Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3132302e302f32312d3231203d3e203631393233.roa
File:                     3230302e372e3132302e302f32312d3231203d3e203631393233.roa (raw, json)
Hash identifier:          UK9MlSnFmWnv5k31NXSW9UXDQMpJToTZXZBrQ7DO71c=
Subject key identifier:   50:43:99:FB:6B:39:5E:50:57:72:2D:CC:F0:9D:C0:ED:69:57:7A:DE
Certificate issuer:       /CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
Certificate serial:       6B31CD697FE114EA41C2B539E2960D226536ECE6
Authority key identifier: 1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3132302e302f32312d3231203d3e203631393233.roa
Signing time:             Tue 15 Apr 2025 15:22:29 +0000
ROA not before:           Tue 15 Apr 2025 15:17:29 +0000
ROA not after:            Tue 14 Apr 2026 15:22:29 +0000
asID:                     61923
IP address blocks:        200.7.120.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl
                          rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:31:cd:69:7f:e1:14:ea:41:c2:b5:39:e2:96:0d:22:65:36:ec:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
        Validity
            Not Before: Apr 15 15:17:29 2025 GMT
            Not After : Apr 14 15:22:29 2026 GMT
        Subject: CN=504399FB6B395E5057722DCCF09DC0ED69577ADE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8f:2a:3d:67:0e:aa:76:ef:25:f4:24:63:e4:
                    3b:6d:c8:82:9b:9e:07:cf:c5:e9:fb:fe:6c:70:07:
                    48:ec:77:f9:fa:64:e2:d7:59:13:6a:6e:dc:26:33:
                    55:77:53:70:97:1c:18:5c:17:81:b1:e5:59:d5:ad:
                    97:9a:f7:88:73:bd:7c:ce:1e:7f:c0:ad:8d:56:96:
                    a1:a7:34:cc:6e:17:0a:c1:90:86:7e:59:97:52:80:
                    27:f6:4a:26:02:51:86:2c:6f:95:1c:ae:cf:a7:78:
                    0d:2a:c0:68:08:88:69:4d:72:40:70:38:63:b1:00:
                    c8:63:64:c0:85:21:b3:ca:2f:98:30:93:df:90:33:
                    c2:91:dc:96:a3:2e:db:3e:4a:e4:df:27:06:98:13:
                    6c:05:81:02:fc:84:7a:ff:ad:a1:87:04:e6:bd:a9:
                    03:6b:e6:a5:2c:c3:74:e1:2c:ee:5d:d3:74:20:de:
                    88:9d:5f:7b:8e:2c:91:1e:09:32:7a:11:0c:41:be:
                    dd:a2:16:9a:ea:41:6e:0c:39:e6:63:0c:70:40:bb:
                    65:68:bd:ed:a0:0f:50:d1:76:68:b1:cb:76:0c:c8:
                    26:af:7a:31:18:62:93:14:9f:12:24:92:49:4e:14:
                    60:52:15:86:fc:0a:2e:97:35:f3:2d:a3:29:b2:7a:
                    d6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:43:99:FB:6B:39:5E:50:57:72:2D:CC:F0:9D:C0:ED:69:57:7A:DE
            X509v3 Authority Key Identifier:
                keyid:1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3132302e302f32312d3231203d3e203631393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         45:22:ae:e4:d3:03:38:b4:c0:a3:9f:1b:8c:8b:10:73:6c:05:
         f1:56:b5:82:e3:f2:09:98:4a:0b:07:e8:a8:93:eb:af:1d:1f:
         3d:29:08:d4:7a:5a:b6:f6:97:9b:ac:e9:c5:17:50:15:b4:5e:
         48:96:cb:3c:63:79:77:fb:3a:02:e2:d5:fa:02:f8:8b:89:7d:
         79:53:a5:79:0c:15:67:2c:65:1c:40:08:a1:dd:fb:e4:7b:c7:
         e0:85:b4:25:8c:89:35:23:2f:9c:15:51:9e:a1:1d:aa:de:b4:
         cd:73:0e:fd:37:a1:e4:6b:47:14:2c:01:e8:42:f7:bb:90:80:
         77:84:ba:41:d3:6d:f9:49:9a:fb:c4:bc:9b:13:00:05:a1:04:
         32:76:e9:22:43:ff:88:df:f0:88:b4:35:30:3c:9d:ef:b7:5f:
         73:c4:02:fc:7c:34:a1:c5:8a:df:bc:38:f1:ff:ee:03:3d:42:
         36:a2:aa:02:1d:5f:14:2a:af:86:33:bc:e8:d9:8f:22:71:60:
         3d:81:9d:2c:d7:e4:28:02:d1:16:3c:b1:82:06:5f:10:c6:31:
         51:d9:06:0f:7b:9c:f8:ac:d5:b3:36:3b:3f:a2:9c:bb:e9:7e:
         27:b1:be:d9:a5:26:a9:67:24:2a:42:c6:0a:e8:2e:af:cc:49:
         e6:56:0a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:14 2025 by rpki-client on console.sobornost.net