Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3132312e302f32342d3234203d3e203631393233.roa
File:                     3230302e372e3132312e302f32342d3234203d3e203631393233.roa (raw, json)
Hash identifier:          0g0VMN8024K6o6MJ2INDKDBO+eZooDQi3F0v22yY9wg=
Subject key identifier:   87:82:FE:33:99:01:A1:A0:24:5A:FA:4B:88:AE:50:4D:08:90:68:23
Certificate issuer:       /CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
Certificate serial:       7145D626650F4EACD2BA99559B5A200B197E7552
Authority key identifier: 1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3132312e302f32342d3234203d3e203631393233.roa
Signing time:             Tue 15 Apr 2025 15:23:53 +0000
ROA not before:           Tue 15 Apr 2025 15:18:53 +0000
ROA not after:            Tue 14 Apr 2026 15:23:53 +0000
asID:                     61923
IP address blocks:        200.7.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl
                          rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 06 May 2025 23:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:45:d6:26:65:0f:4e:ac:d2:ba:99:55:9b:5a:20:0b:19:7e:75:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
        Validity
            Not Before: Apr 15 15:18:53 2025 GMT
            Not After : Apr 14 15:23:53 2026 GMT
        Subject: CN=8782FE339901A1A0245AFA4B88AE504D08906823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e8:f6:5a:f4:fe:68:f0:cc:2b:91:aa:b3:b3:
                    32:fa:43:47:b8:d6:ea:01:8c:b9:b5:ae:47:51:b9:
                    eb:6d:3b:87:7c:d0:6f:5f:4a:c8:0d:79:96:e5:fc:
                    a5:1e:98:66:ac:54:ac:5e:0a:92:ca:3c:08:61:59:
                    a3:56:98:37:b0:46:08:6c:a0:bd:26:cb:76:65:a1:
                    44:dc:9b:75:c7:09:98:41:18:ce:0c:b1:9d:49:3e:
                    f4:a7:d5:27:48:51:e4:5e:5f:a9:dc:e3:32:0f:04:
                    d4:2f:b0:25:50:13:62:70:9b:14:0e:ed:80:d4:34:
                    1f:fb:d8:49:b8:85:e9:1f:90:09:7e:36:f0:ef:19:
                    6f:be:05:52:07:50:83:90:5c:48:8b:ba:f6:99:79:
                    91:4a:b8:5d:fd:ec:29:39:9c:55:13:b8:5d:86:1b:
                    15:49:20:ac:bc:6e:55:c0:aa:66:d7:30:40:e8:10:
                    b5:62:33:89:8c:52:2e:41:a2:23:c6:4c:78:d9:f4:
                    35:ff:45:7f:15:13:32:67:60:4e:37:a8:1f:fb:f2:
                    60:91:6e:d7:1b:59:de:f4:ec:b6:88:bf:73:9a:87:
                    83:9f:05:55:e1:e4:f1:ad:81:15:47:d1:cb:d4:0b:
                    2c:24:f5:41:6a:87:3f:2a:d6:e6:c9:c7:5f:9d:e8:
                    ee:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:82:FE:33:99:01:A1:A0:24:5A:FA:4B:88:AE:50:4D:08:90:68:23
            X509v3 Authority Key Identifier:
                keyid:1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3132312e302f32342d3234203d3e203631393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:56:08:33:3e:20:53:2c:a8:80:70:22:7f:a0:ec:34:2e:b1:
         14:34:47:b9:6d:3c:58:20:77:3a:5e:45:f6:ea:36:06:bf:58:
         b2:9a:52:1c:06:9b:77:99:4f:57:18:0d:4f:cf:96:2f:a7:9c:
         26:84:ef:ff:3b:52:92:a7:e4:bd:ea:b0:40:9f:9c:c8:5e:a7:
         ee:6e:12:64:55:20:c4:10:45:42:7e:41:b1:30:cb:2f:ab:73:
         f0:c4:39:e2:a6:ba:e8:73:59:12:85:b3:33:e2:25:ab:86:6f:
         0b:62:2d:c8:f7:22:30:23:05:17:ae:98:67:d3:90:a3:11:08:
         85:cc:3d:d7:14:fe:db:df:f0:8b:cb:b3:2a:68:87:1e:9c:21:
         6b:9f:55:32:f9:0f:55:fb:17:08:d2:53:72:de:7b:f1:9a:d8:
         1c:0f:71:99:f9:6f:7d:0b:06:0b:cc:2e:47:45:a8:89:98:56:
         b9:93:d8:b6:77:4b:33:1a:ad:fb:7b:5b:f7:e0:3e:01:17:bd:
         3b:eb:87:3d:64:73:6e:d7:2e:2a:7a:e1:92:02:60:ed:f3:a1:
         90:da:0a:86:ef:de:da:fc:87:4e:f0:9c:e2:d6:88:41:5d:36:
         d1:83:8c:a1:36:24:e8:92:e6:64:f7:6c:28:ee:48:09:5f:93:
         9e:83:24:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 14:12:25 2025 by rpki-client