Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131322e302f32322d3232203d3e203631393233.roa
File:                     3230302e372e3131322e302f32322d3232203d3e203631393233.roa (raw, json)
Hash identifier:          dZ2JrM0yHzNtU2afdGvL2nK+iFxORObKdwM82PQoYWE=
Subject key identifier:   2A:02:81:36:2E:D7:9C:38:FE:9C:2D:2A:10:11:EA:9C:9E:31:B9:F8
Certificate issuer:       /CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
Certificate serial:       12F0EFFE1103351EDD150145E97B1282B5AA7DED
Authority key identifier: 1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131322e302f32322d3232203d3e203631393233.roa
Signing time:             Mon 24 Mar 2025 15:20:48 +0000
ROA not before:           Mon 24 Mar 2025 15:15:48 +0000
ROA not after:            Mon 23 Mar 2026 15:20:48 +0000
asID:                     61923
IP address blocks:        200.7.112.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl
                          rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:f0:ef:fe:11:03:35:1e:dd:15:01:45:e9:7b:12:82:b5:aa:7d:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
        Validity
            Not Before: Mar 24 15:15:48 2025 GMT
            Not After : Mar 23 15:20:48 2026 GMT
        Subject: CN=2A0281362ED79C38FE9C2D2A1011EA9C9E31B9F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ef:76:8c:e3:df:88:81:bd:d8:0c:46:bb:a6:
                    32:80:f2:50:cc:03:90:c8:17:e3:a3:27:59:8d:ee:
                    b4:aa:16:f0:94:8c:6b:46:7b:77:8d:2f:72:5d:01:
                    de:6f:85:da:49:0c:d7:87:e2:25:a0:7e:60:f1:34:
                    08:df:60:61:2a:eb:62:dc:8b:0e:a5:ad:c0:d5:4a:
                    e5:5b:ed:6d:0c:21:b9:b9:a7:fb:39:c3:81:e4:9b:
                    10:9b:96:e9:5b:a2:62:9e:0e:6f:d9:a1:48:f6:91:
                    68:ce:f9:5d:85:82:50:81:b0:d2:e1:4b:ef:35:f7:
                    a7:5f:43:19:fb:80:c0:b8:8d:16:dd:0e:83:f1:70:
                    88:49:73:3a:5e:11:d5:7e:e5:57:25:f2:87:33:74:
                    69:84:2e:3e:55:2f:a5:8d:39:76:5f:ae:3c:a7:f0:
                    34:46:66:4e:f2:21:23:8e:67:e0:2d:28:53:f4:17:
                    44:15:dd:73:c6:5e:43:40:4a:f7:1d:5a:a0:35:79:
                    da:53:c5:22:08:6c:fc:f0:25:a9:24:cb:79:74:56:
                    6f:56:0b:c1:f5:b7:78:a2:10:d8:d5:f5:c4:da:b2:
                    28:a7:24:76:bc:68:06:3c:a9:ef:df:3e:65:1a:02:
                    e2:24:b9:89:93:b0:85:3f:2b:14:98:e2:01:07:2c:
                    e6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:02:81:36:2E:D7:9C:38:FE:9C:2D:2A:10:11:EA:9C:9E:31:B9:F8
            X509v3 Authority Key Identifier:
                keyid:1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131322e302f32322d3232203d3e203631393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:e6:e7:12:79:2c:ca:f4:77:29:aa:4c:b8:0e:05:ad:33:c2:
         89:17:90:d1:92:bf:b1:07:23:6e:2a:2a:54:5e:85:d6:6b:35:
         18:46:17:85:e6:da:ea:20:21:1b:dd:64:1d:7c:a7:dd:1e:f1:
         86:c5:69:06:ad:0f:f3:0e:fd:47:93:40:b7:85:e3:a3:4b:83:
         57:63:b5:66:8f:1f:9a:9f:58:bb:1a:1a:d2:da:7f:38:76:c6:
         8e:c3:b9:bc:fc:6a:0e:ca:62:17:9a:43:15:50:82:2e:d1:86:
         8b:40:cf:67:ba:7d:c8:8a:c5:7b:e5:91:ad:82:51:2e:f6:65:
         b4:54:31:2a:74:d8:e0:bd:30:ec:41:37:21:21:d1:f9:91:3f:
         69:a2:57:68:9a:50:9c:00:ab:3c:d6:70:b9:66:82:1b:c5:70:
         2a:35:fe:0c:5d:04:5a:07:c3:75:c0:85:b5:be:63:fa:d5:22:
         e5:40:54:82:6b:80:45:ec:66:4a:df:e9:5e:ab:0a:1e:e1:9e:
         ff:83:66:4b:2e:00:63:f4:72:ba:7f:46:d2:3c:40:32:fe:dd:
         70:5d:b4:90:68:c1:a4:8b:00:39:78:74:32:07:b9:51:c8:ec:
         24:85:f3:e9:b0:77:ab:e2:c2:f4:08:35:cf:43:04:db:4f:75:
         ba:17:60:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:14 2025 by rpki-client on console.sobornost.net