Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131322e302f32302d3230203d3e203631393233.roa
File:                     3230302e372e3131322e302f32302d3230203d3e203631393233.roa (raw, json)
Hash identifier:          3AEWDsCaZ/eZwXC108uPAOr4wO0fvw8g1gK7eEi65Zk=
Subject key identifier:   D8:45:86:29:D5:58:BF:EF:3F:5C:3A:3C:01:18:23:B5:20:78:94:4E
Certificate issuer:       /CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
Certificate serial:       47045808F6C12C32116E7A229438E5339594DD76
Authority key identifier: 1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131322e302f32302d3230203d3e203631393233.roa
Signing time:             Mon 24 Mar 2025 15:20:47 +0000
ROA not before:           Mon 24 Mar 2025 15:15:47 +0000
ROA not after:            Mon 23 Mar 2026 15:20:47 +0000
asID:                     61923
IP address blocks:        200.7.112.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl
                          rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:04:58:08:f6:c1:2c:32:11:6e:7a:22:94:38:e5:33:95:94:dd:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
        Validity
            Not Before: Mar 24 15:15:47 2025 GMT
            Not After : Mar 23 15:20:47 2026 GMT
        Subject: CN=D8458629D558BFEF3F5C3A3C011823B52078944E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:46:70:36:3d:23:9a:93:b8:82:57:84:26:ee:
                    d8:9b:61:d7:90:0c:cb:1b:fe:9f:22:bb:68:d5:59:
                    ab:af:9e:1a:08:87:c7:43:a4:f7:e0:1b:ca:97:c7:
                    08:61:3e:82:51:0c:09:db:8a:a8:28:27:6b:9d:ca:
                    97:fb:1c:ab:c0:af:68:c5:22:85:37:ee:b4:9d:c3:
                    92:f3:d8:82:81:38:a7:60:77:03:b9:f6:ae:3d:00:
                    db:b6:1b:12:eb:88:09:d3:01:c6:7d:6f:91:5f:af:
                    76:33:8d:af:9b:a0:fa:75:f8:06:11:12:ab:5b:ac:
                    2b:2a:8f:7d:52:07:e6:47:76:ad:30:3d:b9:98:a5:
                    e2:ba:e0:14:04:72:f2:11:ac:8d:d5:0c:f2:79:f9:
                    03:1e:f3:39:de:d9:83:be:cb:01:16:d7:ae:66:55:
                    e4:97:fa:1c:9b:cd:57:3a:80:cd:8d:e4:bb:91:57:
                    04:47:21:06:31:a3:bb:6b:42:66:46:7a:95:ed:9b:
                    75:cf:44:4e:d1:24:39:f3:2f:bf:f7:67:0d:a8:4e:
                    b6:5a:5b:a1:0f:44:0a:b1:d3:c2:01:31:10:2b:b2:
                    08:ff:59:54:7e:d9:ea:cf:31:43:ea:b1:5d:ba:6a:
                    d0:5a:44:a7:2b:9b:66:c3:aa:78:0d:49:90:d6:bb:
                    8d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:45:86:29:D5:58:BF:EF:3F:5C:3A:3C:01:18:23:B5:20:78:94:4E
            X509v3 Authority Key Identifier:
                keyid:1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131322e302f32302d3230203d3e203631393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         91:cb:29:7c:97:84:39:d3:40:3e:9c:47:20:aa:33:68:2f:62:
         db:ec:92:3f:de:f7:66:0c:0e:03:60:b6:ea:54:8a:45:69:85:
         07:74:c3:cc:a5:29:07:82:b9:00:26:e3:09:a2:89:19:2b:d0:
         ac:c3:8e:aa:47:ed:aa:f9:d1:b0:54:c6:ca:ac:fa:82:2f:b9:
         5a:39:e0:8e:07:b7:18:e3:ce:64:1e:3f:ed:dd:44:d1:03:11:
         11:9b:12:36:01:74:5c:58:4d:d0:5a:cf:25:80:89:4e:0b:0a:
         32:73:dd:af:be:b2:c6:43:3c:6b:9d:14:5f:f1:89:15:97:38:
         73:00:6a:11:1d:75:52:13:d9:27:20:e1:97:fb:f9:76:b8:b1:
         bf:a1:0b:33:7e:91:e7:5d:1d:a5:0c:fa:66:a6:ae:93:db:82:
         25:65:9a:34:c9:cd:78:a1:dc:54:1a:37:04:70:72:c0:ab:ab:
         a0:5f:18:7e:bf:8b:f1:e4:b3:ba:88:f3:46:e7:ae:b3:2f:52:
         f7:33:ea:2a:d5:3e:84:81:58:bc:e0:ad:18:9d:77:bd:c1:2e:
         6a:df:fe:22:75:87:9d:2c:19:17:cc:e1:18:eb:52:6f:d7:9f:
         ed:5f:b8:7f:c9:cc:59:2f:37:1a:45:09:be:87:7a:48:51:a0:
         7a:d0:a0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:14 2025 by rpki-client on console.sobornost.net