Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3132382e302f32302d3234203d3e203232313737.roa
File:                     3230302e3136322e3132382e302f32302d3234203d3e203232313737.roa (raw, json)
Hash identifier:          fXVjzrtVnPP9XK2zXAtUOHcPXjuf5zsG+VqQpSduV98=
Subject key identifier:   5B:D4:52:EB:F4:0F:CD:30:A3:D0:28:64:A4:DB:7B:48:D9:93:9F:F5
Certificate issuer:       /CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Certificate serial:       1D755814699740AD2C1F6245A2F7225D4E9E1F01
Authority key identifier: D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3132382e302f32302d3234203d3e203232313737.roa
Signing time:             Sat 03 Aug 2024 20:18:25 +0000
ROA not before:           Sat 03 Aug 2024 20:13:25 +0000
ROA not after:            Sat 02 Aug 2025 20:18:25 +0000
asID:                     22177
IP address blocks:        200.162.128.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl
                          rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:75:58:14:69:97:40:ad:2c:1f:62:45:a2:f7:22:5d:4e:9e:1f:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
        Validity
            Not Before: Aug  3 20:13:25 2024 GMT
            Not After : Aug  2 20:18:25 2025 GMT
        Subject: CN=5BD452EBF40FCD30A3D02864A4DB7B48D9939FF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1f:59:e2:19:5e:8c:5d:f0:2e:39:a3:83:d3:
                    0a:95:ea:d3:dc:bf:22:e6:c1:80:78:f5:21:e2:ab:
                    02:aa:fd:6d:10:8c:a9:86:d8:bd:79:31:42:10:a8:
                    a1:c4:46:7e:a2:ff:14:b1:99:ba:87:99:96:2b:44:
                    12:47:e4:6c:04:3c:52:87:1f:55:fb:8a:2f:a0:f8:
                    e1:c9:2f:70:73:6b:6b:b4:e0:a2:ca:0a:51:d8:76:
                    e2:ac:47:86:29:66:97:55:ca:4b:a2:54:52:49:5b:
                    58:ae:47:4a:9f:1e:7d:89:21:6e:50:5c:cd:65:97:
                    8e:e2:b4:cb:cf:0a:51:45:c6:07:4e:97:35:d5:39:
                    0d:17:15:2b:aa:91:17:45:c8:20:94:c2:18:7c:da:
                    60:6c:7a:fd:5b:fb:2d:cf:fb:b4:8d:35:83:3f:fc:
                    ca:6c:72:14:c9:08:04:13:a5:0f:ee:7c:73:c5:19:
                    d2:d0:75:23:5a:65:4b:8c:08:21:e2:f3:16:e3:24:
                    50:1d:8a:6a:8d:58:55:a2:94:7f:a8:9b:29:f9:62:
                    50:9c:fe:4f:19:04:d5:9f:20:2e:15:97:eb:6c:c4:
                    15:c7:d5:e4:d0:b6:c9:40:41:35:c5:48:61:5f:c1:
                    e1:d9:9a:b0:53:07:ab:e3:00:96:b9:aa:e9:ff:ec:
                    0f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:D4:52:EB:F4:0F:CD:30:A3:D0:28:64:A4:DB:7B:48:D9:93:9F:F5
            X509v3 Authority Key Identifier:
                keyid:D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3132382e302f32302d3234203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.162.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         40:d6:10:97:14:e4:f9:86:6d:fa:95:c8:53:da:d5:e1:63:52:
         d8:ba:f4:40:06:88:ba:38:aa:35:7e:2c:47:3f:df:95:63:ec:
         0e:e6:ab:21:be:8a:4a:93:6b:81:86:fd:11:01:bf:4a:ca:47:
         37:be:cf:85:03:2f:39:5c:9c:f5:78:e5:3f:fe:a3:4a:a0:5f:
         77:ee:88:3c:01:65:1c:96:3b:d2:e0:f9:aa:c0:79:71:2a:fc:
         a8:77:de:16:b7:65:a5:c9:c7:16:ef:43:0b:7a:23:c6:bc:5f:
         5a:5e:5a:3d:da:44:92:02:e0:22:ae:1f:13:a4:7f:6e:97:ed:
         d4:05:e3:49:4e:48:dd:93:4c:7b:60:36:72:30:2b:16:60:7e:
         1c:48:bf:d9:90:7e:32:a4:97:e8:00:ef:2f:7f:5f:e2:45:5b:
         b5:4a:26:d3:49:7a:e2:ee:68:c2:54:14:5f:00:6d:36:58:2b:
         00:c9:54:39:20:8c:ac:e6:4d:f3:ce:61:44:fe:9a:9a:49:47:
         c7:f3:ac:cf:1d:ad:00:cc:36:20:cd:27:f4:67:4f:f7:e6:ef:
         0a:a7:cd:6f:5e:9c:c5:14:9e:3e:ad:ca:e5:89:eb:0b:14:de:
         f0:4d:38:4d:d8:e4:79:be:44:1f:87:49:85:91:18:fd:88:75:
         bf:40:6e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:41 2024 by rpki-client on console-fra.rpki-client.org