Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137392e34382e3135302e302f32332d3233203d3e203631353837.roa
File:                     3137392e34382e3135302e302f32332d3233203d3e203631353837.roa (raw, json)
Hash identifier:          M9Z+v4jToKTqoCa8p6ho4qtrVTCJsRpBqo3TbhIivRs=
Subject key identifier:   2C:97:8D:B8:B7:9C:29:C5:1A:05:C3:A0:B6:2C:79:68:C7:D5:5A:94
Certificate issuer:       /CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
Certificate serial:       7AADA527E81ECE9024BB4CD6334A2551E8B2C57A
Authority key identifier: 1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137392e34382e3135302e302f32332d3233203d3e203631353837.roa
Signing time:             Tue 31 Dec 2024 18:12:24 +0000
ROA not before:           Tue 31 Dec 2024 18:07:24 +0000
ROA not after:            Tue 30 Dec 2025 18:12:24 +0000
asID:                     61587
IP address blocks:        179.48.150.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl
                          rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 16:54:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ad:a5:27:e8:1e:ce:90:24:bb:4c:d6:33:4a:25:51:e8:b2:c5:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
        Validity
            Not Before: Dec 31 18:07:24 2024 GMT
            Not After : Dec 30 18:12:24 2025 GMT
        Subject: CN=2C978DB8B79C29C51A05C3A0B62C7968C7D55A94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1c:d2:5f:8b:f8:25:a7:43:33:9b:3c:46:cf:
                    15:e4:d2:69:6e:ad:d0:b9:b9:54:2d:45:f9:f3:bc:
                    f7:15:d3:bb:76:53:0b:e0:1a:00:32:34:21:0e:1b:
                    c7:c2:8d:40:c0:a3:74:2a:e9:7a:a2:81:ee:8e:c9:
                    44:cc:96:4a:00:8c:7a:4b:a8:00:7b:c8:66:31:e3:
                    69:16:7c:81:1d:2e:b8:87:ee:3a:35:e8:97:75:ae:
                    93:1d:da:2d:24:64:28:19:22:cd:41:3b:75:3a:03:
                    3f:7d:dc:1c:63:9c:85:dc:aa:db:97:c7:88:8f:1d:
                    3a:9b:dc:c1:3a:29:c6:c4:ac:b2:9a:e6:23:27:4c:
                    51:c9:ce:ef:f0:6b:8d:a5:0a:4f:c8:46:ce:51:d8:
                    25:3c:d6:1e:06:5b:e2:d8:e3:98:7f:3b:5f:fd:91:
                    9b:bb:ea:ca:e3:23:27:d3:0d:55:8b:3b:b3:59:f8:
                    08:51:ed:49:9e:d0:0f:d6:67:52:45:13:d8:8c:57:
                    f2:69:d5:43:a3:cc:28:f9:1f:1a:e3:68:02:33:a2:
                    5c:49:69:40:04:9f:99:82:9d:9e:c5:e3:c5:6a:83:
                    d4:6b:f8:78:b6:ae:f9:f7:9e:5d:15:b0:33:60:93:
                    96:7d:78:32:a1:61:f8:c8:70:69:88:7c:91:97:0d:
                    5d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:97:8D:B8:B7:9C:29:C5:1A:05:C3:A0:B6:2C:79:68:C7:D5:5A:94
            X509v3 Authority Key Identifier:
