Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131382e302f32332d3233203d3e203631393233.roa
File:                     3230302e372e3131382e302f32332d3233203d3e203631393233.roa (raw, json)
Hash identifier:          v+uBCWt/KoLBSAT50HqffSwPVWUQzkl8DPwq8c8o5B8=
Subject key identifier:   21:F3:C6:5C:D3:62:42:60:E7:35:05:11:D1:5E:E5:38:85:31:6A:72
Certificate issuer:       /CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
Certificate serial:       3E85F101F6BF57DB3418E6408ACFAECCF2BED1AD
Authority key identifier: 1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131382e302f32332d3233203d3e203631393233.roa
Signing time:             Mon 24 Mar 2025 15:20:50 +0000
ROA not before:           Mon 24 Mar 2025 15:15:50 +0000
ROA not after:            Mon 23 Mar 2026 15:20:50 +0000
asID:                     61923
IP address blocks:        200.7.118.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl
                          rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 18:30:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:85:f1:01:f6:bf:57:db:34:18:e6:40:8a:cf:ae:cc:f2:be:d1:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
        Validity
            Not Before: Mar 24 15:15:50 2025 GMT
            Not After : Mar 23 15:20:50 2026 GMT
        Subject: CN=21F3C65CD3624260E7350511D15EE53885316A72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:43:80:51:cd:1a:a9:e6:12:f3:f0:b4:bd:5a:
                    4a:fc:ad:02:1c:4d:fd:ea:79:bb:e2:68:b0:8c:69:
                    bc:39:e5:65:fd:5b:a7:ba:3d:45:9e:af:bc:05:c7:
                    a4:b1:92:e2:aa:c7:27:16:9f:89:a0:3f:c5:1b:7c:
                    2c:d0:e0:9c:d4:d6:eb:98:75:d8:3c:97:f4:63:88:
                    6c:b3:aa:26:d8:bb:2c:a2:d0:5a:91:f7:28:51:cb:
                    09:19:5d:06:27:bd:64:e3:3f:92:21:ac:45:23:20:
                    99:85:18:5f:89:69:ee:7f:7a:be:7e:cd:35:aa:fb:
                    a7:24:8d:ec:e1:51:92:8b:d9:3e:72:36:3e:4b:2f:
                    ea:e0:e2:8b:12:61:23:bf:3d:f5:e1:af:85:80:15:
                    2a:47:9e:52:bb:66:9d:ba:e4:ff:c4:14:71:60:36:
                    6e:8a:1e:1c:f6:f5:a6:5c:a6:d7:ba:e0:3d:b9:a8:
                    20:1b:f4:a8:58:0b:0f:77:30:fa:86:17:e3:95:93:
                    42:f1:49:4c:7f:98:de:5b:5c:fc:74:4a:60:48:f1:
                    8d:3a:5c:73:a3:44:d8:3c:d0:ed:07:1b:33:6a:44:
                    79:6e:77:78:79:74:27:aa:6b:93:00:78:03:95:29:
                    b8:d6:61:c9:9d:ad:eb:b1:62:91:c2:6d:95:41:7c:
                    6a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:F3:C6:5C:D3:62:42:60:E7:35:05:11:D1:5E:E5:38:85:31:6A:72
            X509v3 Authority Key Identifier:
                keyid:1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131382e302f32332d3233203d3e203631393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:37:d8:00:af:38:4c:4f:b9:74:7a:61:01:03:4f:2b:bc:e2:
         4a:e8:94:ab:eb:5c:eb:b7:82:06:c1:0e:02:7b:9d:2d:cf:60:
         62:bc:48:57:c2:a8:25:75:76:89:a2:2b:31:9e:ab:d8:57:81:
         1c:87:58:18:fc:99:b6:a3:ae:05:eb:6f:80:c5:01:db:ab:e3:
         83:06:4b:16:98:cf:f3:a2:a2:b3:92:1a:bb:21:42:40:dc:dc:
         21:95:b3:4b:12:7f:77:8a:b2:29:a2:44:70:e1:d8:16:6b:9f:
         f8:78:2a:68:b2:51:99:97:8b:54:e9:14:ae:f7:ff:50:e8:06:
         32:85:42:e2:8f:2d:cd:e7:bd:39:9b:ba:a2:08:b2:0d:19:9c:
         32:69:80:d5:7b:ac:83:4b:02:9d:0a:10:06:f5:8e:2a:42:d8:
         6d:d5:c0:bc:a3:23:0e:aa:5c:92:a1:14:78:c3:5f:39:a5:23:
         12:91:33:f4:ec:21:fb:43:5c:29:7a:cd:a8:db:85:cd:ed:fd:
         60:53:1f:f7:de:27:1b:56:e4:d7:80:b8:a8:69:c3:31:8c:b7:
         40:33:58:ff:ac:dc:6f:2e:8c:4e:26:d2:d9:be:b5:66:78:40:
         82:8f:9b:24:10:f1:73:04:51:6c:ab:21:78:84:77:dc:ef:f0:
         e6:4e:f4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:07:28 2025 by rpki-client