Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131342e302f32342d3234203d3e203631393233.roa
File:                     3230302e372e3131342e302f32342d3234203d3e203631393233.roa (raw, json)
Hash identifier:          qpKXfvmK8Ha1yr7nF6YW3IpLcXqmUQogAlz6YSOTRbs=
Subject key identifier:   33:F3:6B:C0:A4:63:4E:C2:A9:E4:20:7D:B0:3D:18:3C:5F:AB:1A:EC
Certificate issuer:       /CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
Certificate serial:       691146AF8C7E5A43F97193AD137D6F42F82AFE00
Authority key identifier: 1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131342e302f32342d3234203d3e203631393233.roa
Signing time:             Tue 15 Apr 2025 15:19:50 +0000
ROA not before:           Tue 15 Apr 2025 15:14:50 +0000
ROA not after:            Tue 14 Apr 2026 15:19:50 +0000
asID:                     61923
IP address blocks:        200.7.114.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl
                          rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 02:09:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:11:46:af:8c:7e:5a:43:f9:71:93:ad:13:7d:6f:42:f8:2a:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
        Validity
            Not Before: Apr 15 15:14:50 2025 GMT
            Not After : Apr 14 15:19:50 2026 GMT
        Subject: CN=33F36BC0A4634EC2A9E4207DB03D183C5FAB1AEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:85:a4:8e:0b:b1:93:ab:dc:18:8d:4e:9a:70:
                    e2:26:fc:03:fa:5f:75:9d:38:5a:83:04:31:2b:88:
                    74:69:d3:25:9d:ee:a0:11:1e:d9:bc:41:0e:13:9f:
                    e5:10:fb:8d:21:c9:be:94:22:be:74:ac:13:ee:ba:
                    24:b1:88:d3:13:6f:c9:0b:3d:21:d5:9c:e9:cf:33:
                    13:59:2e:53:65:74:05:45:17:79:85:7a:dc:8b:8e:
                    ce:47:09:2c:f0:76:ed:30:c2:a5:6b:a3:52:3e:e7:
                    16:f1:33:7d:37:0d:d1:48:92:d6:94:98:31:ce:60:
                    05:a9:5b:fc:74:6d:7f:28:97:b7:43:36:d6:5a:8d:
                    57:ae:91:c7:4e:d0:ee:be:75:4a:e2:59:4c:a4:04:
                    1f:75:ff:9e:4f:0e:7d:fb:1e:86:7c:ee:8f:2b:16:
                    ae:99:8b:f5:29:1a:7e:99:a7:b7:a6:56:0c:6f:59:
                    25:7f:6f:ee:3a:83:d0:3e:e7:1a:fc:4e:6a:bb:57:
                    b9:f0:c9:ea:de:9c:4a:20:c0:20:14:de:f0:69:cf:
                    64:a1:8d:36:71:b0:21:23:1e:d1:cb:93:9a:20:d6:
                    23:81:0f:8a:99:95:dc:86:4b:07:eb:e3:07:c9:88:
                    85:7a:3e:e3:ba:58:3f:9e:60:3d:d0:64:23:1c:69:
                    cf:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F3:6B:C0:A4:63:4E:C2:A9:E4:20:7D:B0:3D:18:3C:5F:AB:1A:EC
            X509v3 Authority Key Identifier:
                keyid:1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131342e302f32342d3234203d3e203631393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:62:9f:f3:0a:22:97:d2:1f:7e:b2:40:06:1b:df:af:35:c6:
