Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131362e302f32342d3234203d3e203631393233.roa
File:                     3230302e372e3131362e302f32342d3234203d3e203631393233.roa (raw, json)
Hash identifier:          4e/XKzOiwtq3yhtKJdwMVwT/VfZwk5fgVSiVe/hMbPY=
Subject key identifier:   6E:A8:5B:3C:67:9C:ED:5E:16:95:43:13:87:63:38:2E:D3:D2:3E:F7
Certificate issuer:       /CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
Certificate serial:       622B58C1D404180DE278AE66304FA6D750301F63
Authority key identifier: 1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131362e302f32342d3234203d3e203631393233.roa
Signing time:             Tue 15 Apr 2025 15:20:47 +0000
ROA not before:           Tue 15 Apr 2025 15:15:47 +0000
ROA not after:            Tue 14 Apr 2026 15:20:47 +0000
asID:                     61923
IP address blocks:        200.7.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl
                          rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 02:09:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:2b:58:c1:d4:04:18:0d:e2:78:ae:66:30:4f:a6:d7:50:30:1f:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
        Validity
            Not Before: Apr 15 15:15:47 2025 GMT
            Not After : Apr 14 15:20:47 2026 GMT
        Subject: CN=6EA85B3C679CED5E169543138763382ED3D23EF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f7:ca:76:1e:65:b7:9d:ec:3b:56:0f:4b:24:
                    04:40:e4:bb:d7:8f:57:b0:a6:f9:af:29:9e:77:7f:
                    6d:ee:59:8c:c1:c4:cb:fc:3e:39:48:73:7c:6d:3a:
                    22:1e:a9:14:69:87:20:2b:eb:53:1c:32:a7:7e:58:
                    94:ab:54:fd:c3:37:24:e0:b1:95:bf:e5:a6:51:99:
                    8a:c2:9b:5f:f4:4a:4c:67:6d:cb:2b:7c:51:e3:2b:
                    20:a9:c4:8a:60:e6:0e:e0:4e:b6:fd:3a:85:a8:e1:
                    b7:af:2c:cd:4b:94:9e:12:24:48:38:d9:ec:06:f1:
                    7d:92:bb:5b:f7:4b:33:84:e7:4e:ee:85:35:1e:5f:
                    a3:7f:ab:8d:a2:db:f4:dd:f0:46:36:0b:f9:6a:3c:
                    21:e1:99:c4:f6:2a:78:24:ce:a7:de:b8:07:b7:2e:
                    06:62:c5:b9:67:d3:98:d4:94:95:c0:b6:6b:60:75:
                    ac:c7:7b:9d:b8:b1:66:49:a3:b8:d1:c2:87:01:e8:
                    8c:23:32:ce:4e:ce:8b:91:e0:cd:a5:c6:1f:be:b9:
                    75:b5:06:36:14:41:9b:ba:a5:76:2a:00:8a:5a:20:
                    47:d0:94:f9:3c:10:00:13:f0:37:5b:ac:47:bb:2b:
                    0f:97:53:ba:40:57:2a:c0:ba:06:b4:15:58:6a:bd:
                    f8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:A8:5B:3C:67:9C:ED:5E:16:95:43:13:87:63:38:2E:D3:D2:3E:F7
            X509v3 Authority Key Identifier:
                keyid:1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131362e302f32342d3234203d3e203631393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:9e:c2:fa:53:50:4f:cc:ce:4b:1a:d8:1b:08:d4:3f:3b:36:
         92:21:37:a6:0e:02:f7:37:24:d1:e6:ff:15:fa:19:53:33:77:
         d6:b2:86:ac:ac:78:aa:b9:44:d9:1a:6c:27:cd:7b:9f:1b:84:
         41:44:aa:6d:bf:d9:55:24:83:2e:65:24:e8:b5:24:ed:13:17:
         2f:17:77:da:8e:78:a0:b7:f0:a5:cf:ca:3a:bc:07:b0:ae:49:
         c3:ee:8c:46:0b:5a:99:3d:fb:1a:93:88:5d:a5:94:f9:e5:ae:
         20:b7:f3:8c:f3:50:cd:56:cb:1d:f7:a5:71:0e:f1:8d:11:58:
         60:55:f9:da:49:73:a9:2b:86:ec:e8:ef:24:19:76:67:0b:ce:
         42:d9:37:68:40:92:0a:87:8c:7a:2e:d2:e7:a7:14:ef:db:c0:
         02:15:8c:a4:d2:56:8b:bb:d7:41:58:f0:fc:ee:0d:01:0f:22:
         60:4e:34:37:77:d5:9f:4c:ea:c1:8f:f9:9b:47:6e:09:5d:7a:
         7b:5b:11:83:15:e6:60:a3:40:11:14:05:17:d6:c4:71:ca:4f:
         bf:86:45:b3:f3:a2:60:8a:2b:3f:27:ac:a9:13:2a:83:83:77:
         1e:5d:bb:b8:82:b3:67:76:ac:0d:95:af:c3:ce:cd:08:e1:db:
         8b:5d:e5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:43 2025 by rpki-client on console.sobornost.net