Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3132362e302f32332d3233203d3e203631393233.roa
File:                     3230302e372e3132362e302f32332d3233203d3e203631393233.roa (raw, json)
Hash identifier:          8WjvDxawW/jRxNvl4+SUFxrfShHJ/JdWikUfCr2ilds=
Subject key identifier:   17:86:AF:4D:A6:06:3A:C5:21:C4:2B:B2:2A:DF:62:2B:1A:7D:00:23
Certificate issuer:       /CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
Certificate serial:       27319CAE04A872AC4CE806450C8896CEB5C6E561
Authority key identifier: 1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3132362e302f32332d3233203d3e203631393233.roa
Signing time:             Mon 24 Mar 2025 15:20:48 +0000
ROA not before:           Mon 24 Mar 2025 15:15:48 +0000
ROA not after:            Mon 23 Mar 2026 15:20:48 +0000
asID:                     61923
IP address blocks:        200.7.126.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl
                          rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:31:9c:ae:04:a8:72:ac:4c:e8:06:45:0c:88:96:ce:b5:c6:e5:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
        Validity
            Not Before: Mar 24 15:15:48 2025 GMT
            Not After : Mar 23 15:20:48 2026 GMT
        Subject: CN=1786AF4DA6063AC521C42BB22ADF622B1A7D0023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bc:fe:da:b3:b4:90:a0:3f:b5:c6:a6:0c:bf:
                    52:9b:cd:70:ec:43:be:7d:e2:f0:51:44:26:7b:82:
                    52:be:aa:9e:a4:db:fd:b8:80:93:d1:32:25:0a:57:
                    56:a0:8b:3e:15:ca:85:24:ab:ce:c3:a8:04:b2:4c:
                    1e:d0:6a:8d:4a:21:fa:e7:61:44:bf:e3:48:37:85:
                    8c:b0:96:e0:cb:bc:48:a6:5e:c0:c2:95:1f:76:16:
                    7a:90:5e:38:a0:8b:03:66:47:4f:ed:6d:2e:47:9c:
                    12:3a:32:8f:fd:7d:2e:bf:f5:c3:fd:cd:21:dc:47:
                    99:99:a1:cb:11:4f:85:1c:34:c1:56:01:0c:16:f2:
                    cb:d3:68:dd:d9:87:1f:ef:ea:ea:b8:d3:28:1e:59:
                    f7:b0:9b:b6:11:dc:7d:c9:63:77:3f:59:b0:f6:5c:
                    dc:6e:44:e2:bb:26:9e:b3:ad:ec:8e:1d:65:0f:65:
                    e4:cb:57:eb:fe:50:11:d8:34:10:d0:ca:d8:31:77:
                    40:bf:bd:2a:d6:be:3a:b8:0c:2c:0a:2e:d8:45:5b:
                    03:c0:cc:0a:7c:35:dd:38:58:15:ee:a3:4d:9c:3d:
                    b2:75:19:6d:0a:cd:6b:df:a8:16:ee:70:6c:25:e5:
                    9b:cb:23:15:86:a2:95:cd:7b:89:0b:ba:76:09:06:
                    7d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:86:AF:4D:A6:06:3A:C5:21:C4:2B:B2:2A:DF:62:2B:1A:7D:00:23
            X509v3 Authority Key Identifier:
                keyid:1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3132362e302f32332d3233203d3e203631393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:56:0a:63:f2:83:d7:5b:f8:a0:bf:ef:5d:59:aa:da:12:60:
         ad:21:ff:dc:20:bb:db:0b:8a:82:0f:8a:cc:6c:0a:ae:a5:ea:
         a3:9c:67:25:76:6a:f9:32:22:e8:a2:2b:b8:a9:d5:74:52:6e:
         9b:b5:4a:f3:17:1c:19:d2:06:e9:e1:f2:09:dd:aa:9e:22:42:
         ef:0e:65:94:93:05:06:e7:b4:80:79:5f:ae:a7:39:fd:86:ad:
         74:47:f2:9f:64:b2:9f:28:b1:e7:3d:9a:17:56:f5:c4:df:a4:
         52:35:e4:98:81:07:fd:47:d0:f1:d9:1e:df:a8:24:38:e7:82:
         ac:48:86:55:c3:bb:a1:71:c4:5f:1a:9f:98:fe:3c:99:23:e0:
         6c:d5:18:a1:d9:35:dd:a3:39:06:6e:56:2b:0f:bd:97:9b:df:
         ee:77:d3:97:6d:44:7d:12:47:fb:66:bf:0e:4f:fd:ce:e3:28:
         2b:f8:9b:24:a4:ba:6a:25:05:55:34:8a:9e:f7:45:b7:9a:fb:
         55:af:6c:d9:9b:94:37:f3:a9:69:52:f9:ae:f2:f5:05:3f:1f:
         bd:19:c7:6e:42:7a:34:d5:33:d2:8e:6b:57:ff:f6:c2:a9:8b:
         9c:c2:b0:66:50:30:12:64:54:33:5d:65:d2:ed:a2:65:3e:45:
         91:37:e3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:14 2025 by rpki-client on console.sobornost.net