Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3132362e302f32342d3234203d3e203631393233.roa
File:                     3230302e372e3132362e302f32342d3234203d3e203631393233.roa (raw, json)
Hash identifier:          qpcvWQyhnjS5x0ofDHQMRoFbj3f0LgTD8aIfR3OlhIc=
Subject key identifier:   E8:1F:62:CD:55:FF:FA:0E:DB:06:A2:85:E6:C5:DE:0D:E2:D9:F3:D2
Certificate issuer:       /CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
Certificate serial:       41E6C8277090F2401A36E513C3D13A60DE8F7E30
Authority key identifier: 1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3132362e302f32342d3234203d3e203631393233.roa
Signing time:             Tue 15 Apr 2025 14:17:56 +0000
ROA not before:           Tue 15 Apr 2025 14:12:56 +0000
ROA not after:            Tue 14 Apr 2026 14:17:56 +0000
asID:                     61923
IP address blocks:        200.7.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl
                          rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 18:30:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:e6:c8:27:70:90:f2:40:1a:36:e5:13:c3:d1:3a:60:de:8f:7e:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
        Validity
            Not Before: Apr 15 14:12:56 2025 GMT
            Not After : Apr 14 14:17:56 2026 GMT
        Subject: CN=E81F62CD55FFFA0EDB06A285E6C5DE0DE2D9F3D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:2e:e5:ca:bb:81:f9:74:66:04:92:1a:91:29:
                    26:e0:9b:85:0c:3a:50:c1:c3:32:fa:12:9a:47:04:
                    a4:97:40:f2:b4:8d:5b:9f:fe:65:da:23:72:95:fc:
                    cd:ee:5e:9e:80:84:68:58:51:ef:ec:a9:9f:e0:dd:
                    4c:77:4d:53:f0:0c:9f:ff:d8:be:84:17:a6:de:0d:
                    5c:da:98:3d:02:0e:bf:16:c2:80:63:91:a1:63:69:
                    91:0b:ce:3e:f9:a1:a5:e0:79:6a:7c:6f:7e:b2:4b:
                    26:f7:d1:a0:fd:94:ec:50:84:74:9e:6e:d7:20:5e:
                    aa:1e:35:45:e4:b1:d9:ff:16:83:0b:a9:af:4d:96:
                    41:29:37:18:eb:7f:47:94:67:7f:7f:f3:13:5a:1b:
                    26:b5:01:d5:6d:b3:5b:d6:13:4c:b0:e6:93:33:d6:
                    af:a7:ac:e1:b6:74:ad:ae:1f:d8:07:a4:f6:10:f8:
                    c2:59:8e:f3:cb:dd:2b:a3:89:2d:b5:de:ea:bf:a3:
                    8c:36:a4:4e:b1:f2:76:c4:5c:8d:62:d8:a9:93:c6:
                    1f:f2:a1:a0:c2:61:b3:bd:26:5d:ab:93:68:63:d9:
                    e1:19:79:ef:6e:e5:58:77:d9:6d:ca:46:13:f1:62:
                    6a:06:6e:f0:bd:c3:c0:80:f5:25:ac:8c:89:83:62:
                    bc:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:1F:62:CD:55:FF:FA:0E:DB:06:A2:85:E6:C5:DE:0D:E2:D9:F3:D2
            X509v3 Authority Key Identifier:
                keyid:1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3132362e302f32342d3234203d3e203631393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:1f:7e:89:9b:13:dc:3b:3d:dd:ec:24:df:fb:ff:63:49:82:
         2f:36:fb:db:4d:2d:1b:dc:e4:cf:23:74:46:51:cd:72:e0:69:
         e7:f3:ca:2a:c6:c8:37:82:c3:7b:72:c8:27:4a:20:77:6a:e5:
         23:f8:73:da:13:84:ff:b3:e0:6a:8d:68:15:27:97:72:6b:46:
         9e:3a:50:98:1e:d8:b2:7b:8a:87:cf:07:d8:59:b3:6e:df:ae:
         d4:4e:1d:b2:3e:d6:f0:be:8b:29:04:6c:c1:55:08:ef:0c:e1:
         f9:13:27:be:1f:ef:94:6d:f3:6a:61:12:62:e1:26:34:9c:3a:
         91:33:ae:7e:bb:a4:37:1e:d1:23:8b:1f:6f:8c:b1:65:4e:be:
         7d:8a:fe:29:35:c9:f4:c3:85:7e:f6:39:51:25:42:bb:85:20:
         fe:b4:5c:fe:37:51:02:af:31:d9:65:41:ca:82:9a:21:b2:30:
         bd:5f:34:42:ed:31:6c:9a:f9:cf:6d:db:4b:de:7a:62:b1:d4:
         fa:79:46:e6:dc:51:49:68:3e:a6:cc:e2:ec:a9:10:8c:d9:9e:
         87:12:a4:56:0b:03:d7:c2:12:ac:37:fb:64:08:b5:b6:82:72:
         b1:fd:70:ac:67:e1:c8:4f:2b:4e:43:fb:ba:60:52:db:7c:5e:
         54:26:ed:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:23:49 2025 by rpki-client