Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131332e302f32342d3234203d3e203631393233.roa
File:                     3230302e372e3131332e302f32342d3234203d3e203631393233.roa (raw, json)
Hash identifier:          +QfR39nLgVpBSy5//I0NBdJwT8XL92OhfNko7O+cnYc=
Subject key identifier:   44:DE:24:14:18:FD:2E:D2:9B:0E:D4:F3:40:B4:C8:39:B2:05:D7:35
Certificate issuer:       /CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
Certificate serial:       5A79E8046074F883974396A880479310606D7ACD
Authority key identifier: 1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131332e302f32342d3234203d3e203631393233.roa
Signing time:             Mon 24 Mar 2025 15:20:51 +0000
ROA not before:           Mon 24 Mar 2025 15:15:51 +0000
ROA not after:            Mon 23 Mar 2026 15:20:51 +0000
asID:                     61923
IP address blocks:        200.7.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl
                          rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 01:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:79:e8:04:60:74:f8:83:97:43:96:a8:80:47:93:10:60:6d:7a:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
        Validity
            Not Before: Mar 24 15:15:51 2025 GMT
            Not After : Mar 23 15:20:51 2026 GMT
        Subject: CN=44DE241418FD2ED29B0ED4F340B4C839B205D735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:60:55:4f:ca:84:ea:44:58:01:68:1c:70:91:
                    00:6d:e1:d9:00:83:fe:d2:0f:ab:ec:55:42:2a:8e:
                    c5:b8:fc:eb:05:c8:54:2b:a5:a3:04:0f:31:bd:0c:
                    94:85:bf:a8:9c:b3:a5:d9:00:8b:12:09:67:2e:9e:
                    cc:60:18:b0:08:f8:ea:33:eb:71:af:8e:a2:9b:30:
                    0d:ba:ab:45:0e:4d:94:fb:61:a6:b2:31:41:b6:78:
                    86:06:30:34:85:85:54:e2:c5:a5:44:ac:d5:07:b7:
                    49:d8:e6:95:c4:9e:d5:0f:fd:3a:c4:ab:a5:2e:a6:
                    98:27:e7:02:30:36:d4:18:2a:64:44:e4:9a:83:41:
                    5b:fa:05:35:c1:8b:3b:ca:cb:d5:a2:12:06:98:f3:
                    0e:ae:0b:d0:bb:49:3c:22:8e:44:ac:52:be:60:75:
                    89:0c:f7:6d:33:95:58:51:70:75:32:89:de:42:cf:
                    51:15:33:a8:95:00:99:3c:29:9a:f9:8d:4c:ed:74:
                    d8:bf:fe:2b:ba:8c:7c:4c:33:fe:a5:a4:1b:de:08:
                    37:cc:f8:ad:a5:d3:7a:f5:7e:00:82:06:00:7f:7f:
                    dd:cf:01:75:01:42:32:1c:18:0f:13:d1:d1:2b:3d:
                    8f:9c:89:9b:60:be:4a:3d:5f:57:07:c8:e6:df:11:
                    f1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:DE:24:14:18:FD:2E:D2:9B:0E:D4:F3:40:B4:C8:39:B2:05:D7:35
            X509v3 Authority Key Identifier:
                keyid:1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131332e302f32342d3234203d3e203631393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:ed:f0:55:c8:bb:92:b6:19:51:16:25:47:25:7a:25:19:22:
         8c:ca:cb:06:95:d1:0e:73:51:fe:14:ac:80:02:f3:11:e1:f9:
         f9:f7:c7:88:fb:ba:c4:ff:90:9e:e9:b8:11:3b:4e:88:4b:83:
         7b:9a:c7:14:31:98:bf:5f:88:5b:e2:97:68:e9:77:ba:46:b3:
         4f:97:51:7c:c1:d0:6f:5c:a9:65:b2:a3:c6:39:84:f0:74:a0:
         ba:8d:4b:36:1e:0c:3f:36:f1:6e:61:99:a0:1e:f5:ca:ff:02:
         ed:62:55:1d:46:24:50:3c:39:72:97:ef:b1:b1:9d:57:37:16:
         6a:80:87:40:57:9d:1e:6b:06:3d:96:3b:5d:25:ee:58:4e:2a:
         90:5a:d7:23:41:af:86:3e:32:cc:21:e3:2a:38:80:cd:8f:ef:
         28:47:d3:99:0b:66:ee:d2:1b:1b:3d:73:e4:88:3b:e9:36:d5:
         29:85:bf:a0:8d:f7:af:01:5b:ca:3c:49:32:c4:66:76:09:ad:
         17:91:af:a7:de:33:4c:58:b1:e3:67:c0:f3:03:9a:63:80:e1:
         d0:91:20:14:91:d2:5f:d4:97:ed:a3:bd:29:53:6b:73:82:cc:
         72:3e:4a:e2:6a:9e:09:f6:68:a6:d4:db:cb:83:7b:5e:da:1d:
         c4:dc:11:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:32:08 2025 by rpki-client