Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3233302e3130382e302f32342d3234203d3e203631353839.roa
File:                     34352e3233302e3130382e302f32342d3234203d3e203631353839.roa (raw, json)
Hash identifier:          BV2Fcz3AYgC0RmkBrC/e0ucnPWd4iCybsP1vL0ts2dk=
Subject key identifier:   97:47:21:DE:24:16:BE:03:50:E0:C5:78:91:88:34:81:97:DE:89:F0
Certificate issuer:       /CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
Certificate serial:       36373D1E4A027B20A9C4A893D43D1CCC5F4D930F
Authority key identifier: 1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3233302e3130382e302f32342d3234203d3e203631353839.roa
Signing time:             Tue 31 Dec 2024 18:13:42 +0000
ROA not before:           Tue 31 Dec 2024 18:08:42 +0000
ROA not after:            Tue 30 Dec 2025 18:13:42 +0000
asID:                     61589
IP address blocks:        45.230.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl
                          rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 06:04:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:37:3d:1e:4a:02:7b:20:a9:c4:a8:93:d4:3d:1c:cc:5f:4d:93:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
        Validity
            Not Before: Dec 31 18:08:42 2024 GMT
            Not After : Dec 30 18:13:42 2025 GMT
        Subject: CN=974721DE2416BE0350E0C5789188348197DE89F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:a1:25:4f:b8:08:6d:a1:60:c0:80:51:48:f8:
                    e0:3c:a0:1e:c2:b9:57:8b:03:33:43:6f:5a:bd:ca:
                    9f:bd:ea:90:30:c6:6d:46:b5:99:34:65:bf:a3:9d:
                    19:eb:d8:fb:24:a5:92:7b:49:18:68:dc:69:b9:18:
                    64:91:9e:c3:c0:48:90:00:ea:e9:93:76:c0:93:e1:
                    4f:64:43:6f:5e:a4:cf:cf:31:60:c4:66:34:fb:c0:
                    e4:4d:20:a3:de:1a:4f:e7:a5:28:0d:f8:85:a1:06:
                    b3:74:99:b4:d4:19:49:25:08:23:c7:93:41:97:8d:
                    b9:4a:4b:72:c3:1f:c4:9c:a0:bd:9e:65:77:fb:cf:
                    d1:ef:43:8b:bb:53:f9:72:f5:b4:03:64:6d:cf:78:
                    c9:2f:62:f2:f3:0c:15:76:5d:f5:3f:dd:d0:09:b2:
                    93:97:2a:08:83:6c:24:24:ef:54:11:90:0a:e0:45:
                    39:08:0c:5e:38:57:ff:84:67:46:25:5f:24:4d:5c:
                    14:78:88:ab:8b:96:9c:a7:95:4f:c2:80:b5:02:18:
                    fa:96:c9:2c:40:aa:71:4c:ea:c7:db:ad:dc:b2:0e:
                    d6:0c:23:4e:9f:1c:29:c1:05:72:f7:ac:db:79:74:
                    b4:68:aa:33:cb:c0:92:2c:95:e0:38:63:19:23:a4:
                    2e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:47:21:DE:24:16:BE:03:50:E0:C5:78:91:88:34:81:97:DE:89:F0
            X509v3 Authority Key Identifier:
                keyid:1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3233302e3130382e302f32342d3234203d3e203631353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:bb:96:17:02:25:5c:27:4f:49:16:f0:c1:44:bf:dd:67:81:
         89:f8:75:61:27:77:72:3b:cb:5d:88:e1:9c:6d:f6:83:23:40:
         85:ce:9b:1c:fe:60:3d:61:26:b3:a7:bf:2e:59:f9:24:08:cd:
         88:3c:eb:41:2e:a9:39:6d:a9:32:ca:f5:34:a6:96:19:b0:31:
         05:c9:ff:23:b1:42:f3:43:28:1e:58:44:f1:d3:cb:3a:2e:9d:
         fc:40:d2:d9:50:72:2d:f4:f2:fa:c1:84:2c:dc:77:1c:f0:53:
         5b:69:1a:74:bd:88:7c:f3:e9:61:18:3f:9d:c7:a0:6f:b5:8b:
         da:85:e2:6a:00:40:48:54:90:c0:ea:91:51:3f:d9:96:30:ed:
         7d:a6:9c:99:7d:35:54:7c:05:a4:9b:c5:13:06:0f:33:f3:b6:
         6e:b3:50:de:06:a1:94:13:ff:82:63:ad:76:5b:4b:63:92:d2:
         b2:fa:e6:c8:e4:e0:7f:4f:7a:93:2c:ea:60:3e:49:d1:16:59:
         ce:3a:c0:39:9c:f8:f0:f9:15:f9:1b:c4:63:ee:fc:f1:fe:ee:
         b2:bb:ae:f7:cd:72:24:a9:4d:0d:63:ec:ca:4f:2a:da:f5:ae:
         fa:94:60:d7:99:91:b8:20:ab:fa:31:d4:61:d4:27:02:07:b7:
         80:bb:9b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 13:36:18 2025 by rpki-client