Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3132322e302f32332d3233203d3e203631393233.roa
File:                     3230302e372e3132322e302f32332d3233203d3e203631393233.roa (raw, json)
Hash identifier:          v6XWdGA+Zpd5jwry8EPH5+5xJ6IZj50QS1xiWiuBXOc=
Subject key identifier:   47:A6:AC:53:13:1E:B4:34:A4:AB:59:C2:0E:70:29:44:23:9D:6C:BB
Certificate issuer:       /CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
Certificate serial:       7BA1E5EE34D4AB83C97094538ADCFEA51A77731D
Authority key identifier: 1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3132322e302f32332d3233203d3e203631393233.roa
Signing time:             Mon 24 Mar 2025 15:20:51 +0000
ROA not before:           Mon 24 Mar 2025 15:15:51 +0000
ROA not after:            Mon 23 Mar 2026 15:20:51 +0000
asID:                     61923
IP address blocks:        200.7.122.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl
                          rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:a1:e5:ee:34:d4:ab:83:c9:70:94:53:8a:dc:fe:a5:1a:77:73:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
        Validity
            Not Before: Mar 24 15:15:51 2025 GMT
            Not After : Mar 23 15:20:51 2026 GMT
        Subject: CN=47A6AC53131EB434A4AB59C20E702944239D6CBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f3:c5:a6:be:78:bf:d9:be:08:2a:00:39:f9:
                    64:58:d5:bf:dd:88:ce:eb:f5:f4:2b:e3:7f:f4:64:
                    48:ef:c4:70:f6:a4:9a:83:90:3a:34:c8:9f:fa:7a:
                    d2:24:44:55:95:be:b8:0d:7f:6c:d2:74:43:6a:8a:
                    52:53:40:9b:c1:35:77:51:16:33:dc:98:58:fc:9b:
                    a2:dd:3b:9d:28:78:99:c4:f6:b6:ce:b1:c6:2f:c6:
                    a9:d8:01:b3:86:5b:52:38:f5:e5:dd:70:a5:e6:59:
                    c5:9c:9e:7d:0e:d9:d9:32:44:c4:3f:c3:21:56:01:
                    46:e5:5c:7c:0a:77:85:90:71:20:ea:42:72:84:ef:
                    5d:57:4e:9d:07:e4:f9:d0:9e:59:6e:9a:f7:80:53:
                    69:22:c6:14:2e:7c:2b:32:78:3f:d9:99:01:78:0d:
                    b9:39:7a:a1:65:fd:84:8d:03:df:f5:83:dc:bc:ae:
                    83:0f:0d:b4:22:ff:44:38:d7:18:47:5b:e8:82:cf:
                    b2:8b:7e:02:e7:c8:e6:f0:d3:a7:75:c3:2b:5f:6f:
                    cf:33:29:64:20:01:08:b1:f8:5a:5c:5f:09:56:b9:
                    01:e6:4d:b7:42:16:a3:7d:91:dc:c7:56:e8:24:76:
                    ea:b9:fc:9e:b0:5b:16:30:4c:26:23:9b:af:f2:10:
                    e9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A6:AC:53:13:1E:B4:34:A4:AB:59:C2:0E:70:29:44:23:9D:6C:BB
            X509v3 Authority Key Identifier:
                keyid:1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3132322e302f32332d3233203d3e203631393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:21:61:48:fc:8a:68:6b:53:01:da:a2:a4:f3:7c:bb:1e:14:
