Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3132302e302f32332d3233203d3e203631393233.roa
File:                     3230302e372e3132302e302f32332d3233203d3e203631393233.roa (raw, json)
Hash identifier:          LSf9Sa7kjKATqIJFvvG2a1Ww6mv3+f/BNIcPBts1I8A=
Subject key identifier:   D2:56:E9:3C:56:91:CE:50:0B:D3:45:D1:DE:6B:03:FE:20:4C:4D:3A
Certificate issuer:       /CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
Certificate serial:       1AC876F72D40C3FD18C28CA0C8CAFCF819166426
Authority key identifier: 1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3132302e302f32332d3233203d3e203631393233.roa
Signing time:             Mon 24 Mar 2025 15:20:49 +0000
ROA not before:           Mon 24 Mar 2025 15:15:49 +0000
ROA not after:            Mon 23 Mar 2026 15:20:49 +0000
asID:                     61923
IP address blocks:        200.7.120.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl
                          rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:c8:76:f7:2d:40:c3:fd:18:c2:8c:a0:c8:ca:fc:f8:19:16:64:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
        Validity
            Not Before: Mar 24 15:15:49 2025 GMT
            Not After : Mar 23 15:20:49 2026 GMT
        Subject: CN=D256E93C5691CE500BD345D1DE6B03FE204C4D3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c0:80:8b:a8:48:be:03:f9:bc:76:7b:82:1b:
                    a0:8d:4c:92:1e:4c:7c:73:97:78:9f:9b:97:c4:29:
                    fc:ec:c2:d6:ad:39:90:87:59:85:03:f9:06:74:b4:
                    e9:db:90:2a:9a:0a:53:a1:da:d0:33:af:f9:b6:ec:
                    87:00:31:3b:dd:09:2d:c8:a5:0d:e3:aa:56:12:89:
                    af:68:06:8a:c7:0d:dc:b8:52:86:60:b4:7e:19:ff:
                    de:a8:19:3b:16:2e:0b:70:e1:c7:1e:0e:0a:2d:ea:
                    d3:c1:54:39:30:73:65:fc:94:ae:66:b9:a0:9a:92:
                    67:fd:c3:6c:b0:4c:02:4c:5f:e2:78:4b:57:bb:28:
                    72:8d:e0:fc:db:db:52:9d:bb:c8:2a:21:3d:fc:8e:
                    8f:75:d0:c3:ad:0d:99:7e:16:6e:74:2a:1e:a6:c5:
                    0c:47:52:ad:3c:17:e0:1f:1f:44:f7:c0:20:e6:8b:
                    96:db:35:74:52:0c:98:10:c6:1a:1a:e1:98:08:ed:
                    6f:6d:64:86:b4:02:c1:7b:bc:92:6a:1a:1e:ae:5e:
                    23:99:bd:ab:04:a0:f4:b0:10:e4:27:87:ee:00:75:
                    c5:4e:a7:95:f8:42:33:c1:97:f2:cd:bf:d6:4a:52:
                    ab:0c:3f:30:42:53:3d:77:25:18:a0:80:c4:d1:85:
                    5f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:56:E9:3C:56:91:CE:50:0B:D3:45:D1:DE:6B:03:FE:20:4C:4D:3A
            X509v3 Authority Key Identifier:
                keyid:1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3132302e302f32332d3233203d3e203631393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:9d:4a:36:01:f8:4b:b5:29:ae:26:ad:66:7b:5c:9f:17:2e:
         bb:4a:11:65:a3:2d:12:86:db:52:e6:70:87:c1:ab:9d:59:85:
         02:3b:77:47:e5:97:fc:99:fb:7e:17:fe:ca:3d:76:ca:29:dc:
         45:d8:a0:a2:61:25:89:df:de:c0:c7:b1:f2:9b:99:e2:ea:4e:
         9e:81:52:9b:c5:e3:43:73:1a:e3:6a:a1:06:05:34:7e:35:fc:
         59:04:75:1f:b5:7a:33:95:37:c7:ee:8a:d0:f0:12:49:dc:9c:
         4e:ca:da:40:76:6e:dc:8b:f4:c1:ee:2a:60:13:00:4a:22:be:
         5c:a1:59:f4:c5:50:2a:3c:15:30:a9:21:62:db:d8:e0:8e:69:
         a5:aa:d8:e8:b1:0a:2e:7f:8f:92:db:89:af:f0:13:4d:f1:72:
         0a:6d:24:50:28:b5:d7:8f:2c:9d:96:f6:c8:d0:98:90:04:a9:
         0d:bd:a4:f2:5d:8e:fc:01:7f:54:fc:e2:b0:d0:f8:7e:b2:6c:
         f9:cb:63:78:13:50:2d:2e:27:50:01:9b:5d:d0:6a:6b:c5:60:
         ff:af:3c:ff:9c:ef:69:c0:c3:6b:b4:95:fe:6c:62:35:fb:2f:
         2f:f9:b5:19:45:c1:6f:20:f6:92:10:e5:d6:4b:bd:51:ee:c4:
         b5:66:2b:54
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUGsh29y1Aw/0YwoygyMr8+BkWZCYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY1RjgzMUU5ODgzQUVGOEI3NkRBMTk0QTFFNUMxREYw
NzE3RDNFMTAeFw0yNTAzMjQxNTE1NDlaFw0yNjAzMjMxNTIwNDlaMDMxMTAvBgNV
BAMTKEQyNTZFOTNDNTY5MUNFNTAwQkQzNDVEMURFNkIwM0ZFMjA0QzREM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZwICLqEi+A/m8dnuCG6CNTJIe
THxzl3ifm5fEKfzswtatOZCHWYUD+QZ0tOnbkCqaClOh2tAzr/m27IcAMTvdCS3I
pQ3jqlYSia9oBorHDdy4UoZgtH4Z/96oGTsWLgtw4cceDgot6tPBVDkwc2X8lK5m
uaCakmf9w2ywTAJMX+J4S1e7KHKN4Pzb21Kdu8gqIT38jo910MOtDZl+Fm50Kh6m
xQxHUq08F+AfH0T3wCDmi5bbNXRSDJgQxhoa4ZgI7W9tZIa0AsF7vJJqGh6uXiOZ
vasEoPSwEOQnh+4AdcVOp5X4QjPBl/LNv9ZKUqsMPzBCUz13JRiggMTRhV9JAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU0lbpPFaRzlAL00XR3msD/iBMTTowHwYDVR0j
BBgwFoAUH1+DHpiDrvi3baGUoeXB3wcX0+EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTdZeEF2aXNEU2FCaVlkdllnekRGVEF0eDNkc1JianFaVjdRYkxYNnVt
cDEvMC8xRjVGODMxRTk4ODNBRUY4Qjc2REExOTRBMUU1QzFERjA3MTdEM0UxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGNUY4MzFFOTg4M0FFRjhC
NzZEQTE5NEExRTVDMURGMDcxN0QzRTEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU3WXhBdmlzRFNhQmlZZHZZZ3pERlRBdHgzZHNSYmpxWlY3UWJMWDZ1bXAxLzAv
MzIzMDMwMmUzNzJlMzEzMjMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzYzMTM5
MzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAcgHeDANBgkqhkiG9w0BAQsFAAOCAQEAU51KNgH4S7Up
riatZntcnxcuu0oRZaMtEobbUuZwh8GrnVmFAjt3R+WX/Jn7fhf+yj12yincRdig
omElid/ewMex8puZ4upOnoFSm8XjQ3Ma42qhBgU0fjX8WQR1H7V6M5U3x+6K0PAS
SdycTsraQHZu3Iv0we4qYBMASiK+XKFZ9MVQKjwVMKkhYtvY4I5pparY6LEKLn+P
ktuJr/ATTfFyCm0kUCi1148snZb2yNCYkASpDb2k8l2O/AF/VPzisND4frJs+ctj
eBNQLS4nUAGbXdBqa8Vg/688/5zvacDDa7SV/mxiNfsvL/m1GUXBbyD2khDl1ku9
Ue7EtWYrVA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:14 2025 by rpki-client on console.sobornost.net