Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a343866303a3a2f33342d3334203d3e203631353839.roa
File:                     323830343a343866303a3a2f33342d3334203d3e203631353839.roa (raw, json)
Hash identifier:          f/pS81HbB+wgt2JYWf+E3aQFb36WvChKVV4thccCzhk=
Subject key identifier:   00:DD:86:06:71:BB:D3:52:41:DF:0E:F6:34:AB:1F:94:C1:94:E5:5A
Certificate issuer:       /CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
Certificate serial:       4B245D525EE4244CCB85564030471471275D19CD
Authority key identifier: 1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a343866303a3a2f33342d3334203d3e203631353839.roa
Signing time:             Tue 31 Dec 2024 18:12:39 +0000
ROA not before:           Tue 31 Dec 2024 18:07:39 +0000
ROA not after:            Tue 30 Dec 2025 18:12:39 +0000
asID:                     61589
IP address blocks:        2804:48f0::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl
                          rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 22:55:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:24:5d:52:5e:e4:24:4c:cb:85:56:40:30:47:14:71:27:5d:19:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
        Validity
            Not Before: Dec 31 18:07:39 2024 GMT
            Not After : Dec 30 18:12:39 2025 GMT
        Subject: CN=00DD860671BBD35241DF0EF634AB1F94C194E55A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:28:95:f6:3a:85:8d:6d:46:18:64:e8:06:39:
                    75:f0:ed:c2:92:2b:47:66:bf:26:da:32:29:f6:87:
                    79:a2:93:3a:00:51:60:7f:43:b5:d0:d1:bc:5c:f8:
                    1b:93:7c:fd:65:e3:08:1a:36:a2:f9:dc:48:4b:ff:
                    76:4f:7b:db:93:17:dc:0a:98:05:c4:a2:a7:0c:c0:
                    f4:19:c4:38:31:aa:8d:52:41:23:3d:8d:b7:f2:5b:
                    5d:66:4d:f5:ea:33:53:06:c3:c9:1c:9a:19:89:af:
                    20:dd:d9:21:d9:81:06:b6:2a:ef:bf:a3:43:1c:7e:
                    e2:19:42:12:4d:84:c7:5d:13:5a:11:ac:aa:6b:e3:
                    09:77:40:0b:3d:11:6e:14:1e:da:d7:17:39:15:e9:
                    94:b4:c3:21:e8:cd:98:cd:0f:0b:13:f5:62:1e:fe:
                    0b:c2:c8:8f:e8:f0:b8:d2:a2:28:69:69:25:b5:f4:
                    5f:17:c3:16:e8:fa:96:c6:71:50:65:78:ff:a5:b1:
                    13:91:1e:03:d1:2c:cb:c5:9f:56:fe:0e:9e:93:ae:
                    29:6e:27:97:da:e3:ea:31:ef:90:06:5a:df:9d:b1:
                    62:51:1d:62:14:3c:b0:02:bf:17:99:7f:93:a1:b1:
                    7c:ae:f6:e1:e1:f7:03:4a:22:58:4b:4a:88:f3:35:
                    62:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:DD:86:06:71:BB:D3:52:41:DF:0E:F6:34:AB:1F:94:C1:94:E5:5A
            X509v3 Authority Key Identifier:
                keyid:1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a343866303a3a2f33342d3334203d3e203631353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:48f0::/34

    Signature Algorithm: sha256WithRSAEncryption
         0e:37:ec:76:05:9b:20:81:32:73:e2:0d:a9:22:a6:ae:28:59:
         37:6b:d2:36:8c:e7:66:c4:14:fe:6d:3c:5d:c4:39:ac:b7:d1:
         7c:85:4d:28:49:9f:c6:0d:91:4f:c1:f1:35:e1:5f:5e:03:4c:
         7a:47:17:0d:2f:b6:8c:bb:21:01:2c:59:49:86:01:f5:27:b5:
         aa:7c:0d:73:28:1a:ff:70:71:f5:e9:b1:08:4b:f7:2d:bd:b5:
         34:f3:2c:0b:5c:43:2b:9a:f9:7a:70:74:2a:eb:79:61:f0:c5:
         3d:d2:60:cb:5c:e3:b5:0b:d6:f8:f7:fd:3f:1b:ac:99:92:c8:
         4f:b4:01:fc:07:65:9f:98:18:05:93:ef:61:08:e7:46:91:78:
         c4:21:d6:5f:0a:e0:10:6a:f3:95:fc:86:d4:b6:bd:35:b9:f5:
         87:8e:a0:5f:4a:f6:45:e9:1d:68:05:27:bd:6c:5f:b5:a5:a7:
         79:bf:18:a2:66:25:e9:90:fc:5c:25:9a:b8:fa:23:b6:7d:2b:
         17:d2:37:11:69:52:55:df:43:2d:66:be:24:d9:9b:a6:35:66:
         a1:94:ab:39:21:3e:c2:1c:7c:82:47:d2:24:e8:ec:e5:69:71:
         81:10:4d:22:84:cc:e1:0c:73:7f:60:e2:59:51:01:54:dc:76:
         c3:e7:7d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:47:26 2025 by rpki-client