58:67:25:b5:2e:8c:a1:d4:1e:5a:e8:d4:19:
                    7c:f8:e5:60:ab:59:47:dd:1f:82:72:25:41:0a:dc:
                    a8:bc:87:28:7f:55:26:5b:28:ff:c8:53:7c:07:bf:
                    43:c3:04:4a:65:8a:1c:cc:f4:7e:ff:e2:72:06:b9:
                    d4:83:45:f1:76:a0:73:33:b6:46:91:5b:5c:16:a8:
                    d7:1e:4d:52:93:16:55:06:a1:8b:da:46:3a:6b:4e:
                    e4:ca:bf:b0:0c:a7:f4:a0:75:6b:04:2e:3d:d2:0f:
                    d2:1d:20:d4:74:05:32:5e:6b:64:20:88:eb:02:b6:
                    b7:7e:ad:82:f9:70:ed:ac:14:30:bf:80:79:b2:9b:
                    c7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:20:4A:E4:9F:C1:CC:A7:E4:97:B9:65:18:9B:80:FE:78:18:F0:CD
            X509v3 Authority Key Identifier:
                keyid:1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137392e34382e3134382e302f32342d3234203d3e203631353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:cd:c8:4b:e3:a2:eb:d0:8a:19:68:92:44:98:14:cf:4d:a9:
         81:2d:c9:af:64:e7:41:ed:c7:e4:64:b8:15:08:e7:65:6d:fb:
         42:a0:62:9c:7c:f0:b4:a9:f7:74:6c:f2:97:28:1c:37:ea:4d:
         3a:26:c9:a1:2f:f9:f1:7a:83:88:76:5c:df:00:b2:0b:d5:3b:
         54:c4:cb:a3:67:d5:69:ed:fc:7f:8d:4e:a9:fd:a9:de:d3:06:
         a7:8d:fe:83:14:f7:7a:3c:c2:e3:18:95:a1:52:ec:d8:3f:dd:
         d8:16:9f:f0:76:77:2a:00:3f:29:0a:78:f5:d1:30:97:eb:0d:
         74:1b:b4:b2:9f:57:3c:9f:d7:52:41:37:a3:bb:63:f6:db:eb:
         c2:d8:b2:0c:9d:86:85:5a:a4:61:65:1e:dc:08:72:ec:27:37:
         b4:90:fd:56:49:89:88:ee:64:51:dc:fa:43:a6:5e:61:8b:af:
         2f:f6:34:b9:31:8f:ed:8d:7b:3a:32:5b:11:0e:d4:b8:80:14:
         ab:08:d1:ff:5b:86:c0:21:a7:4c:1d:26:1d:82:1d:7b:b3:f4:
         37:1a:28:cb:aa:58:f7:a8:bf:b1:86:ad:da:b7:7b:a0:83:67:
         b7:19:2d:70:5e:d9:ad:a5:fa:d1:8b:9a:2d:9c:f6:0c:17:af:
         d5:1d:a9:8a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIULWr0+7vDjGX4KVXu8T4j71UDtFIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUYxMUU1NThGQzc1RDlEQTE1MDM5RUE1OEQ1QTE2NkE2
RjVFRjEwQjAeFw0yNDEyMzExODA3MjBaFw0yNTEyMzAxODEyMjBaMDMxMTAvBgNV
BAMTKDA4MjA0QUU0OUZDMUNDQTdFNDk3Qjk2NTE4OUI4MEZFNzgxOEYwQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkfowVK0BVJixVGVn1VkkbsAmT
hy1jqtCkrd//CeNQlhRXxwE3CSDK9hQr+ApT1mJKSTvLkSrvmni7H5/2sQxwrnkL
9M/vOhF0w7nNAfmmVmJdzXLQSRkwhoTV3e0YZVZCOQ5p9+fNwMFINlaopcchmVyK
PYHBOc6VWGcltS6ModQeWujUGXz45WCrWUfdH4JyJUEK3Ki8hyh/VSZbKP/IU3wH
v0PDBEplihzM9H7/4nIGudSDRfF2oHMztkaRW1wWqNceTVKTFlUGoYvaRjprTuTK
v7AMp/SgdWsELj3SD9IdINR0BTJea2QgiOsCtrd+rYL5cO2sFDC/gHmym8dBAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUCCBK5J/BzKfkl7llGJuA/ngY8M0wHwYDVR0j
BBgwFoAUHxHlWPx12doVA56ljVoWam9e8QswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjVtYXpYcXl3NFVjcGN3a1BkUWJQMVdqeWt3UDdraGpYRmQ5MXd6eExY
ZTYvMC8xRjExRTU1OEZDNzVEOURBMTUwMzlFQTU4RDVBMTY2QTZGNUVGMTBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGMTFFNTU4RkM3NUQ5REEx
NTAzOUVBNThENUExNjZBNkY1RUYxMEIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzI1bWF6WHF5dzRVY3Bjd2tQZFFiUDFXanlrd1A3a2hqWEZkOTF3enhMWGU2LzAv
MzEzNzM5MmUzNDM4MmUzMTM0MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMx
MzUzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAszCUMA0GCSqGSIb3DQEBCwUAA4IBAQBHzchL46Lr
0IoZaJJEmBTPTamBLcmvZOdB7cfkZLgVCOdlbftCoGKcfPC0qfd0bPKXKBw36k06
JsmhL/nxeoOIdlzfALIL1TtUxMujZ9Vp7fx/jU6p/ane0wanjf6DFPd6PMLjGJWh
UuzYP93YFp/wdncqAD8pCnj10TCX6w10G7Syn1c8n9dSQTeju2P22+vC2LIMnYaF
WqRhZR7cCHLsJze0kP1WSYmI7mRR3PpDpl5hi68v9jS5MY/tjXs6MlsRDtS4gBSr
CNH/W4bAIadMHSYdgh17s/Q3GijLqlj3qL+xhq3at3ugg2e3GS1wXtmtpfrRi5ot
nPYMF6/VHamK
-----END CERTIFICATE-----
Generated at Wed Apr 23 10:29:34 2025 by rpki-client