Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131322e302f32332d3233203d3e203631393233.roa
File:                     3230302e372e3131322e302f32332d3233203d3e203631393233.roa (raw, json)
Hash identifier:          xQm/K/infaWLMdta6eOeH23XwfUUv26edScEmhYZVJo=
Subject key identifier:   6C:2E:8A:89:8F:94:84:C6:56:41:E3:0F:31:79:90:C0:68:7F:CD:21
Certificate issuer:       /CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
Certificate serial:       4044B90C495F760B4C3DF376AB040E168F75B7AB
Authority key identifier: 1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131322e302f32332d3233203d3e203631393233.roa
Signing time:             Mon 24 Mar 2025 15:20:49 +0000
ROA not before:           Mon 24 Mar 2025 15:15:49 +0000
ROA not after:            Mon 23 Mar 2026 15:20:49 +0000
asID:                     61923
IP address blocks:        200.7.112.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl
                          rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:44:b9:0c:49:5f:76:0b:4c:3d:f3:76:ab:04:0e:16:8f:75:b7:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
        Validity
            Not Before: Mar 24 15:15:49 2025 GMT
            Not After : Mar 23 15:20:49 2026 GMT
        Subject: CN=6C2E8A898F9484C65641E30F317990C0687FCD21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f2:b9:fd:0e:9e:3a:0f:db:5d:eb:b3:2f:2d:
                    d5:6c:7d:c8:42:ff:3a:e4:96:13:31:7a:1a:71:93:
                    e9:6e:2d:37:73:34:e6:fb:b8:c0:6c:f4:68:6e:70:
                    a4:db:d5:80:9c:9f:9f:a8:5d:58:e2:f8:40:a8:df:
                    db:0b:b1:1f:f6:e1:af:85:30:de:0d:e9:00:fa:c2:
                    69:44:85:e0:01:f9:b3:c4:9f:21:09:d8:e4:3f:0d:
                    27:92:5b:d5:83:00:70:bc:09:40:7a:64:2e:ac:ba:
                    43:b1:d7:1f:5e:f7:80:cd:bf:45:d4:5c:89:54:4e:
                    0b:6d:ad:6c:3c:c9:98:51:66:7c:78:1d:9d:07:06:
                    41:ed:92:1d:07:5e:95:fd:08:13:8c:a4:5e:aa:3b:
                    e1:6b:a5:a9:48:f4:d0:bb:69:0d:ca:81:42:f3:da:
                    fd:82:6c:4d:44:22:bf:d2:bf:d5:01:91:25:59:57:
                    78:40:23:60:97:57:c8:44:1d:c0:b8:cf:c8:71:5b:
                    c1:e7:88:d2:34:f8:90:fa:80:bd:74:f6:f6:fe:bc:
                    ac:da:0d:98:a4:66:40:63:44:a5:10:0a:78:eb:e1:
                    ed:f8:55:a6:85:3a:62:8c:cd:0a:00:8f:55:5a:20:
                    a4:d8:72:ac:aa:58:c2:fa:cf:c2:1c:d2:09:13:34:
                    8f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:2E:8A:89:8F:94:84:C6:56:41:E3:0F:31:79:90:C0:68:7F:CD:21
            X509v3 Authority Key Identifier:
                keyid:1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131322e302f32332d3233203d3e203631393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:c4:f6:bc:8c:1e:73:fd:e8:c9:26:44:e9:98:fd:6b:fe:ed:
         41:01:fe:21:dc:f7:0b:25:d4:9d:f4:53:07:54:d6:92:90:36:
         98:cc:89:3a:5c:a9:c0:b5:57:b2:ae:dc:d1:93:9f:4a:f4:b4:
         3c:2d:f3:ce:11:a9:c0:97:6f:ad:1e:70:a8:39:62:64:4c:ff:
         13:7f:48:17:a0:30:74:c6:01:9b:a7:d8:23:ac:a7:96:12:26:
         91:12:6e:09:64:5b:6e:3d:56:33:28:0b:a8:54:6e:85:cf:32:
         16:10:47:ed:9b:61:b3:b3:8c:08:ad:ec:35:12:5d:1f:17:0c:
         11:43:9a:03:06:4c:9f:e6:42:aa:52:5e:84:00:50:11:9c:ba:
         3e:21:cc:52:a8:2a:f2:28:48:62:8b:a9:65:55:b0:df:81:d7:
         ae:fe:ae:a9:eb:ff:94:41:0b:6f:e5:96:ac:38:53:e2:1d:52:
         76:06:79:85:4b:fb:05:dc:ae:c5:ee:67:2e:c6:8c:f6:b4:58:
         07:7f:9c:18:73:88:c1:85:0a:eb:ef:84:17:1b:ed:b9:ad:37:
         23:fd:5f:a6:9f:b9:cf:d6:1b:13:64:13:4a:94:86:83:b3:3d:
         1a:cd:8b:5f:73:3f:3d:a3:4a:59:c7:a2:5f:6f:33:ce:0b:55:
         5a:4c:78:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:14 2025 by rpki-client on console.sobornost.net