Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a343866303a343030303a3a2f33342d3334203d3e203631353839.roa
File:                     323830343a343866303a343030303a3a2f33342d3334203d3e203631353839.roa (raw, json)
Hash identifier:          Kcclmo/6qpjDjMi8e5u1cqHlmvz4n+ODRHjOtEg1SY8=
Subject key identifier:   2F:92:2E:7B:13:04:77:74:76:CB:81:DC:67:CE:A6:EE:49:C6:3D:1F
Certificate issuer:       /CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
Certificate serial:       11A40FB0D5811FED9803835468C8C7AB13432B0C
Authority key identifier: 1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a343866303a343030303a3a2f33342d3334203d3e203631353839.roa
Signing time:             Tue 31 Dec 2024 18:12:43 +0000
ROA not before:           Tue 31 Dec 2024 18:07:43 +0000
ROA not after:            Tue 30 Dec 2025 18:12:43 +0000
asID:                     61589
IP address blocks:        2804:48f0:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl
                          rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Feb 2025 20:17:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:a4:0f:b0:d5:81:1f:ed:98:03:83:54:68:c8:c7:ab:13:43:2b:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
        Validity
            Not Before: Dec 31 18:07:43 2024 GMT
            Not After : Dec 30 18:12:43 2025 GMT
        Subject: CN=2F922E7B1304777476CB81DC67CEA6EE49C63D1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d2:e9:83:6f:ea:4b:5d:ae:b4:71:9a:e2:dd:
                    f7:d1:fe:c3:0a:99:c6:e3:f0:f4:74:b3:e1:0d:5c:
                    e8:47:bb:fe:1a:52:5a:68:16:ed:69:fc:e6:d8:33:
                    b7:2f:d0:f0:8a:dc:2e:35:fa:f1:45:a0:89:42:06:
                    5f:be:98:ef:f5:33:f9:18:c4:b3:4d:ba:77:2a:70:
                    6c:95:e4:29:25:f3:41:8a:c7:2b:af:19:d9:06:cd:
                    bb:9c:b2:73:64:55:b3:ae:61:f7:46:59:f4:38:b0:
                    88:0d:a4:39:ca:f3:5a:71:d4:17:27:52:68:22:a5:
                    c4:1f:c1:42:87:8a:ee:72:6c:12:ca:28:bc:c9:23:
                    da:11:c0:fd:67:cc:e7:78:4e:8f:eb:d5:54:b4:c9:
                    de:2a:dd:5d:76:7a:ed:5a:0e:6d:87:3f:9d:c1:8e:
                    eb:b7:52:26:0c:90:f0:d3:20:86:d0:a1:04:83:53:
                    41:64:e4:60:e4:e9:d8:a2:99:13:55:ef:5b:56:7d:
                    da:cf:f5:4e:42:5e:8b:63:3c:82:d6:13:5a:fc:e8:
                    58:4a:7f:2d:27:62:9b:d4:e1:b8:82:84:ce:37:9b:
                    1b:ae:57:bd:9c:a4:8e:1b:9a:78:96:b7:6b:a5:f5:
                    47:23:38:df:47:59:5c:b1:3d:a1:41:b5:05:cb:c8:
                    2c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:92:2E:7B:13:04:77:74:76:CB:81:DC:67:CE:A6:EE:49:C6:3D:1F
            X509v3 Authority Key Identifier:
                keyid:1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a343866303a343030303a3a2f33342d3334203d3e203631353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:48f0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         88:fa:86:39:5a:92:30:86:c9:b9:62:48:94:33:fc:ab:df:b4:
         50:2e:da:09:c4:ea:4b:5d:28:e7:4e:53:70:ae:5a:4d:ea:2c:
         d0:14:37:ad:1d:38:75:26:c9:e8:f3:b7:0e:9e:c9:b9:a4:e3:
         35:82:01:88:69:19:af:c2:00:bd:66:0c:90:9b:4f:49:64:16:
         6f:ef:9e:90:92:07:44:3a:ef:90:9a:a6:e7:53:4c:9a:df:c3:
         a5:e7:0f:65:81:ef:32:dd:b1:01:98:7e:73:4f:f2:85:07:c5:
         e2:6a:08:01:ae:19:44:4d:fd:a4:f7:f9:5a:f7:5b:52:8f:69:
         05:22:66:0d:72:76:bd:0f:e5:ee:82:c2:27:d6:e0:28:39:74:
         98:65:40:30:29:df:f9:c5:91:39:99:72:fa:68:70:b6:4d:4d:
         b0:22:65:e0:38:eb:04:3f:fa:1f:78:86:8a:43:c5:ad:28:cc:
         57:0b:34:c0:c3:b7:02:27:b6:c1:58:a6:b8:f2:7d:13:53:40:
         ff:ac:c9:64:36:b3:d4:45:31:a9:4f:c7:b1:c5:75:c6:20:e6:
         fa:a2:a5:a4:39:23:33:2d:46:39:90:45:98:ca:65:60:7a:33:
         aa:fd:c4:60:1f:54:91:ea:dd:d4:59:16:33:4b:9d:2f:ca:10:
         e3:81:12:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:38:22 2025 by rpki-client