Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a343866303a373034303a3a2f34322d3432203d3e203631353839.roa
File:                     323830343a343866303a373034303a3a2f34322d3432203d3e203631353839.roa (raw, json)
Hash identifier:          tc4Jk0QQ+GMR8D4WtJya44IO/whP+2x/M8fGXQBtLXY=
Subject key identifier:   71:DF:EC:07:5B:3C:12:D4:FD:78:F2:E9:2F:55:69:BD:2D:2D:D0:F3
Certificate issuer:       /CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
Certificate serial:       1F30CE068F43094AA50E8E20C325532FC80CD95A
Authority key identifier: 1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a343866303a373034303a3a2f34322d3432203d3e203631353839.roa
Signing time:             Mon 16 Jun 2025 12:55:39 +0000
ROA not before:           Mon 16 Jun 2025 12:50:39 +0000
ROA not after:            Mon 15 Jun 2026 12:55:39 +0000
asID:                     61589
IP address blocks:        2804:48f0:7040::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl
                          rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Jun 2025 05:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:30:ce:06:8f:43:09:4a:a5:0e:8e:20:c3:25:53:2f:c8:0c:d9:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
        Validity
            Not Before: Jun 16 12:50:39 2025 GMT
            Not After : Jun 15 12:55:39 2026 GMT
        Subject: CN=71DFEC075B3C12D4FD78F2E92F5569BD2D2DD0F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:35:4d:5a:b0:c4:9b:09:2a:b6:54:1d:bc:a2:
                    02:3e:ab:6a:8f:7c:0b:42:4d:93:6b:67:b0:89:c0:
                    0f:95:96:cd:f9:48:64:d0:99:ed:7e:44:e7:0b:a3:
                    25:d2:bd:85:9f:18:80:a9:c5:64:ae:76:bb:cc:5c:
                    6a:cc:35:44:f0:bc:50:2e:1b:59:20:cf:64:29:58:
                    d1:52:d8:08:d0:76:dc:bc:ff:87:42:ed:ae:20:f7:
                    10:84:84:9c:2e:ca:ea:86:30:de:aa:44:23:94:d7:
                    78:75:92:7f:1f:e2:97:17:88:f3:2a:06:b6:9c:e4:
                    84:27:51:57:86:64:66:11:51:7e:98:db:6f:2c:e5:
                    2e:2e:fa:f6:f0:de:6b:8a:ad:b8:6c:d9:78:6e:cf:
                    3a:b5:86:ac:ad:3a:48:78:21:2d:49:0c:da:e3:16:
                    a8:a2:e3:4c:92:27:44:3f:2d:a9:73:0a:ab:b0:78:
                    82:80:78:ae:ce:2b:cb:90:37:df:2f:ad:23:d0:e2:
                    ad:4c:48:bb:59:12:b7:f3:d8:de:82:22:b6:30:33:
                    ee:c6:f4:c7:61:d2:62:6c:42:07:8a:8d:e5:3f:ff:
                    74:47:f0:ce:b8:87:23:8c:89:3e:9b:5a:9b:08:64:
                    81:6f:e3:aa:24:05:c3:ad:01:d0:e3:ef:40:86:6b:
                    5d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:DF:EC:07:5B:3C:12:D4:FD:78:F2:E9:2F:55:69:BD:2D:2D:D0:F3
            X509v3 Authority Key Identifier:
                keyid:1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a343866303a373034303a3a2f34322d3432203d3e203631353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:48f0:7040::/42

    Signature Algorithm: sha256WithRSAEncryption
         6c:97:46:cb:a7:f8:54:4d:85:10:98:f0:86:4c:76:18:22:aa:
         da:bc:26:43:d7:e1:bb:52:13:68:b4:f3:8a:e5:7f:58:a7:2c:
         a0:da:52:6b:4a:57:ad:6e:4c:e9:dd:e3:9b:40:7e:42:89:5b:
         71:0d:b9:91:92:99:28:de:3f:d0:fa:54:40:d9:09:bb:5a:8b:
         4c:9f:68:af:c9:2a:7f:d0:5c:10:18:21:91:e4:1d:4d:85:b5:
         42:16:dc:c1:54:d4:3e:26:66:4e:b9:11:b7:f4:bf:eb:9d:26:
         14:ab:44:f4:61:bd:34:16:ce:7b:c7:73:9c:a0:e5:57:4f:2f:
         e2:e3:fc:3c:f1:4b:c4:76:2e:29:ed:41:77:f4:d2:86:b4:8b:
         df:e2:ea:2b:c8:2a:d4:e0:6a:6c:ee:4a:44:48:c4:c8:38:90:
         30:8b:b5:49:e9:16:37:6a:79:c7:af:77:91:f4:80:20:cd:08:
         65:c6:99:94:e6:11:89:53:e3:2b:17:c3:eb:1e:79:46:a7:ef:
         3e:b4:56:30:f8:47:48:c4:9d:7e:fe:a1:b9:6b:e2:eb:e3:ce:
         08:d7:ce:67:af:0f:f2:2f:95:77:9f:6b:7c:55:a5:52:dd:76:
         88:ba:06:96:dd:ef:c8:25:1b:ac:5b:cf:f5:68:6e:1d:e5:b2:
         ce:10:63:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 22:29:04 2025 by rpki-client