         63:93:2e:54:8a:98:05:a3:99:d8:6b:10:ce:08:e5:f0:80:02:
         c1:c2:e4:24:4a:a9:0f:e3:44:ca:e7:de:fb:2d:76:ca:20:8e:
         51:2b:2b:59:37:35:c4:bb:98:d1:22:ce:c3:2b:1f:f5:d8:d2:
         8d:fc:bc:15:99:81:e5:5c:7e:52:ee:03:54:50:74:99:f5:9c:
         97:0a:0a:a1:da:02:bb:c3:60:53:f3:e8:9b:dc:96:49:e6:37:
         52:72:c0:86:2e:fa:ec:cb:42:21:ea:95:89:a8:af:46:50:ec:
         d2:e0:75:d9:a5:62:19:60:b0:9c:ff:22:2a:9a:e7:03:a1:72:
         c4:59:0a:5a:f7:f9:dd:a8:6f:71:2a:a6:53:36:0e:5c:2a:e0:
         8c:7e:7f:40:c8:c9:12:50:f0:61:6c:da:6f:c3:9f:8d:49:fe:
         d5:9a:de:ba:02:ff:3d:bb:89:ca:66:c9:3e:6a:c7:e5:b4:31:
         ac:6b:5d:20:dd:22:af:58:2f:8f:f7:89:b1:7e:7a:45:8a:7a:
         55:5a:59:3f:c2:e7:a4:dd:b7:a3:4a:f4:0d:c6:20:09:dd:3e:
         bf:b8:0f:5d:d9:0e:ab:b4:32:bf:7f:35:36:16:57:ae:48:df:
         8e:7e:7d:a6
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUe6Hl7jTUq4PJcJRTitz+pRp3cx0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY1RjgzMUU5ODgzQUVGOEI3NkRBMTk0QTFFNUMxREYw
NzE3RDNFMTAeFw0yNTAzMjQxNTE1NTFaFw0yNjAzMjMxNTIwNTFaMDMxMTAvBgNV
BAMTKDQ3QTZBQzUzMTMxRUI0MzRBNEFCNTlDMjBFNzAyOTQ0MjM5RDZDQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl88Wmvni/2b4IKgA5+WRY1b/d
iM7r9fQr43/0ZEjvxHD2pJqDkDo0yJ/6etIkRFWVvrgNf2zSdENqilJTQJvBNXdR
FjPcmFj8m6LdO50oeJnE9rbOscYvxqnYAbOGW1I49eXdcKXmWcWcnn0O2dkyRMQ/
wyFWAUblXHwKd4WQcSDqQnKE711XTp0H5PnQnllumveAU2kixhQufCsyeD/ZmQF4
Dbk5eqFl/YSNA9/1g9y8roMPDbQi/0Q41xhHW+iCz7KLfgLnyObw06d1wytfb88z
KWQgAQix+FpcXwlWuQHmTbdCFqN9kdzHVugkduq5/J6wWxYwTCYjm6/yEOkRAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUR6asUxMetDSkq1nCDnApRCOdbLswHwYDVR0j
BBgwFoAUH1+DHpiDrvi3baGUoeXB3wcX0+EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTdZeEF2aXNEU2FCaVlkdllnekRGVEF0eDNkc1JianFaVjdRYkxYNnVt
cDEvMC8xRjVGODMxRTk4ODNBRUY4Qjc2REExOTRBMUU1QzFERjA3MTdEM0UxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGNUY4MzFFOTg4M0FFRjhC
NzZEQTE5NEExRTVDMURGMDcxN0QzRTEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU3WXhBdmlzRFNhQmlZZHZZZ3pERlRBdHgzZHNSYmpxWlY3UWJMWDZ1bXAxLzAv
MzIzMDMwMmUzNzJlMzEzMjMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzYzMTM5
MzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAcgHejANBgkqhkiG9w0BAQsFAAOCAQEAmyFhSPyKaGtT
AdqipPN8ux4UY5MuVIqYBaOZ2GsQzgjl8IACwcLkJEqpD+NEyufe+y12yiCOUSsr
WTc1xLuY0SLOwysf9djSjfy8FZmB5Vx+Uu4DVFB0mfWclwoKodoCu8NgU/Pom9yW
SeY3UnLAhi767MtCIeqViaivRlDs0uB12aViGWCwnP8iKprnA6FyxFkKWvf53ahv
cSqmUzYOXCrgjH5/QMjJElDwYWzab8OfjUn+1ZreugL/PbuJymbJPmrH5bQxrGtd
IN0ir1gvj/eJsX56RYp6VVpZP8LnpN23o0r0DcYgCd0+v7gPXdkOq7Qyv381NhZX
rkjfjn59pg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:14 2025 by rpki-client on console.sobornost.net