Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a343866303a3a2f33322d3332203d3e203631353839.roa
File:                     323830343a343866303a3a2f33322d3332203d3e203631353839.roa (raw, json)
Hash identifier:          ADes8PVRhaswe8QaXQGEWdyLOVFiISK8S8Pm1XMNAaw=
Subject key identifier:   72:EB:BA:E5:44:DB:86:CB:CE:E8:01:3C:5D:5D:C1:AF:08:57:8A:6A
Certificate issuer:       /CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
Certificate serial:       7F756260E1237F0C41EE890E522242D72107A3C2
Authority key identifier: 1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a343866303a3a2f33322d3332203d3e203631353839.roa
Signing time:             Tue 31 Dec 2024 18:12:33 +0000
ROA not before:           Tue 31 Dec 2024 18:07:33 +0000
ROA not after:            Tue 30 Dec 2025 18:12:33 +0000
asID:                     61589
IP address blocks:        2804:48f0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl
                          rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 06:04:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:75:62:60:e1:23:7f:0c:41:ee:89:0e:52:22:42:d7:21:07:a3:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
        Validity
            Not Before: Dec 31 18:07:33 2024 GMT
            Not After : Dec 30 18:12:33 2025 GMT
        Subject: CN=72EBBAE544DB86CBCEE8013C5D5DC1AF08578A6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:58:53:8c:11:67:c9:db:c5:06:d6:51:3e:5f:
                    d0:84:6e:81:8c:df:44:d3:f7:c6:ac:ba:5d:86:a1:
                    41:2c:b6:98:cf:9f:c8:f0:79:f2:5e:d7:54:79:78:
                    fe:56:45:4e:03:bd:42:ef:bc:f7:9c:53:69:78:05:
                    ad:93:c6:88:30:e7:7e:83:2f:60:bf:74:86:a5:54:
                    08:0d:3a:18:fa:54:55:f3:3e:14:90:92:b4:b5:1d:
                    91:5e:bb:d1:f3:08:a7:b2:35:c3:fb:97:49:ee:4a:
                    71:55:65:92:7b:26:6c:d1:5e:23:4e:3b:30:50:0c:
                    f5:3d:1c:ca:99:fd:6e:44:cd:ab:5e:65:f6:36:62:
                    8f:63:5b:7e:7e:b6:04:1e:ef:84:08:02:a5:9d:1d:
                    1e:d4:d8:a5:60:10:fa:c8:bb:c4:49:8d:30:0d:7d:
                    3e:db:8f:f3:0a:00:94:c7:ba:18:af:28:0e:93:f2:
                    58:db:9f:02:a4:53:e4:96:5a:8d:15:23:b3:de:5a:
                    c9:20:4d:55:66:f7:f6:dd:41:03:57:b9:b9:63:ab:
                    7b:c3:a0:d6:47:9a:09:2d:cc:ab:12:93:65:43:f0:
                    58:67:2e:a1:61:17:0f:36:b2:0e:27:c0:09:ee:2c:
                    de:c0:05:ab:2c:9d:17:82:40:a6:6d:e1:3c:ec:d4:
                    68:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:EB:BA:E5:44:DB:86:CB:CE:E8:01:3C:5D:5D:C1:AF:08:57:8A:6A
            X509v3 Authority Key Identifier:
                keyid:1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a343866303a3a2f33322d3332203d3e203631353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:48f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:e3:0b:b0:5b:38:7b:c5:0f:d3:ec:a3:e3:7b:6f:a2:a4:3d:
         dd:3b:43:ef:c0:ed:84:b1:89:3f:d5:90:cc:48:9f:26:e1:4e:
         26:17:a0:18:7b:b3:88:1b:81:31:68:b0:7b:bf:de:95:77:f7:
         2a:07:64:3b:19:4c:34:e8:5d:72:f1:dd:a8:62:c7:c2:ec:77:
         b4:0a:3a:88:26:c6:ea:ef:73:14:8a:a8:14:a7:db:b2:76:26:
         0a:66:1a:54:3e:40:0a:4b:f4:c0:b4:23:83:8a:ba:60:d5:9a:
         aa:cd:7e:3e:97:88:d0:07:f5:8c:bc:29:d9:51:27:01:0a:ce:
         7c:43:3c:fe:d0:10:f5:d8:ee:96:1d:79:a9:2a:f4:63:6b:28:
         af:54:38:7c:8d:47:de:62:7a:41:62:cb:83:f3:37:81:c6:ca:
         3a:6e:0c:2b:8a:fd:84:fd:1d:06:ba:4d:62:40:87:f4:89:37:
         b6:a4:11:5a:6d:c6:de:a4:b1:45:77:30:91:2f:e1:b9:74:1e:
         0d:44:20:47:12:b5:66:ad:3b:9c:67:e6:a8:29:94:f8:15:64:
         92:09:de:1b:e4:3a:cc:88:12:3a:dd:1c:ca:21:42:32:ed:cd:
         c7:92:cf:a8:0f:d0:17:7d:6a:f2:eb:27:45:4d:ac:3b:44:fd:
         2f:33:50:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 13:27:54 2025 by rpki-client