Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3132392e302f32342d3234203d3e203232313737.roa
File:                     3230302e3136322e3132392e302f32342d3234203d3e203232313737.roa (raw, json)
Hash identifier:          SB+WoSiWtCtd0Jw5gqAZMdf5Y2u11kJ4+CfWY+KVW/8=
Subject key identifier:   9D:3D:CD:5D:F4:DD:37:7A:8A:69:D5:D9:5D:66:07:61:65:75:5A:EB
Certificate issuer:       /CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Certificate serial:       0D4CAC4694FCB8B01D87648E4067E1D6FD73340D
Authority key identifier: D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3132392e302f32342d3234203d3e203232313737.roa
Signing time:             Thu 04 Apr 2024 03:30:21 +0000
ROA not before:           Thu 04 Apr 2024 03:25:21 +0000
ROA not after:            Thu 03 Apr 2025 03:30:21 +0000
asID:                     22177
IP address blocks:        200.162.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl
                          rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:09:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:4c:ac:46:94:fc:b8:b0:1d:87:64:8e:40:67:e1:d6:fd:73:34:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
        Validity
            Not Before: Apr  4 03:25:21 2024 GMT
            Not After : Apr  3 03:30:21 2025 GMT
        Subject: CN=9D3DCD5DF4DD377A8A69D5D95D66076165755AEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:03:57:1c:80:aa:4a:93:36:ac:79:d2:c8:6d:
                    49:e0:a8:14:7d:c0:14:53:0d:dc:70:bb:c8:f8:f2:
                    5b:f3:ef:6f:0c:bb:d9:24:e2:6b:33:df:2c:c3:97:
                    29:ab:5c:a1:48:41:5b:53:6d:fd:4d:85:4c:19:a6:
                    a4:6c:ad:14:3f:64:d8:b1:51:fc:2d:5b:8d:0c:51:
                    12:19:2f:60:18:79:24:4a:24:2e:64:7a:7d:3a:df:
                    b6:b9:11:ef:de:0a:84:34:20:d0:36:96:02:ba:c7:
                    e1:04:02:56:e2:02:42:56:9f:f9:61:36:3b:23:99:
                    6d:13:fe:f9:85:64:0b:ce:98:88:9e:87:84:24:ce:
                    d1:e8:75:07:72:a4:67:73:ae:3e:d3:6f:9e:e8:52:
                    84:8f:c5:78:9d:af:d9:5c:c0:9f:9b:e8:ed:3f:b3:
                    b4:34:64:0f:14:83:b5:2d:c0:13:cb:a8:b2:b9:57:
                    17:d9:bb:07:21:7b:90:80:4f:d2:2d:19:5f:d7:c3:
                    17:ed:89:ed:51:ec:60:4b:16:57:e0:da:d5:01:c2:
                    fc:f6:20:44:5c:13:e1:c0:aa:5d:88:e9:d1:51:44:
                    65:6b:be:85:89:cd:93:06:33:45:7d:04:c3:e1:ab:
                    03:f6:c4:fa:08:19:a2:a6:b9:6f:76:8d:69:40:92:
                    dc:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:3D:CD:5D:F4:DD:37:7A:8A:69:D5:D9:5D:66:07:61:65:75:5A:EB
            X509v3 Authority Key Identifier:
                keyid:D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3132392e302f32342d3234203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.162.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:21:61:82:14:b9:9e:67:1b:00:55:60:82:87:fc:0d:ea:92:
         9e:66:b1:dc:bb:f2:08:d4:bf:84:f8:75:3f:51:f4:5f:12:9f:
         02:d8:64:db:3e:05:60:a6:de:e1:2d:ef:39:a0:c2:5c:9b:ab:
         c9:4e:91:38:d1:04:99:0c:40:75:89:92:02:97:1a:b7:71:30:
         e5:87:8b:70:86:1e:e6:2e:e2:28:99:5e:2f:bf:b8:0c:bd:44:
         ac:cd:e3:20:6e:b0:35:a3:df:66:22:1e:ad:59:5a:2a:aa:aa:
         e1:5c:e8:1f:0d:42:04:55:47:5d:d2:df:d7:6f:14:43:9e:d5:
         91:c4:26:e4:82:1c:97:88:4a:da:d0:51:fc:f1:ea:86:08:27:
         92:75:f2:c7:07:43:35:2b:7e:3e:ed:20:35:c5:43:2a:b0:b0:
         0f:37:f6:6f:0c:02:95:5d:bc:71:50:17:6c:e6:39:6a:9f:61:
         6f:00:b6:20:5b:ea:f2:dc:a1:ed:1f:a0:2a:14:03:7f:6a:b6:
         d3:68:7c:50:f3:85:c5:8c:ea:b0:60:38:e9:7e:72:cc:86:4b:
         ed:e1:75:01:9d:4a:61:23:0f:53:43:1f:b3:d2:d0:0b:be:bc:
         d2:79:80:7d:01:ba:a8:1f:d5:e5:20:07:60:ca:eb:83:c6:66:
         38:7e:de:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:02 2024 by rpki-client on console-ams.rpki-client.org