Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133302e302f32342d3234203d3e203232313737.roa
File:                     3230302e3136322e3133302e302f32342d3234203d3e203232313737.roa (raw, json)
Hash identifier:          cGmhcXfLwRI2TIBWruLdhmzF4VFp0pT+PwJ+yclBHU0=
Subject key identifier:   69:3E:56:A1:80:7A:B2:AB:EA:4D:44:FB:6F:DC:B8:5D:07:A7:A0:FA
Certificate issuer:       /CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Certificate serial:       0AE3C83F2DBB80A514E5C7561FCCF853CB701641
Authority key identifier: D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133302e302f32342d3234203d3e203232313737.roa
Signing time:             Thu 04 Apr 2024 03:30:21 +0000
ROA not before:           Thu 04 Apr 2024 03:25:21 +0000
ROA not after:            Thu 03 Apr 2025 03:30:21 +0000
asID:                     22177
IP address blocks:        200.162.130.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl
                          rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:09:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:e3:c8:3f:2d:bb:80:a5:14:e5:c7:56:1f:cc:f8:53:cb:70:16:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
        Validity
            Not Before: Apr  4 03:25:21 2024 GMT
            Not After : Apr  3 03:30:21 2025 GMT
        Subject: CN=693E56A1807AB2ABEA4D44FB6FDCB85D07A7A0FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7b:14:b7:a8:67:b4:b1:4d:1f:40:fa:60:12:
                    f6:47:79:fb:37:78:78:52:09:46:c1:b1:51:6e:78:
                    c8:5d:b8:a0:33:ac:64:36:6d:a2:24:ef:94:73:df:
                    31:c6:b6:53:07:a9:66:65:ca:b1:84:c2:0a:de:63:
                    e2:bb:d4:56:ff:6d:c2:51:93:75:4c:f7:40:c1:06:
                    0f:74:07:02:a1:21:90:20:ae:47:6c:06:d0:1d:7d:
                    ed:27:2e:76:25:7a:cc:94:46:10:a2:6b:00:35:36:
                    a0:80:de:eb:c0:16:73:5f:8c:c7:ea:fd:9b:d9:4e:
                    41:ae:d6:de:64:a1:45:9c:aa:24:3d:ef:20:1f:9e:
                    c9:1b:a1:78:f8:83:a1:6b:40:3a:7e:c1:02:fd:a3:
                    ef:14:33:19:48:3e:bb:1d:19:fb:c7:4e:f8:b9:70:
                    32:14:4b:83:ae:c0:3f:09:d3:17:b4:1d:6b:bd:25:
                    f2:3d:a2:12:6b:90:ce:1e:3d:73:df:12:be:f6:e3:
                    7d:a5:96:81:84:e5:a9:b0:8d:c8:93:70:c9:1d:18:
                    c0:ea:1c:84:a0:c5:85:9b:6f:e9:53:26:36:75:22:
                    1c:e2:fe:71:66:50:f8:d4:7f:a4:c7:f4:20:12:b8:
                    eb:8d:46:a8:db:2d:ac:dc:e9:b8:4f:d5:58:1b:5b:
                    84:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:3E:56:A1:80:7A:B2:AB:EA:4D:44:FB:6F:DC:B8:5D:07:A7:A0:FA
            X509v3 Authority Key Identifier:
                keyid:D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133302e302f32342d3234203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.162.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:f7:3a:30:4a:75:a5:d7:00:a7:77:90:ce:67:33:3a:11:b9:
         ce:da:df:3a:3d:9a:91:0d:88:2f:f9:2e:4b:02:82:27:5c:2a:
         94:36:aa:f7:07:36:b7:43:e5:b5:02:2b:01:8d:80:ab:57:75:
         32:8d:bd:6c:ab:f7:67:77:ab:b3:8a:67:af:e0:10:9c:67:17:
         4d:4c:b3:1e:06:f2:e5:cf:17:13:0b:b6:d5:64:9c:07:f4:6d:
         c2:34:00:21:e3:73:67:cd:79:e1:45:40:40:27:8c:27:56:d8:
         b3:18:4d:18:6a:08:54:e8:9e:bb:ea:e1:c4:88:54:d4:77:fa:
         48:73:05:d0:12:8d:66:44:12:20:0f:1d:33:4e:9e:6a:5f:0c:
         e1:96:8b:68:e5:21:e8:0c:d8:36:32:3f:3c:83:02:23:02:47:
         8f:64:a4:70:60:5c:2b:44:76:11:d6:e6:85:b6:b3:a4:66:d0:
         a7:8e:c1:a9:44:25:1f:81:3e:03:32:da:c5:92:7a:72:c7:d8:
         b2:d9:59:e9:cb:3c:3c:8e:78:34:14:f5:e3:87:73:c1:54:6f:
         57:c9:07:2d:d4:ef:e9:fd:9f:4a:ae:17:c5:b6:dc:85:a7:76:
         a3:d1:3c:f5:5c:f6:45:fa:1b:cb:d2:71:3a:5b:a7:13:d0:19:
         de:f7:0a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:02 2024 by rpki-client on console-ams.rpki-client.org