Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131342e302f32332d3233203d3e203631393233.roa
File:                     3230302e372e3131342e302f32332d3233203d3e203631393233.roa (raw, json)
Hash identifier:          uDowiODa5emZuaQieoq/deNriAf+A6nmUHbxbeXEDHs=
Subject key identifier:   A3:B2:C8:AC:68:82:93:F8:00:99:F9:FB:D6:90:82:DE:BE:13:9E:A2
Certificate issuer:       /CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
Certificate serial:       4011EDB5C43642F9EF922A13D3B0C9A329364CE2
Authority key identifier: 1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131342e302f32332d3233203d3e203631393233.roa
Signing time:             Mon 24 Mar 2025 15:20:51 +0000
ROA not before:           Mon 24 Mar 2025 15:15:51 +0000
ROA not after:            Mon 23 Mar 2026 15:20:51 +0000
asID:                     61923
IP address blocks:        200.7.114.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl
                          rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 05:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:11:ed:b5:c4:36:42:f9:ef:92:2a:13:d3:b0:c9:a3:29:36:4c:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
        Validity
            Not Before: Mar 24 15:15:51 2025 GMT
            Not After : Mar 23 15:20:51 2026 GMT
        Subject: CN=A3B2C8AC688293F80099F9FBD69082DEBE139EA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:6c:ae:87:8b:23:53:af:de:7a:b5:c7:c2:b1:
                    ca:2a:50:68:df:98:bf:47:57:e5:2e:f6:15:ec:2b:
                    e9:9b:d2:44:9c:4b:a4:4e:0b:bb:31:b4:19:1c:e3:
                    2b:5d:c0:97:10:1e:6c:fd:ad:bc:6d:96:7c:a0:53:
                    14:f0:c4:02:58:28:6b:19:5b:75:f9:18:a3:4c:90:
                    6d:a6:8a:3e:0e:c3:6a:e8:19:14:bd:0f:be:aa:da:
                    7c:d3:10:bb:54:90:b1:4f:9b:d0:58:e0:7e:f7:d8:
                    ab:d1:7e:cd:72:02:a2:86:81:06:97:1b:79:cf:b3:
                    65:8f:ef:0b:23:93:32:5a:ed:e1:8a:72:04:32:e6:
                    2f:ea:57:f2:1c:f4:a8:14:81:c1:40:c0:f0:fd:ba:
                    0d:ce:9c:3a:43:8b:70:ea:fc:38:14:79:fa:4c:d8:
                    63:34:a5:db:1f:c4:7a:a9:0a:24:d2:05:70:9d:31:
                    28:4e:e1:e9:b5:f2:e5:17:ca:a4:e3:8b:12:bd:bb:
                    f2:a5:56:21:7b:77:4c:26:ee:ba:de:43:bb:fd:c1:
                    ec:15:57:ca:14:84:9e:59:a8:d2:a2:b1:dc:a0:67:
                    d8:9f:bd:28:88:60:31:5d:28:0d:42:e2:4a:87:cc:
                    e9:33:c0:4d:e6:9d:32:98:c7:99:b2:28:67:8b:b9:
                    98:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B2:C8:AC:68:82:93:F8:00:99:F9:FB:D6:90:82:DE:BE:13:9E:A2
            X509v3 Authority Key Identifier:
                keyid:1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131342e302f32332d3233203d3e203631393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:4d:80:01:64:11:ec:7f:39:43:51:50:d1:81:67:80:fb:b8:
         02:32:f9:ff:f8:97:7f:64:4d:4b:c7:c7:f8:3d:05:e5:a4:75:
         2f:f8:41:59:12:e9:dd:1b:56:8e:ee:5f:a3:9b:cd:23:7c:67:
         0d:85:25:ac:9a:c9:14:bd:13:25:3f:c7:a4:e6:98:48:b2:7d:
         5c:ef:4a:38:4e:42:e5:4f:c1:21:6f:36:52:cd:0d:a3:83:e9:
         d6:3e:96:ff:90:18:cb:77:91:fa:2f:43:76:8e:90:c6:39:87:
         2c:82:3f:b3:ed:fa:be:b2:63:06:e8:34:42:32:c5:1b:20:6a:
         b2:11:45:66:50:48:61:c8:54:29:29:e1:ac:26:d3:36:2a:9b:
         93:c4:b4:21:5c:ee:3e:fd:e5:94:26:1d:f5:56:db:27:93:07:
         a4:73:1f:3a:ba:12:e8:6a:d8:a2:a7:ef:41:72:6e:91:b9:df:
         04:bd:a3:25:cc:41:7b:41:d1:3e:18:e3:0d:a6:d2:ce:ad:10:
         2e:4b:91:be:aa:2c:ab:75:b3:4c:5e:fa:1c:48:95:d9:b1:f2:
         86:e0:9f:70:b0:0b:52:e5:ff:01:c6:e8:41:99:60:b1:9c:3f:
         ee:8b:97:4b:00:ac:79:f1:bf:e6:8a:62:79:54:de:72:17:cd:
         6e:b0:19:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:46:20 2025 by rpki-client on console.sobornost.net