Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131372e302f32342d3234203d3e203631393233.roa
File:                     3230302e372e3131372e302f32342d3234203d3e203631393233.roa (raw, json)
Hash identifier:          RVNRt/iuGyBSvRHyfrhXvclP9Dz+c4XQSiuJAInvNhs=
Subject key identifier:   CE:B1:16:61:F1:E4:64:3A:A9:DE:90:78:AB:19:54:70:79:09:28:B3
Certificate issuer:       /CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
Certificate serial:       7C7F8967546E2D62A74F1463E2A70AA1ACD508C9
Authority key identifier: 1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131372e302f32342d3234203d3e203631393233.roa
Signing time:             Tue 15 Apr 2025 15:21:38 +0000
ROA not before:           Tue 15 Apr 2025 15:16:38 +0000
ROA not after:            Tue 14 Apr 2026 15:21:38 +0000
asID:                     61923
IP address blocks:        200.7.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl
                          rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 05:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:7f:89:67:54:6e:2d:62:a7:4f:14:63:e2:a7:0a:a1:ac:d5:08:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
        Validity
            Not Before: Apr 15 15:16:38 2025 GMT
            Not After : Apr 14 15:21:38 2026 GMT
        Subject: CN=CEB11661F1E4643AA9DE9078AB195470790928B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b0:f5:d3:89:f0:d7:05:5d:4a:2d:fc:db:dd:
                    7f:36:54:6c:41:50:0f:76:2b:8a:81:81:2d:a0:c9:
                    53:9f:f1:9e:50:d2:85:ac:5f:6f:53:de:36:a9:27:
                    1a:5e:cb:56:9e:c3:df:14:1d:19:34:b9:89:6a:3a:
                    f9:71:04:56:b4:df:57:6d:82:03:d3:f6:01:ea:6f:
                    36:54:37:41:c8:33:8f:09:a3:b8:c0:fd:d6:c4:ee:
                    87:e4:5f:e4:51:03:ef:33:40:0b:56:c8:06:46:79:
                    ea:9d:58:8f:9b:0d:d4:49:9c:7c:ff:92:ca:a3:e6:
                    db:72:5b:73:35:91:45:b3:1d:34:42:7d:f2:8b:aa:
                    03:36:02:21:d2:a8:50:0d:e4:f3:ee:30:ab:91:a0:
                    e4:ed:b2:bd:5c:ae:81:16:b8:d6:a0:c9:77:c0:6a:
                    50:36:7c:21:a9:54:48:f6:c3:5a:08:97:c8:0b:00:
                    64:60:75:f0:ac:52:3d:fe:ae:7c:b6:18:af:3b:71:
                    29:08:c3:d2:84:07:16:a2:0f:85:5b:54:d5:9c:49:
                    fe:00:42:14:58:20:3e:b7:85:65:f1:d8:c7:37:73:
                    8d:7c:f3:bf:02:99:ca:47:ce:3d:1b:c2:5c:ba:07:
                    54:15:3a:8d:85:8e:80:0a:be:6c:ea:79:71:c7:82:
                    d2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B1:16:61:F1:E4:64:3A:A9:DE:90:78:AB:19:54:70:79:09:28:B3
            X509v3 Authority Key Identifier:
                keyid:1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131372e302f32342d3234203d3e203631393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:af:49:2f:90:2e:59:c3:14:dc:82:10:ab:09:60:4f:41:5d:
         71:3c:3c:33:61:bd:57:fd:3d:07:e9:16:86:e5:c9:a3:25:05:
         49:f2:ef:13:17:78:5e:8e:a4:0d:7a:dc:b6:de:dd:a1:b7:fe:
         fd:ab:db:a4:3a:88:ab:f4:5e:87:d5:94:05:56:04:81:1b:be:
         b9:1d:5f:f2:65:13:a9:c0:32:2b:25:b6:05:5f:87:1e:ef:00:
         eb:be:62:d8:88:d0:dd:6d:42:28:54:a5:04:bd:27:c6:e3:a4:
         c5:d1:d7:80:b5:88:68:32:43:0c:97:bc:23:cb:6f:0b:a5:0c:
         de:00:ff:24:db:e3:50:c0:24:74:d7:7d:fc:7e:d9:0c:32:79:
         ab:57:59:59:8d:16:66:ed:19:02:35:15:35:84:26:25:75:01:
         f3:43:10:f7:c0:5b:27:4c:28:3c:8c:8a:17:29:d8:c2:b9:33:
         e6:7d:52:5f:10:8d:28:1b:45:02:b4:ff:71:d3:bc:95:af:a2:
         08:18:81:54:a7:90:1d:f6:27:ab:e0:ac:82:ba:5b:ed:3c:db:
         30:44:70:2e:0d:91:35:78:6c:48:36:9f:2a:eb:74:96:fb:82:
         5e:87:fb:71:45:0e:52:49:bf:5f:30:fa:e0:eb:80:9d:41:66:
         fa:3d:a7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:46:20 2025 by rpki-client on console.sobornost.net