Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a343866303a633030303a3a2f33342d3334203d3e203631353839.roa
File:                     323830343a343866303a633030303a3a2f33342d3334203d3e203631353839.roa (raw, json)
Hash identifier:          +Jn4+SAJnBbbpdcwqvVIG1tLaOOkBO4Lh+8bgOXbqOY=
Subject key identifier:   15:86:2B:FD:0C:0F:C8:B9:CF:61:71:5C:36:0D:1B:2D:21:5E:FB:70
Certificate issuer:       /CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
Certificate serial:       C787B97C462DB5C98CFEEA91ECF40ADAB1686D
Authority key identifier: 1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a343866303a633030303a3a2f33342d3334203d3e203631353839.roa
Signing time:             Tue 31 Dec 2024 18:13:17 +0000
ROA not before:           Tue 31 Dec 2024 18:08:17 +0000
ROA not after:            Tue 30 Dec 2025 18:13:17 +0000
asID:                     61589
IP address blocks:        2804:48f0:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl
                          rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 06 May 2025 13:34:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            c7:87:b9:7c:46:2d:b5:c9:8c:fe:ea:91:ec:f4:0a:da:b1:68:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
        Validity
            Not Before: Dec 31 18:08:17 2024 GMT
            Not After : Dec 30 18:13:17 2025 GMT
        Subject: CN=15862BFD0C0FC8B9CF61715C360D1B2D215EFB70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a2:69:ff:c7:76:d4:6c:25:9c:a0:ba:4a:c5:
                    3f:a1:b3:80:7d:33:f4:bb:50:c7:b4:9d:de:89:5f:
                    68:c3:69:16:c7:0d:18:ee:f5:32:ec:88:8b:69:7e:
                    02:75:ba:8b:5a:98:03:2d:59:66:c9:2d:42:e5:aa:
                    9f:eb:bb:14:fd:91:ba:7b:a5:16:12:d6:98:fd:16:
                    b1:1a:9c:be:0b:d7:28:01:58:b5:05:52:56:5f:08:
                    50:ea:ca:7d:5d:3e:b0:2b:4b:05:65:c6:87:f3:5d:
                    82:fc:5d:65:53:17:49:ed:f6:f7:2d:ba:bb:ee:67:
                    b2:bc:09:b1:f7:9c:5c:3b:6f:b0:94:bf:b1:da:0c:
                    bd:1e:10:25:c9:62:cf:70:21:ec:d0:c8:a8:6a:0f:
                    db:f8:02:37:a2:58:1e:95:1c:d4:9c:8b:cb:b8:ad:
                    7e:4b:93:4f:ab:6f:88:49:07:13:77:1d:5b:c5:77:
                    8b:79:04:39:e8:e5:be:0f:b6:18:7f:e7:12:63:40:
                    ca:97:53:3d:1c:b0:a4:e4:5b:e9:5e:ec:af:68:1d:
                    d8:c2:be:fc:81:74:45:26:63:79:33:ab:f2:a1:18:
                    61:2d:94:c5:8d:cb:a3:d0:d9:c8:c2:3b:fc:0e:fd:
                    21:6f:89:b2:4d:ab:da:d7:e5:bf:05:2d:16:b7:93:
                    34:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:86:2B:FD:0C:0F:C8:B9:CF:61:71:5C:36:0D:1B:2D:21:5E:FB:70
            X509v3 Authority Key Identifier:
                keyid:1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a343866303a633030303a3a2f33342d3334203d3e203631353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:48f0:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         77:f3:cb:c5:36:c7:d6:a0:8e:6e:81:05:5b:78:cf:0d:c1:e4:
         1a:3b:97:6f:5d:37:a9:ed:c5:fe:59:4f:d0:3d:dc:1a:2e:7e:
         b8:2a:68:70:45:20:18:76:d0:cf:c4:87:0a:d1:27:c6:e7:17:
         07:45:e0:c5:9f:05:6b:c7:9b:b3:a1:bb:92:c0:1d:f6:82:bc:
         6e:dc:5c:88:26:38:e1:d1:f0:32:cf:74:39:6b:d4:57:63:67:
         f6:9e:bd:7b:7e:e5:70:48:4b:de:ce:5a:42:01:8f:7b:05:4d:
         50:74:02:28:da:4b:1c:07:4e:fd:58:25:53:86:b6:2c:30:41:
         3c:36:99:bf:d1:98:a1:4f:09:03:96:8d:f9:fb:7d:8e:66:2e:
         e7:a5:cb:4a:43:62:14:6d:60:30:52:a0:21:3b:c9:48:04:90:
         e4:8a:67:f7:a0:e5:dc:07:a1:db:59:3e:e7:c8:9d:a6:ee:80:
         87:66:f7:fc:b7:23:a7:da:88:ab:15:a2:bc:82:16:fb:bc:42:
         9d:8b:59:12:74:4b:4b:4a:d9:1f:55:4a:5c:26:ef:ea:89:41:
         b3:65:0b:7a:a0:22:2b:c8:57:fc:ea:20:35:b7:fe:71:a8:6e:
         10:96:21:bd:fa:6c:59:f1:e4:bc:50:1f:75:bf:89:92:81:5d:
         7a:5e:17:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 23:13:36 2025 by rpki-client