                keyid:1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137392e34382e3135302e302f32332d3233203d3e203631353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:52:74:26:96:fd:36:64:a2:f5:61:69:e5:e8:bb:06:56:c6:
         b6:61:08:07:a1:b7:5e:48:27:d2:7d:f0:54:8c:5c:d1:b5:77:
         13:10:0e:87:86:ec:cc:c5:5a:99:c2:3a:c6:eb:5b:9f:1c:ae:
         f1:a6:1a:a1:5b:71:2d:ec:a8:cb:0e:cd:2d:7b:90:93:ad:60:
         29:ec:96:cc:68:af:c3:2d:18:04:98:5f:27:9a:2d:e3:2e:4f:
         d7:65:34:eb:58:a3:39:e4:b1:b1:67:c0:ec:7a:6d:6d:1f:bf:
         99:7e:2d:0e:e3:95:31:09:4d:1b:c4:75:2a:8f:e7:fa:b3:c8:
         9d:96:8d:2c:41:97:fd:27:0e:04:0f:b3:1a:9b:0a:17:6a:be:
         5c:c6:9c:c3:6e:07:e6:f8:85:bb:1f:b2:2e:c1:3a:da:60:5f:
         1c:01:83:d5:1c:5e:cf:e1:e1:a3:eb:63:80:a9:00:a0:95:f3:
         ea:e4:d0:1e:11:bc:a2:d1:a1:d1:60:4c:8f:57:06:f6:11:ac:
         c9:f8:db:87:a1:ba:0f:20:c9:a3:48:b6:69:94:d8:ea:bf:b1:
         64:4a:43:e1:a7:31:bb:3a:85:d8:0c:c1:dd:7c:b1:a3:b4:b2:
         87:b7:91:89:1e:03:e6:b1:7c:05:f7:d5:45:f1:16:6d:04:63:
         10:b1:79:3a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUeq2lJ+gezpAku0zWM0olUeiyxXowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUYxMUU1NThGQzc1RDlEQTE1MDM5RUE1OEQ1QTE2NkE2
RjVFRjEwQjAeFw0yNDEyMzExODA3MjRaFw0yNTEyMzAxODEyMjRaMDMxMTAvBgNV
BAMTKDJDOTc4REI4Qjc5QzI5QzUxQTA1QzNBMEI2MkM3OTY4QzdENTVBOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyHNJfi/glp0MzmzxGzxXk0mlu
rdC5uVQtRfnzvPcV07t2UwvgGgAyNCEOG8fCjUDAo3Qq6Xqige6OyUTMlkoAjHpL
qAB7yGYx42kWfIEdLriH7jo16Jd1rpMd2i0kZCgZIs1BO3U6Az993BxjnIXcqtuX
x4iPHTqb3ME6KcbErLKa5iMnTFHJzu/wa42lCk/IRs5R2CU81h4GW+LY45h/O1/9
kZu76srjIyfTDVWLO7NZ+AhR7Ume0A/WZ1JFE9iMV/Jp1UOjzCj5HxrjaAIzolxJ
aUAEn5mCnZ7F48Vqg9Rr+Hi2rvn3nl0VsDNgk5Z9eDKhYfjIcGmIfJGXDV3vAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQULJeNuLecKcUaBcOgtix5aMfVWpQwHwYDVR0j
BBgwFoAUHxHlWPx12doVA56ljVoWam9e8QswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjVtYXpYcXl3NFVjcGN3a1BkUWJQMVdqeWt3UDdraGpYRmQ5MXd6eExY
ZTYvMC8xRjExRTU1OEZDNzVEOURBMTUwMzlFQTU4RDVBMTY2QTZGNUVGMTBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGMTFFNTU4RkM3NUQ5REEx
NTAzOUVBNThENUExNjZBNkY1RUYxMEIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzI1bWF6WHF5dzRVY3Bjd2tQZFFiUDFXanlrd1A3a2hqWEZkOTF3enhMWGU2LzAv
MzEzNzM5MmUzNDM4MmUzMTM1MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNjMx
MzUzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBszCWMA0GCSqGSIb3DQEBCwUAA4IBAQB4UnQmlv02
ZKL1YWnl6LsGVsa2YQgHobdeSCfSffBUjFzRtXcTEA6HhuzMxVqZwjrG61ufHK7x
phqhW3Et7KjLDs0te5CTrWAp7JbMaK/DLRgEmF8nmi3jLk/XZTTrWKM55LGxZ8Ds
em1tH7+Zfi0O45UxCU0bxHUqj+f6s8idlo0sQZf9Jw4ED7MamwoXar5cxpzDbgfm
+IW7H7IuwTraYF8cAYPVHF7P4eGj62OAqQCglfPq5NAeEbyi0aHRYEyPVwb2EazJ
+NuHoboPIMmjSLZplNjqv7FkSkPhpzG7OoXYDMHdfLGjtLKHt5GJHgPmsXwF99VF
8RZtBGMQsXk6
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:37:52 2025 by rpki-client on console.sobornost.net