         41:22:52:0f:7e:4f:cc:ec:b0:b0:a5:c3:56:d0:77:05:73:08:
         e4:74:b9:16:65:fa:57:18:9c:6f:c0:48:66:2d:fb:20:3e:cf:
         0c:34:61:1c:15:72:e2:11:ef:1b:1c:11:75:82:18:d7:d7:2c:
         ab:56:c8:b7:23:32:ae:29:eb:56:31:b8:ba:65:f1:58:a6:99:
         25:6f:58:4a:56:28:d5:4f:be:ac:d7:0c:60:a1:f3:e5:b5:c9:
         0e:89:c1:d9:7c:b5:3a:de:c0:dc:4c:e5:1d:1c:a5:f9:12:af:
         2f:2a:b5:39:c8:1d:f6:e3:6a:b6:86:21:64:f8:c7:aa:ea:20:
         5c:1b:26:e9:6d:ae:c2:53:a5:07:44:f1:a5:ad:7c:34:9a:f4:
         52:d3:37:c7:b9:91:42:19:bf:23:f2:6c:17:9a:54:f0:0d:38:
         b2:ce:8b:38:56:13:93:54:58:24:56:a9:7e:ff:2d:b8:06:c1:
         ff:68:94:d9:ba:20:8f:20:f4:3f:c9:f2:b8:83:22:5d:f1:d6:
         dc:a9:42:1d:97:c6:21:8e:6d:90:fa:cb:e2:1a:70:20:a1:26:
         d6:e9:8b:cc:68:6e:45:b1:6e:68:55:ac:0a:68:0a:94:e7:a2:
         87:84:af:7e
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUaRFGr4x+WkP5cZOtE31vQvgq/gAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY1RjgzMUU5ODgzQUVGOEI3NkRBMTk0QTFFNUMxREYw
NzE3RDNFMTAeFw0yNTA0MTUxNTE0NTBaFw0yNjA0MTQxNTE5NTBaMDMxMTAvBgNV
BAMTKDMzRjM2QkMwQTQ2MzRFQzJBOUU0MjA3REIwM0QxODNDNUZBQjFBRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDChaSOC7GTq9wYjU6acOIm/AP6
X3WdOFqDBDEriHRp0yWd7qARHtm8QQ4Tn+UQ+40hyb6UIr50rBPuuiSxiNMTb8kL
PSHVnOnPMxNZLlNldAVFF3mFetyLjs5HCSzwdu0wwqVro1I+5xbxM303DdFIktaU
mDHOYAWpW/x0bX8ol7dDNtZajVeukcdO0O6+dUriWUykBB91/55PDn37HoZ87o8r
Fq6Zi/UpGn6Zp7emVgxvWSV/b+46g9A+5xr8Tmq7V7nwyerenEogwCAU3vBpz2Sh
jTZxsCEjHtHLk5og1iOBD4qZldyGSwfr4wfJiIV6PuO6WD+eYD3QZCMcac/xAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUM/NrwKRjTsKp5CB9sD0YPF+rGuwwHwYDVR0j
BBgwFoAUH1+DHpiDrvi3baGUoeXB3wcX0+EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTdZeEF2aXNEU2FCaVlkdllnekRGVEF0eDNkc1JianFaVjdRYkxYNnVt
cDEvMC8xRjVGODMxRTk4ODNBRUY4Qjc2REExOTRBMUU1QzFERjA3MTdEM0UxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGNUY4MzFFOTg4M0FFRjhC
NzZEQTE5NEExRTVDMURGMDcxN0QzRTEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU3WXhBdmlzRFNhQmlZZHZZZ3pERlRBdHgzZHNSYmpxWlY3UWJMWDZ1bXAxLzAv
MzIzMDMwMmUzNzJlMzEzMTM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTM5
MzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAMgHcjANBgkqhkiG9w0BAQsFAAOCAQEAimKf8woil9If
frJABhvfrzXGQSJSD35PzOywsKXDVtB3BXMI5HS5FmX6Vxicb8BIZi37ID7PDDRh
HBVy4hHvGxwRdYIY19csq1bItyMyrinrVjG4umXxWKaZJW9YSlYo1U++rNcMYKHz
5bXJDonB2Xy1Ot7A3EzlHRyl+RKvLyq1Ocgd9uNqtoYhZPjHquogXBsm6W2uwlOl
B0Txpa18NJr0UtM3x7mRQhm/I/JsF5pU8A04ss6LOFYTk1RYJFapfv8tuAbB/2iU
2bogjyD0P8nyuIMiXfHW3KlCHZfGIY5tkPrL4hpwIKEm1umLzGhuRbFuaFWsCmgK
lOeih4Svfg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:43 2025 by rpki-client on console.sobornost.net