Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3132382e302f32342d3234203d3e203232313737.roa
File:                     3230302e3136322e3132382e302f32342d3234203d3e203232313737.roa (raw, json)
Hash identifier:          bY41L0HR82c+b6lJsdEMy6wbag9EClP8pwaf7CaVyqI=
Subject key identifier:   64:72:C1:95:AD:6D:B4:86:28:AD:F2:AF:0D:22:EF:BB:FE:1B:3D:90
Certificate issuer:       /CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Certificate serial:       099390F3D8A3DDD431B74C9210F3E5580B133A2A
Authority key identifier: D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3132382e302f32342d3234203d3e203232313737.roa
Signing time:             Thu 04 Apr 2024 03:30:23 +0000
ROA not before:           Thu 04 Apr 2024 03:25:23 +0000
ROA not after:            Thu 03 Apr 2025 03:30:23 +0000
asID:                     22177
IP address blocks:        200.162.128.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl
                          rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:09:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:93:90:f3:d8:a3:dd:d4:31:b7:4c:92:10:f3:e5:58:0b:13:3a:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
        Validity
            Not Before: Apr  4 03:25:23 2024 GMT
            Not After : Apr  3 03:30:23 2025 GMT
        Subject: CN=6472C195AD6DB48628ADF2AF0D22EFBBFE1B3D90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d4:d8:97:71:6f:f7:b9:c8:c3:bc:93:c7:c3:
                    bf:2b:80:fc:aa:12:69:58:91:b1:56:92:48:98:ee:
                    fa:64:c5:00:2e:3c:9d:3f:ab:31:20:6f:74:7d:57:
                    cc:28:dd:fe:e6:64:ab:51:ec:05:cf:7a:dc:dc:d7:
                    b2:04:5a:82:bd:f4:11:2b:07:b0:ab:bf:9e:50:90:
                    4c:8d:4b:9a:60:9a:f8:87:10:fc:97:65:c7:8f:46:
                    d7:0c:a2:76:4b:28:99:4e:8f:3b:3d:19:e4:ad:3e:
                    6a:20:1a:a7:8d:55:48:1c:fd:bd:91:65:57:4e:a9:
                    a3:a0:d2:e7:c7:8c:c3:fc:98:6f:fc:7d:14:49:94:
                    b1:3e:36:eb:ac:22:c3:0e:57:84:4b:d9:89:0c:11:
                    7f:c7:51:0d:98:47:39:f3:42:00:51:b8:20:27:a2:
                    4f:e4:0c:2e:16:a2:67:fb:fc:35:39:d2:ec:39:cc:
                    dc:c6:35:71:fc:c6:8a:52:ea:77:97:9d:b2:f8:79:
                    be:a7:02:bb:d9:33:05:89:80:aa:e2:a7:9f:88:24:
                    da:54:de:6b:cc:ac:51:a1:80:be:f2:e6:d2:42:a6:
                    4e:31:a6:46:e8:93:73:e6:fe:b6:2f:ec:bf:fb:22:
                    16:41:66:85:fc:06:dc:a6:0d:bd:f7:4b:97:67:50:
                    0b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:72:C1:95:AD:6D:B4:86:28:AD:F2:AF:0D:22:EF:BB:FE:1B:3D:90
            X509v3 Authority Key Identifier:
                keyid:D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3132382e302f32342d3234203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.162.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:e3:57:0a:08:19:6a:d5:67:8c:77:bf:d3:31:fd:70:4a:ed:
         ca:0b:34:0a:5b:58:c9:63:79:15:1c:2e:75:bd:1e:73:94:54:
         56:e6:eb:1a:b6:5e:4d:78:73:05:96:bf:e6:f2:4b:b9:53:0f:
         9a:a1:06:47:00:28:30:f0:27:dc:e4:8e:06:e1:c2:e5:a5:56:
         ff:ab:4c:c8:b5:7a:4b:b3:dd:49:b2:50:66:1d:f6:78:b6:82:
         d2:aa:18:d7:b4:c7:6e:e8:29:13:1f:f9:52:15:12:83:fc:96:
         cb:db:cf:21:c7:d6:72:b0:05:8c:70:17:4f:8f:73:d2:76:16:
         87:cb:62:60:42:b9:88:29:49:a3:cc:a3:85:91:06:0e:46:11:
         65:62:b0:e3:f6:4b:98:d7:a2:ee:d4:4a:59:1f:c4:c9:18:18:
         da:e4:b8:2b:df:3e:47:8c:18:8b:65:b7:35:f6:2b:7c:26:3c:
         08:e5:fb:f6:1a:45:22:ee:9d:e3:d0:32:31:bb:cd:b5:66:29:
         f7:0a:23:75:6b:92:2a:9c:97:4e:2d:ba:fa:97:88:df:77:7e:
         49:45:84:94:4b:28:d5:b6:e2:85:9b:b7:19:7e:10:ec:50:24:
         98:dd:c0:aa:68:40:78:13:d1:e4:57:66:31:d3:97:f4:87:ba:
         4b:eb:5d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:02 2024 by rpki-client on console-ams.rpki-client.org