Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3132352e302f32342d3234203d3e203631393233.roa
File:                     3230302e372e3132352e302f32342d3234203d3e203631393233.roa (raw, json)
Hash identifier:          MqMxlJPnys1O6HOIYpZkX227Pn5DoUqIHyYfyvPrvwA=
Subject key identifier:   74:C1:39:C3:D1:3E:F8:21:66:50:54:E7:23:37:FB:AB:1F:D3:CD:8B
Certificate issuer:       /CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
Certificate serial:       4C919692D00E697400C7F6F6A530DE537DE63F61
Authority key identifier: 1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3132352e302f32342d3234203d3e203631393233.roa
Signing time:             Tue 15 Apr 2025 15:25:11 +0000
ROA not before:           Tue 15 Apr 2025 15:20:11 +0000
ROA not after:            Tue 14 Apr 2026 15:25:11 +0000
asID:                     61923
IP address blocks:        200.7.125.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl
                          rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:91:96:92:d0:0e:69:74:00:c7:f6:f6:a5:30:de:53:7d:e6:3f:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
        Validity
            Not Before: Apr 15 15:20:11 2025 GMT
            Not After : Apr 14 15:25:11 2026 GMT
        Subject: CN=74C139C3D13EF821665054E72337FBAB1FD3CD8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9c:b1:00:27:ce:9a:92:5b:b6:35:5e:81:62:
                    9e:cd:e8:f1:77:ad:15:ab:0a:e3:e4:19:e9:7b:0d:
                    1c:f1:cc:b9:68:d5:75:1b:94:67:af:1f:21:73:6d:
                    7b:7b:b6:1f:57:dd:02:86:24:8e:88:ab:0e:0e:36:
                    a4:cc:b5:ee:88:78:24:78:0e:ae:93:e2:36:4c:0e:
                    d4:e8:67:6e:b6:f7:6c:ad:3d:63:20:67:6c:bb:25:
                    09:a4:be:b3:b5:66:ef:b7:f8:2b:60:f5:f9:ab:2b:
                    3d:61:95:b6:8d:5f:5b:ab:23:a7:5e:0f:d6:a8:cf:
                    7b:74:c0:1a:09:e0:0b:13:29:ee:97:e1:84:c7:1c:
                    9e:8e:32:0d:c7:c1:08:f0:bf:5c:97:62:88:b6:5e:
                    f4:1a:a2:60:9a:e3:c6:bd:ae:ca:89:0a:ac:b2:2e:
                    2b:6a:3f:05:3a:1e:59:d6:50:08:e5:88:de:3c:cd:
                    43:e9:37:60:a8:d0:f5:f2:92:e7:3b:da:85:67:ce:
                    16:f8:a4:42:83:b2:51:bc:de:2d:d0:85:7e:9a:f2:
                    5d:61:6f:83:51:df:13:f6:75:0d:52:69:8c:34:ca:
                    1e:95:5a:66:da:ee:18:34:70:69:bf:6b:14:8a:27:
                    ea:18:0e:e3:c8:c9:55:f0:28:43:90:f0:e2:8b:fd:
                    34:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C1:39:C3:D1:3E:F8:21:66:50:54:E7:23:37:FB:AB:1F:D3:CD:8B
            X509v3 Authority Key Identifier:
                keyid:1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3132352e302f32342d3234203d3e203631393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:1b:9f:bd:f2:91:fe:9e:2c:bf:3f:47:a7:3c:ab:72:c9:48:
         86:05:1a:b7:b1:fc:0e:97:c3:8a:7f:74:7a:26:49:09:ac:84:
         fd:20:d5:b0:5c:78:7c:f2:55:c1:d0:08:fd:29:47:6c:95:f8:
         50:03:77:e5:ac:b4:ae:42:61:f1:c3:12:d3:8e:f8:79:92:e1:
         7f:d4:75:de:3e:e2:7a:95:47:d4:e6:14:4f:08:8c:d5:02:e7:
         5e:a3:9b:99:89:11:52:06:9d:5a:e1:e6:96:07:24:6c:09:00:
         56:07:37:5e:0a:de:0a:6d:db:98:9e:65:ef:46:a7:ef:88:73:
         d1:bc:04:86:eb:7e:8f:42:33:61:69:b8:fa:f1:01:4c:12:8c:
         8a:78:fa:55:bc:c8:3c:5a:ba:a4:73:30:3b:19:6e:c9:f2:8a:
         6f:90:c2:0a:b4:ca:86:d0:1c:2c:cb:01:7c:fe:b2:a9:ab:d1:
         fc:e7:5a:ba:cb:54:36:b5:27:0d:d4:01:13:66:fb:6f:bf:ac:
         4a:12:ec:b2:68:9e:0e:62:fb:e3:f5:5d:c5:be:d6:b7:0e:a7:
         60:98:15:d7:38:4c:21:f1:f3:64:39:0b:4e:d9:f4:b4:d4:c3:
         b8:8c:c4:68:9a:c5:7a:2f:40:65:e4:7a:3f:f5:c0:84:65:36:
         41:fd:b5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:14 2025 by rpki-client on console.sobornost.net