Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3132342e302f32332d3233203d3e203631393233.roa
File:                     3230302e372e3132342e302f32332d3233203d3e203631393233.roa (raw, json)
Hash identifier:          LsQWbRkJEsYbeZsV0GscsxwZJxB9iSVmyX2N/O/3lBc=
Subject key identifier:   52:4C:78:14:E5:44:08:BE:4D:4F:FD:F6:F5:A4:31:52:88:07:53:0F
Certificate issuer:       /CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
Certificate serial:       3FC91AADE89052AF0371C4CC541224FF7FA50F27
Authority key identifier: 1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3132342e302f32332d3233203d3e203631393233.roa
Signing time:             Mon 24 Mar 2025 15:20:48 +0000
ROA not before:           Mon 24 Mar 2025 15:15:48 +0000
ROA not after:            Mon 23 Mar 2026 15:20:48 +0000
asID:                     61923
IP address blocks:        200.7.124.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl
                          rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:c9:1a:ad:e8:90:52:af:03:71:c4:cc:54:12:24:ff:7f:a5:0f:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
        Validity
            Not Before: Mar 24 15:15:48 2025 GMT
            Not After : Mar 23 15:20:48 2026 GMT
        Subject: CN=524C7814E54408BE4D4FFDF6F5A431528807530F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:06:a5:06:85:8f:38:e0:42:d3:b8:40:b6:ab:
                    70:2c:3f:dd:c3:4b:e6:73:fd:97:14:d8:b5:30:50:
                    33:bf:d6:6d:9e:b8:96:b0:5a:72:4e:21:49:2b:18:
                    04:af:bb:58:d7:52:07:cc:73:dd:c2:49:e6:11:fa:
                    9d:ab:7c:20:ab:09:2c:67:40:ae:11:98:e4:5e:78:
                    b1:d4:2f:95:40:6a:fd:a7:89:d2:10:76:68:2e:77:
                    0b:34:97:71:92:b7:0b:06:81:be:90:32:33:3a:a1:
                    4e:2e:cc:23:8d:92:a5:8a:97:c6:f6:23:52:48:0d:
                    1c:58:30:b2:38:6e:75:b4:e6:4a:b1:8e:fa:f0:f6:
                    15:0d:d0:09:7c:07:ab:f6:00:d8:6b:23:ab:52:0e:
                    78:a2:33:b3:dc:50:66:62:d1:f0:17:3c:b8:6e:46:
                    e8:e3:70:69:46:59:96:66:07:a5:0d:d6:d5:8f:9a:
                    50:70:95:e1:1f:03:3d:54:93:1a:5a:c5:17:03:ed:
                    3e:fa:93:96:3e:99:1a:fc:35:cd:a9:ab:12:36:ff:
                    74:9d:50:0e:55:da:94:69:0e:0c:2a:db:a4:99:df:
                    88:35:e6:78:f9:a0:0e:80:ed:51:d2:06:92:60:86:
                    3d:22:55:c8:51:34:01:46:25:db:84:b3:ad:7f:ac:
                    1d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:4C:78:14:E5:44:08:BE:4D:4F:FD:F6:F5:A4:31:52:88:07:53:0F
            X509v3 Authority Key Identifier:
                keyid:1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3132342e302f32332d3233203d3e203631393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:fe:bb:e8:b0:87:ad:71:d6:8c:e2:e1:cc:75:a0:d1:c8:04:
         9c:34:45:75:eb:c8:5d:05:ce:a0:d3:27:6c:84:8d:fe:5e:0e:
         15:ab:ab:2c:5b:7d:44:da:3b:47:17:68:27:a6:a8:6a:8b:b7:
         f4:cd:20:c3:3a:a9:4d:55:b4:7a:15:8a:a3:af:d6:c4:28:8a:
         71:66:0e:f8:ab:7f:71:f9:a0:0f:d1:4c:19:47:3c:8d:0f:5a:
         e7:22:2f:92:22:80:6c:91:dc:a8:cc:04:73:65:1b:6b:5b:96:
         60:e8:dc:25:97:9b:95:e4:53:15:a6:49:6a:59:ae:e7:c1:3a:
         6d:5f:c1:b0:66:9e:63:a8:a5:e9:57:aa:25:f9:54:42:2e:50:
         a6:ba:54:17:61:be:cf:49:ff:17:22:ca:11:b9:9a:d6:17:0b:
         49:ba:ae:f4:0b:2d:e0:38:2e:31:4f:81:fc:e7:3d:c0:51:c0:
         f7:d4:fe:70:7e:2a:cc:0f:36:25:a2:20:19:9c:89:7c:7b:df:
         86:04:16:b6:e5:87:b7:72:ed:4e:f2:63:e9:ef:01:23:a1:59:
         99:f8:27:41:e7:97:a0:01:b2:86:06:61:36:f2:cb:32:6e:dc:
         3d:67:65:ea:20:83:33:68:b2:7c:b0:2c:da:32:55:0e:f8:4a:
         b8:57:aa:d5
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUP8kareiQUq8DccTMVBIk/3+lDycwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY1RjgzMUU5ODgzQUVGOEI3NkRBMTk0QTFFNUMxREYw
NzE3RDNFMTAeFw0yNTAzMjQxNTE1NDhaFw0yNjAzMjMxNTIwNDhaMDMxMTAvBgNV
BAMTKDUyNEM3ODE0RTU0NDA4QkU0RDRGRkRGNkY1QTQzMTUyODgwNzUzMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoBqUGhY844ELTuEC2q3AsP93D
S+Zz/ZcU2LUwUDO/1m2euJawWnJOIUkrGASvu1jXUgfMc93CSeYR+p2rfCCrCSxn
QK4RmOReeLHUL5VAav2nidIQdmgudws0l3GStwsGgb6QMjM6oU4uzCONkqWKl8b2
I1JIDRxYMLI4bnW05kqxjvrw9hUN0Al8B6v2ANhrI6tSDniiM7PcUGZi0fAXPLhu
RujjcGlGWZZmB6UN1tWPmlBwleEfAz1UkxpaxRcD7T76k5Y+mRr8Nc2pqxI2/3Sd
UA5V2pRpDgwq26SZ34g15nj5oA6A7VHSBpJghj0iVchRNAFGJduEs61/rB0BAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUUkx4FOVECL5NT/329aQxUogHUw8wHwYDVR0j
BBgwFoAUH1+DHpiDrvi3baGUoeXB3wcX0+EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTdZeEF2aXNEU2FCaVlkdllnekRGVEF0eDNkc1JianFaVjdRYkxYNnVt
cDEvMC8xRjVGODMxRTk4ODNBRUY4Qjc2REExOTRBMUU1QzFERjA3MTdEM0UxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGNUY4MzFFOTg4M0FFRjhC
NzZEQTE5NEExRTVDMURGMDcxN0QzRTEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU3WXhBdmlzRFNhQmlZZHZZZ3pERlRBdHgzZHNSYmpxWlY3UWJMWDZ1bXAxLzAv
MzIzMDMwMmUzNzJlMzEzMjM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzYzMTM5
MzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAcgHfDANBgkqhkiG9w0BAQsFAAOCAQEATv676LCHrXHW
jOLhzHWg0cgEnDRFdevIXQXOoNMnbISN/l4OFaurLFt9RNo7RxdoJ6aoaou39M0g
wzqpTVW0ehWKo6/WxCiKcWYO+Kt/cfmgD9FMGUc8jQ9a5yIvkiKAbJHcqMwEc2Ub
a1uWYOjcJZebleRTFaZJalmu58E6bV/BsGaeY6il6VeqJflUQi5QprpUF2G+z0n/
FyLKEbma1hcLSbqu9Ast4DguMU+B/Oc9wFHA99T+cH4qzA82JaIgGZyJfHvfhgQW
tuWHt3LtTvJj6e8BI6FZmfgnQeeXoAGyhgZhNvLLMm7cPWdl6iCDM2iyfLAs2jJV
DvhKuFeq1Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:14 2025 by rpki-client on console.sobornost.net