Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3132342e302f32322d3232203d3e203631393233.roa
File:                     3230302e372e3132342e302f32322d3232203d3e203631393233.roa (raw, json)
Hash identifier:          THncRqVmWQjpijL6vXxCPhtVb9xV70b1biyYbq2+A4M=
Subject key identifier:   B9:ED:97:77:11:6F:4B:CB:D9:6B:C6:E6:E4:B8:15:3F:EB:33:DB:9B
Certificate issuer:       /CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
Certificate serial:       62AE3607CF11766FFB4AEE6ECAA568B7848CFD45
Authority key identifier: 1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3132342e302f32322d3232203d3e203631393233.roa
Signing time:             Mon 24 Mar 2025 15:20:50 +0000
ROA not before:           Mon 24 Mar 2025 15:15:50 +0000
ROA not after:            Mon 23 Mar 2026 15:20:50 +0000
asID:                     61923
IP address blocks:        200.7.124.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl
                          rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:ae:36:07:cf:11:76:6f:fb:4a:ee:6e:ca:a5:68:b7:84:8c:fd:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
        Validity
            Not Before: Mar 24 15:15:50 2025 GMT
            Not After : Mar 23 15:20:50 2026 GMT
        Subject: CN=B9ED9777116F4BCBD96BC6E6E4B8153FEB33DB9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4f:fe:2c:18:4e:4d:49:82:30:09:6a:04:05:
                    a6:3b:2e:c4:60:bb:b5:8c:7b:a3:59:4b:70:17:2f:
                    96:ed:7c:b5:d1:f7:e2:19:8e:bc:db:ec:bf:74:d9:
                    26:23:8a:b5:d1:93:40:46:b0:de:07:2a:98:08:8b:
                    1d:9c:30:d9:03:77:f0:dc:d9:42:e8:6c:28:32:c0:
                    83:5b:83:45:63:d2:81:13:b5:0b:ff:ff:ce:b9:f0:
                    75:62:cc:ed:2f:46:dd:6d:0e:4a:6b:bd:f8:51:10:
                    bd:7d:da:f7:68:28:ba:2d:4c:1e:3b:68:6d:39:3b:
                    35:df:f7:4f:89:28:82:80:e7:67:f8:1b:6c:4c:fc:
                    0b:4a:7b:d6:0b:b9:1d:e4:23:d5:09:6c:1d:41:9f:
                    fe:de:ab:38:de:a8:b4:f1:e3:73:9f:78:67:ef:45:
                    e4:a1:ed:4d:f8:37:52:36:4b:e7:43:8f:39:95:86:
                    86:4b:18:e3:7d:72:0a:38:05:da:99:a3:f3:6f:f6:
                    19:e5:41:9a:f4:f6:c3:b3:45:37:03:34:d2:e3:a4:
                    aa:94:be:5f:20:1e:62:df:9d:9a:20:4e:03:43:15:
                    da:53:25:3f:b8:2e:03:b3:2c:61:8a:0d:8b:7d:96:
                    76:86:d2:d3:be:55:b1:5c:b9:1d:86:c1:d8:48:de:
                    ac:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:ED:97:77:11:6F:4B:CB:D9:6B:C6:E6:E4:B8:15:3F:EB:33:DB:9B
            X509v3 Authority Key Identifier:
                keyid:1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3132342e302f32322d3232203d3e203631393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:62:3c:05:5c:ee:19:36:df:07:d6:90:10:0a:0a:45:0d:a2:
         4e:14:d9:99:8e:45:91:1d:89:87:1e:84:1c:8e:53:9f:23:8a:
         10:87:d5:c8:19:6e:74:69:b5:29:f2:d9:48:4c:4a:7f:58:c2:
         29:bc:20:f5:0d:d4:4f:cb:89:84:d6:94:df:ee:34:43:4e:d4:
         5e:24:6e:7d:80:c8:ce:a2:6c:25:92:e6:2b:0c:c9:f0:92:3b:
         1a:1d:01:3f:5d:44:aa:d3:90:6b:09:7f:1b:ad:9f:63:ee:63:
         52:42:bf:aa:a5:50:a3:0e:76:51:99:6e:f7:ff:57:07:d0:ac:
         be:ad:c9:dc:b2:1b:67:fb:33:ea:e6:f6:ef:4c:d1:5a:68:96:
         69:82:b6:75:3d:cf:ba:ea:2b:8e:90:a9:d1:ed:c0:24:82:6e:
         64:22:f5:71:0a:c1:e9:a2:a9:6c:00:70:2d:ff:f1:9d:46:56:
         17:54:1c:53:25:07:2c:07:81:7d:fb:dd:38:52:79:fa:52:ef:
         5f:43:96:0e:4d:50:ca:d5:2d:db:17:71:e1:d5:58:46:dd:34:
         05:5c:59:25:14:cc:3a:be:a2:69:9c:30:1e:51:c0:64:1f:96:
         94:1a:ef:f7:de:15:c5:b7:2d:4b:6b:90:16:35:b2:a7:58:bc:
         88:0a:f0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:14 2025 by rpki-client on console.sobornost.net