Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3132382e302f32302d3230203d3e203232313737.roa
File:                     3230302e3136322e3132382e302f32302d3230203d3e203232313737.roa (raw, json)
Hash identifier:          OZoOca0r1Vt+I0WJujG7CTtBb41aTK9LeTB9Bqz7opQ=
Subject key identifier:   7F:1D:06:F4:9A:08:E5:53:DF:57:18:85:01:D1:30:A2:6B:73:18:2F
Certificate issuer:       /CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Certificate serial:       5F20DF7681AFAB583EE30FB38EF2C5DC89B7BBD4
Authority key identifier: D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3132382e302f32302d3230203d3e203232313737.roa
Signing time:             Thu 04 Apr 2024 03:30:22 +0000
ROA not before:           Thu 04 Apr 2024 03:25:22 +0000
ROA not after:            Thu 03 Apr 2025 03:30:22 +0000
asID:                     22177
IP address blocks:        200.162.128.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl
                          rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:09:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:20:df:76:81:af:ab:58:3e:e3:0f:b3:8e:f2:c5:dc:89:b7:bb:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
        Validity
            Not Before: Apr  4 03:25:22 2024 GMT
            Not After : Apr  3 03:30:22 2025 GMT
        Subject: CN=7F1D06F49A08E553DF57188501D130A26B73182F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:61:67:8c:6a:00:4a:c0:10:ea:6a:12:6e:32:
                    55:2c:bf:4c:0b:c4:8e:a2:29:95:f0:e1:ad:ff:85:
                    78:10:cd:93:44:44:ce:43:1d:51:6a:d7:24:63:f0:
                    1d:c7:7a:91:5b:a0:9d:5f:67:fc:f1:fa:47:68:b8:
                    d4:bd:22:ac:5f:10:be:be:79:52:3a:fe:ae:37:c2:
                    33:5f:36:34:0f:2d:66:ab:fd:44:4a:c3:70:c7:24:
                    5c:18:b5:a2:7e:9c:ba:72:b6:90:51:92:b2:1d:bc:
                    f0:1e:87:95:f1:23:63:b6:81:2c:8e:6d:d8:53:5c:
                    a6:c4:42:1f:5a:00:46:4d:18:1d:cc:61:38:7b:1e:
                    ce:3a:be:fb:ec:ca:db:e1:e9:05:38:af:cb:4a:20:
                    56:ae:db:6c:d1:de:9a:1f:2b:88:1f:b4:bf:10:6d:
                    76:ae:89:22:6a:ab:56:a3:17:61:f1:74:70:ae:95:
                    23:9a:d3:8c:99:cf:53:6d:60:cc:a4:d6:86:98:fe:
                    f8:53:aa:54:f7:a9:82:cc:8b:1f:ca:46:e0:89:8c:
                    fd:74:05:9e:d9:8f:14:f8:c8:85:f1:bd:8c:0e:b4:
                    a5:5a:54:9d:83:67:6f:e7:f8:2c:0f:cd:f6:ae:bb:
                    90:aa:bc:c9:20:17:5c:78:5b:51:08:e7:14:c5:24:
                    b1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:1D:06:F4:9A:08:E5:53:DF:57:18:85:01:D1:30:A2:6B:73:18:2F
            X509v3 Authority Key Identifier:
                keyid:D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3132382e302f32302d3230203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.162.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         37:6e:e7:e4:b0:90:cd:4f:68:2d:12:73:cb:cd:3c:ad:c6:45:
         6a:2d:f6:41:68:dd:7b:cb:66:88:15:f2:b4:77:2c:a9:bf:42:
         28:f2:38:8a:51:47:a8:39:e9:95:26:92:f4:1f:97:a0:8e:8b:
         8b:62:e3:c9:8c:2f:4c:06:b5:56:64:37:9e:e3:e3:3c:f0:e9:
         05:cb:8b:f5:7a:95:bb:7d:e7:01:96:12:0d:af:9c:be:55:9b:
         cc:11:e1:1e:1a:07:fd:85:01:9c:b0:c0:c0:fb:05:c8:2f:0b:
         cd:e7:76:db:ec:f0:73:8d:5e:7a:18:2e:0a:05:89:b6:fc:0b:
         a1:69:f3:a7:e9:e7:14:0f:33:c1:11:3e:4b:ae:a5:4e:95:69:
         d5:78:99:b5:48:1a:f6:20:f0:0d:e8:f2:16:5d:3b:5d:6f:ad:
         99:c1:ec:ab:14:e6:82:86:60:6d:50:d7:a3:e4:28:5e:c4:34:
         f3:20:24:19:cc:43:c0:9c:73:a1:b8:b0:93:5f:c4:dc:d2:bc:
         51:e2:90:8c:06:67:2c:a9:fa:fa:b1:0f:e4:f4:ab:76:f6:bf:
         71:8f:6f:21:53:b2:05:ff:8e:21:f8:dd:f0:02:24:b0:2d:cc:
         74:59:94:e8:68:6c:01:bf:63:3e:4e:7a:80:fd:52:bc:15:ad:
         37:a2:ba:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:02 2024 by rpki-client on console-ams.rpki-client.org