Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131382e302f32342d3234203d3e203631393233.roa
File:                     3230302e372e3131382e302f32342d3234203d3e203631393233.roa (raw, json)
Hash identifier:          kQyRziNdztzLx9n6BNK2Kuw8PTxIV4M3QCkaRc/Jp/M=
Subject key identifier:   7C:B9:E9:19:78:81:87:08:8D:56:C8:14:AB:8E:D2:5B:1F:27:7D:86
Certificate issuer:       /CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
Certificate serial:       7944B984B28138B668F2C3B49AEE572D2057903B
Authority key identifier: 1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131382e302f32342d3234203d3e203631393233.roa
Signing time:             Mon 24 Mar 2025 15:20:51 +0000
ROA not before:           Mon 24 Mar 2025 15:15:51 +0000
ROA not after:            Mon 23 Mar 2026 15:20:51 +0000
asID:                     61923
IP address blocks:        200.7.118.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl
                          rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 05:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:44:b9:84:b2:81:38:b6:68:f2:c3:b4:9a:ee:57:2d:20:57:90:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
        Validity
            Not Before: Mar 24 15:15:51 2025 GMT
            Not After : Mar 23 15:20:51 2026 GMT
        Subject: CN=7CB9E919788187088D56C814AB8ED25B1F277D86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4a:5d:7c:90:43:31:61:6a:51:fc:59:2c:63:
                    23:ec:14:92:f0:91:d6:1e:9b:c4:a5:44:03:b4:a8:
                    df:2a:8b:06:f8:7a:c5:66:83:8f:93:78:96:71:eb:
                    57:bb:6f:ac:8f:ad:68:0a:25:8a:c1:cc:1c:76:d8:
                    df:35:f0:22:ef:0d:6e:bc:42:e4:5a:21:88:a1:af:
                    2b:c1:b1:ea:bb:6a:dc:43:53:8e:b3:60:a2:71:aa:
                    82:5c:d4:7b:a8:77:d2:75:fc:df:8e:cb:42:8b:21:
                    e0:d7:15:30:c8:57:c9:1c:04:8c:31:64:b1:bf:27:
                    94:b7:28:aa:6f:a1:3e:b7:3e:e8:43:04:f3:f7:0d:
                    f7:50:c7:3b:6a:b4:71:35:50:fe:9d:81:66:aa:60:
                    b2:23:a8:35:68:70:85:cc:4d:a3:59:73:4b:f6:15:
                    18:e7:84:57:c3:e2:ab:13:42:43:2e:f7:16:b1:6d:
                    b4:f6:b8:cf:05:40:b7:9d:21:da:ba:b1:5b:bf:88:
                    30:24:59:64:8c:b8:7c:c3:9f:6f:46:4e:af:22:5f:
                    3d:3d:8c:58:e4:ea:d1:88:6d:28:fe:ae:61:7c:7d:
                    ac:c2:96:5d:14:d2:4d:b4:93:7c:83:a8:53:5b:07:
                    db:d8:f7:96:f2:1c:fd:2b:74:19:0a:91:0f:43:40:
                    dc:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B9:E9:19:78:81:87:08:8D:56:C8:14:AB:8E:D2:5B:1F:27:7D:86
            X509v3 Authority Key Identifier:
                keyid:1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131382e302f32342d3234203d3e203631393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:31:39:26:21:dc:41:a6:48:5e:c5:4d:24:87:1e:f3:84:b8:
         00:3f:4c:75:0b:55:7b:ab:64:44:b2:ad:6f:7d:65:b7:01:d1:
         f6:c9:bc:2a:13:80:75:b6:20:21:95:20:83:1b:1d:29:7d:1c:
         25:a3:76:05:52:c6:ad:92:5c:7b:d2:69:cb:18:5a:72:82:ff:
         81:7e:b7:c1:b0:af:4e:9a:d0:cc:de:4a:0e:13:12:54:57:e1:
         b1:cb:1d:2f:e0:07:15:2f:a4:3a:51:70:74:c5:07:b3:20:16:
         c9:06:9d:ca:76:94:39:24:c2:ea:53:eb:58:70:cd:ea:44:84:
         e5:fc:5f:9e:9b:ae:70:de:ce:1a:52:ac:56:dc:a1:af:40:6c:
         b0:ac:e2:62:4b:02:7e:b0:76:af:c1:d4:5f:be:d4:20:8c:2b:
         6a:26:1d:f8:cc:8d:55:d1:29:bd:f5:04:12:94:07:fe:3f:49:
         71:b7:64:8f:e1:69:6a:c1:82:f9:43:83:d1:92:6a:5a:1a:f3:
         ef:61:5a:dc:5d:1c:80:d9:93:aa:ff:a3:1e:ea:13:39:53:5f:
         86:72:26:a7:58:cc:4b:23:68:5a:7a:59:de:4c:b2:94:a9:2d:
         21:19:e7:70:8e:f7:7a:b2:ab:6b:ff:25:d9:85:af:21:fb:fa:
         2d:52:15:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:46:20 2025 by rpki-client on console.sobornost.net