Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a343866303a373030303a3a2f34312d3431203d3e203631353839.roa
File:                     323830343a343866303a373030303a3a2f34312d3431203d3e203631353839.roa (raw, json)
Hash identifier:          5TDlL4O+omI9iBGhosOE9hK5qt1yFGCYzcFNALjU3yo=
Subject key identifier:   FA:88:9F:8D:FD:7D:07:6F:59:83:05:35:9B:59:89:90:62:8B:01:D4
Certificate issuer:       /CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
Certificate serial:       56C47B98D6497B3CCB72DA621789E1065BAC4623
Authority key identifier: 1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a343866303a373030303a3a2f34312d3431203d3e203631353839.roa
Signing time:             Mon 16 Jun 2025 12:55:28 +0000
ROA not before:           Mon 16 Jun 2025 12:50:28 +0000
ROA not after:            Mon 15 Jun 2026 12:55:28 +0000
asID:                     61589
IP address blocks:        2804:48f0:7000::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl
                          rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Jun 2025 05:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:c4:7b:98:d6:49:7b:3c:cb:72:da:62:17:89:e1:06:5b:ac:46:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
        Validity
            Not Before: Jun 16 12:50:28 2025 GMT
            Not After : Jun 15 12:55:28 2026 GMT
        Subject: CN=FA889F8DFD7D076F598305359B598990628B01D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f2:d2:82:27:b3:84:8a:5b:34:a0:46:0d:2e:
                    db:98:44:60:2b:f7:5a:ed:a2:2a:fc:64:9e:d7:d9:
                    ad:79:66:34:da:91:17:3c:f2:d0:17:72:1f:98:53:
                    22:e4:d2:e1:6b:5c:40:5c:7f:cc:44:60:f0:8c:24:
                    0f:fb:6c:f2:23:d7:a4:d9:0d:4b:29:f8:27:eb:91:
                    7f:7b:d9:63:5e:9d:8c:1d:7d:b8:c5:69:e9:c8:25:
                    d0:dc:87:ad:1f:45:dd:1a:40:6d:48:98:73:7f:1d:
                    4a:55:45:48:db:8c:b7:a5:9c:4f:68:80:34:d5:88:
                    07:ba:23:ec:95:2e:54:67:30:d9:eb:5f:b9:20:11:
                    e5:3a:b2:70:4e:fa:16:d4:e1:83:34:44:a5:91:ca:
                    76:8f:88:8c:31:94:9f:31:a1:ac:df:a7:4f:94:eb:
                    ff:f1:f3:cd:76:b9:ab:cd:ab:0f:02:a9:e6:a5:30:
                    e5:c5:2f:65:33:9c:3d:d4:1c:8b:e4:df:ee:66:10:
                    1b:2e:2b:aa:f0:41:6c:4f:9d:9b:47:58:48:5b:74:
                    ad:54:4d:e0:c8:91:8f:7f:56:bf:7a:05:55:5d:72:
                    f7:a9:78:02:84:20:68:76:1f:4a:1d:59:2a:43:bc:
                    8b:0a:00:d0:3d:8a:f9:3b:af:63:97:ac:0d:a7:1c:
                    ea:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:88:9F:8D:FD:7D:07:6F:59:83:05:35:9B:59:89:90:62:8B:01:D4
            X509v3 Authority Key Identifier:
                keyid:1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a343866303a373030303a3a2f34312d3431203d3e203631353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:48f0:7000::/41

    Signature Algorithm: sha256WithRSAEncryption
         46:28:bd:47:1a:5b:0a:4f:c8:21:78:c3:09:07:eb:d2:7c:79:
         ed:17:ba:d9:62:37:70:aa:38:25:d5:c5:57:dc:24:2e:1f:cb:
         70:9f:c4:38:48:3a:66:f8:9e:a2:2b:07:13:1d:64:f7:b0:62:
         4d:e4:63:e3:77:4a:d0:75:88:8f:ab:4c:1a:5d:10:f4:cc:4c:
         10:51:a7:fd:1c:88:03:7d:6b:1e:fd:5e:c2:16:88:dd:6b:e5:
         c3:2c:de:da:aa:b2:4c:4c:df:3d:e2:32:5c:6e:7c:a9:61:e9:
         94:f3:b3:2b:21:77:56:36:ac:3d:fb:24:ba:e3:76:9d:19:e3:
         9f:b7:d5:de:b3:cc:31:cf:81:d9:86:25:ca:34:e7:45:2f:86:
         73:82:24:28:6f:04:9d:c5:3c:66:17:63:20:0f:1f:8b:b6:f8:
         03:e3:8d:6c:aa:ab:3e:01:63:17:f7:c3:dc:97:75:2e:25:c8:
         fe:02:7d:12:3b:f3:e1:cf:5c:78:44:77:07:0f:29:d1:8f:21:
         16:f7:93:56:55:e1:7f:e7:80:8f:c0:8e:0e:cf:61:38:ad:65:
         59:99:da:f7:dc:e9:cb:49:0b:7f:e3:d8:48:6e:8c:27:f7:2a:
         7e:47:b7:2d:8f:7b:2d:f0:12:28:8c:27:ac:71:2d:53:8b:38:
         37:22:76:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 19:54:48 2025 by rpki-client