Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a343866303a383030303a3a2f33342d3334203d3e203631353839.roa
File:                     323830343a343866303a383030303a3a2f33342d3334203d3e203631353839.roa (raw, json)
Hash identifier:          eUVBXuT+ObdrtGsDssRRAD+TBe410dtNpEqahpmtp6g=
Subject key identifier:   EC:B0:0A:52:CF:86:4D:74:5C:8C:68:23:91:DE:3B:EA:45:EE:0D:0D
Certificate issuer:       /CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
Certificate serial:       20AA0E72497A2FBE1717D6C85CFD4315A327B353
Authority key identifier: 1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a343866303a383030303a3a2f33342d3334203d3e203631353839.roa
Signing time:             Tue 31 Dec 2024 18:13:11 +0000
ROA not before:           Tue 31 Dec 2024 18:08:11 +0000
ROA not after:            Tue 30 Dec 2025 18:13:11 +0000
asID:                     61589
IP address blocks:        2804:48f0:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl
                          rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 May 2025 18:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:aa:0e:72:49:7a:2f:be:17:17:d6:c8:5c:fd:43:15:a3:27:b3:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
        Validity
            Not Before: Dec 31 18:08:11 2024 GMT
            Not After : Dec 30 18:13:11 2025 GMT
        Subject: CN=ECB00A52CF864D745C8C682391DE3BEA45EE0D0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f8:91:d1:1f:0e:f4:d9:cb:4f:b1:a2:e6:6f:
                    8e:36:69:2d:d6:92:3d:8f:6a:b0:3b:e6:5d:36:a3:
                    9b:1a:0e:95:9a:cd:93:5a:46:cc:12:3e:9a:b2:c8:
                    da:b7:1c:c1:37:5e:2b:53:a5:28:28:48:da:11:a8:
                    03:12:1b:e9:07:8f:a7:5a:00:9c:c7:3a:7d:03:d1:
                    8f:2c:2c:10:fe:26:c8:94:3f:bf:6e:a9:71:16:be:
                    18:10:47:2e:99:ca:b3:9c:e3:13:17:87:4b:a1:e4:
                    3d:17:fd:7a:cc:22:90:aa:8c:dd:37:e4:23:5c:8b:
                    bc:ea:98:25:81:31:21:80:ca:75:34:25:d5:01:a7:
                    3b:08:63:79:45:e2:28:0e:96:42:3f:12:68:07:fc:
                    06:70:02:88:48:f7:90:73:23:88:0e:b9:91:3e:46:
                    f5:a8:b4:9e:7c:6d:99:fd:86:2f:99:e0:4c:e3:30:
                    26:b4:48:42:9d:05:a3:f6:dd:db:87:84:43:c0:a8:
                    07:83:3a:a7:5b:a2:5f:03:05:7b:ac:57:4a:68:9e:
                    f9:de:bc:12:8e:36:5e:02:05:e5:c4:5c:25:9e:92:
                    2f:b7:54:b6:21:d0:51:3c:9c:fd:fd:22:9e:09:60:
                    50:91:fe:25:48:14:dc:62:82:ba:81:dd:ca:ca:04:
                    b2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:B0:0A:52:CF:86:4D:74:5C:8C:68:23:91:DE:3B:EA:45:EE:0D:0D
            X509v3 Authority Key Identifier:
                keyid:1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a343866303a383030303a3a2f33342d3334203d3e203631353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:48f0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         28:05:57:de:51:b6:75:05:cc:34:98:ef:cc:e6:d3:98:9b:e7:
         59:a5:73:78:a7:c6:a4:c7:5e:7f:31:83:61:2a:57:91:ad:10:
         00:91:71:85:85:05:60:b9:17:87:66:a9:ca:db:7a:c1:18:7e:
         dc:b1:a0:72:7a:4e:18:9a:32:cf:63:7d:ac:66:26:82:61:53:
         f9:f1:e2:64:23:11:16:3f:45:c8:38:33:aa:e2:0e:4c:a0:6c:
         63:26:52:e0:4a:67:ee:9b:c9:bc:fd:fd:fd:bf:6e:2f:5c:f4:
         be:0d:1a:6b:0c:be:6c:bf:fa:c2:fa:0b:88:a4:9d:c9:ac:e7:
         36:6f:e5:59:41:f7:66:f0:3e:8d:fc:6c:63:7b:ec:da:4c:8f:
         67:75:07:3a:81:30:fa:28:83:da:a4:ab:f9:c2:82:e5:0d:cf:
         0c:14:36:bf:0c:e7:32:96:bf:1d:76:02:2d:5b:e6:f8:b5:08:
         71:58:22:47:51:23:0a:a4:ef:cb:ef:d4:37:a5:26:f4:66:00:
         03:75:59:1d:95:4e:fa:b7:bd:69:d5:d4:b4:00:28:e4:f8:af:
         df:4a:f1:cc:66:15:11:b5:63:0a:95:7d:98:f5:88:96:8d:ca:
         94:3f:74:05:ed:c2:9b:c3:08:31:e1:b4:2b:2f:b6:79:25:79:
         32:e1:e5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 23:22:33 2025 by rpki-client