Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131362e302f32322d3232203d3e203631393233.roa
File:                     3230302e372e3131362e302f32322d3232203d3e203631393233.roa (raw, json)
Hash identifier:          MIwqk6kQZTDmZjPJheo22mMjkCXGCWUGNp3cetuK54s=
Subject key identifier:   8B:D4:D4:43:9C:53:31:98:72:DF:F9:4D:04:E0:25:39:9C:9A:E5:00
Certificate issuer:       /CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
Certificate serial:       73310260756142A382184987F19F0A00177A47AB
Authority key identifier: 1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131362e302f32322d3232203d3e203631393233.roa
Signing time:             Mon 24 Mar 2025 15:20:47 +0000
ROA not before:           Mon 24 Mar 2025 15:15:47 +0000
ROA not after:            Mon 23 Mar 2026 15:20:47 +0000
asID:                     61923
IP address blocks:        200.7.116.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl
                          rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:31:02:60:75:61:42:a3:82:18:49:87:f1:9f:0a:00:17:7a:47:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
        Validity
            Not Before: Mar 24 15:15:47 2025 GMT
            Not After : Mar 23 15:20:47 2026 GMT
        Subject: CN=8BD4D4439C53319872DFF94D04E025399C9AE500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:24:87:11:c3:3f:77:a4:5f:35:4d:61:7b:08:
                    0e:2b:3d:ab:73:35:a8:75:e8:ec:d7:42:63:53:13:
                    0f:57:3a:6b:95:b6:47:08:ae:eb:1e:57:5c:91:8d:
                    16:c0:13:8e:37:6d:bd:e9:f2:aa:90:0d:6a:59:08:
                    8a:48:f5:7d:71:6c:e9:d8:76:ba:36:7f:24:37:0a:
                    f8:ed:90:4e:07:82:71:64:c9:f6:3a:ae:ae:87:ef:
                    32:bd:31:89:c1:8d:14:61:de:44:d1:4e:27:00:68:
                    06:82:f2:e0:3d:fd:e2:a2:7f:f6:1d:8d:be:1e:2a:
                    5b:1c:6f:35:ac:89:29:a6:2a:00:32:db:09:46:09:
                    2c:cf:0b:70:a3:6d:5d:4f:6f:a8:45:9a:f7:1e:19:
                    99:b2:98:aa:b1:1e:af:ab:e5:12:f9:da:32:33:da:
                    c9:1d:4f:54:69:be:cb:5a:de:31:6a:36:5a:41:dc:
                    37:c4:58:ea:37:85:99:60:80:45:85:03:e1:22:84:
                    3a:eb:ae:a3:b8:d5:6c:17:f0:03:32:4f:f7:7f:a4:
                    2d:ad:1c:cc:24:e8:86:cb:f2:30:fc:5c:98:e1:40:
                    89:61:f5:4d:db:7c:75:f9:f9:54:1e:69:61:05:21:
                    7e:80:2a:b7:0c:37:a7:a2:15:48:d1:e6:6c:67:41:
                    4e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D4:D4:43:9C:53:31:98:72:DF:F9:4D:04:E0:25:39:9C:9A:E5:00
            X509v3 Authority Key Identifier:
                keyid:1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131362e302f32322d3232203d3e203631393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:08:b3:32:6c:b3:8d:95:6d:ec:d0:65:0c:f3:d1:8f:79:ba:
         93:94:c9:06:9d:fd:09:41:21:63:d5:72:18:bd:8c:3c:ea:60:
         4a:c9:25:9e:dc:01:07:be:c6:c0:01:cd:6e:8d:a2:a9:aa:fd:
         b9:24:31:ce:46:d7:d4:4c:c7:0e:4b:84:c6:14:7e:9a:00:7f:
         d1:57:d4:e1:49:af:76:b8:a1:4b:61:3a:bb:e8:1d:7c:04:63:
         78:9c:39:98:46:fe:27:7b:a8:73:3d:a2:c9:92:ac:d3:07:b0:
         fa:37:17:83:7e:1d:2b:1b:0b:ed:44:87:a7:78:ca:42:17:96:
         56:e6:7c:3f:93:37:f8:98:48:65:9b:38:83:33:2a:cf:7a:d9:
         fe:87:17:2c:2c:66:47:b7:76:c8:90:63:0c:4e:db:4d:34:2a:
         10:17:ac:15:91:8c:eb:01:77:7b:f9:04:83:4d:b7:72:a2:d3:
         51:ec:4b:eb:cc:78:74:a5:3d:13:4d:9d:4a:6b:a1:bd:92:c8:
         ff:c0:59:4d:be:58:85:b3:b7:6d:2d:fe:70:5b:1a:d9:f7:ec:
         1e:08:fc:68:e7:a4:00:fd:6b:a1:15:35:be:f1:2b:21:51:fd:
         8e:53:cd:71:71:50:d8:58:e2:09:8b:c7:5c:06:9b:5e:97:38:
         77:8f:22:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:14 2025 by rpki-client on console.sobornost.net