Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133302e302f32342d3234203d3e203232313737.roa
File:                     3230302e3136322e3133302e302f32342d3234203d3e203232313737.roa (raw, json)
Hash identifier:          10Ikl1vZm5t+kd9MqzmfLfTyKWD8OM1RScHBXumaCnE=
Subject key identifier:   AA:4F:C2:A6:FA:0F:C4:45:A7:A1:B4:DE:06:CD:49:F3:92:C3:92:CD
Certificate issuer:       /CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Certificate serial:       73A354F3160B258F2FAF43A1B9FE1CC622254D94
Authority key identifier: D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133302e302f32342d3234203d3e203232313737.roa
Signing time:             Thu 06 Mar 2025 04:30:07 +0000
ROA not before:           Thu 06 Mar 2025 04:25:07 +0000
ROA not after:            Thu 05 Mar 2026 04:30:07 +0000
asID:                     22177
IP address blocks:        200.162.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl
                          rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 08:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:a3:54:f3:16:0b:25:8f:2f:af:43:a1:b9:fe:1c:c6:22:25:4d:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
        Validity
            Not Before: Mar  6 04:25:07 2025 GMT
            Not After : Mar  5 04:30:07 2026 GMT
        Subject: CN=AA4FC2A6FA0FC445A7A1B4DE06CD49F392C392CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:35:d3:05:4c:2e:d5:8e:3d:6a:6c:93:7d:24:
                    56:17:10:fd:a8:2b:b7:a2:e4:3a:ea:19:ab:c8:e5:
                    5d:55:90:47:70:50:55:70:4f:fb:cc:e4:5a:4d:7d:
                    de:5e:ef:d8:3a:1d:0e:04:12:7a:c5:a7:a2:b1:82:
                    c1:46:3d:85:54:bb:a7:c2:b9:ee:b7:e6:a9:56:87:
                    67:63:2d:99:4c:86:03:3c:34:02:23:ae:17:2d:79:
                    0e:a5:56:81:6b:e6:fd:bc:6c:f4:6a:d3:61:24:8a:
                    09:d5:d8:e1:6b:4a:6c:72:39:89:5b:65:87:18:70:
                    67:a6:ed:01:65:58:ff:d4:2c:20:5c:9b:74:4a:d7:
                    16:a2:31:9b:bc:63:75:79:13:7c:73:22:7a:34:e8:
                    ea:a5:27:02:bf:d0:42:f2:9a:1b:5a:71:63:1d:2d:
                    54:82:55:11:13:2d:e0:ee:dd:f5:50:2b:a6:12:3f:
                    c6:09:18:07:ae:34:59:d0:d8:0e:9d:c9:be:bb:a0:
                    00:04:a0:65:bb:da:71:b5:7e:b5:46:92:77:59:ce:
                    e0:f0:fc:61:58:0a:54:3a:9d:53:99:49:39:b3:4b:
                    ab:8e:9a:f7:1b:8d:46:3b:0b:fa:0d:da:09:54:e8:
                    37:e4:d9:7c:4f:72:f4:48:7f:58:e8:af:e3:24:c9:
                    08:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:4F:C2:A6:FA:0F:C4:45:A7:A1:B4:DE:06:CD:49:F3:92:C3:92:CD
            X509v3 Authority Key Identifier:
                keyid:D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133302e302f32342d3234203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.162.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:e0:d9:36:7f:1a:da:c3:b1:47:16:1d:dc:a4:08:a9:31:4e:
         60:5c:14:5e:5c:d2:16:92:c2:82:97:29:9a:c4:13:7c:0a:98:
         ba:64:c4:d3:04:b7:66:5d:c0:7f:eb:89:c6:65:6b:fd:b9:cb:
         2e:9a:54:b8:1d:99:a8:c2:67:03:8c:3c:88:b4:35:d8:20:bc:
         a2:14:a3:0a:da:53:1f:c3:11:69:1b:7f:eb:0b:16:49:87:d1:
         b5:c0:6f:10:a1:15:e6:f7:57:9c:4b:2c:ba:c2:3c:70:ed:29:
         2a:d7:d1:2a:1f:a4:c4:0f:9d:30:3d:93:24:81:12:0a:e5:ff:
         c5:ce:27:a0:05:61:7f:e6:30:58:94:31:a6:e9:f9:5c:a6:7f:
         af:ad:83:eb:f1:5a:56:34:0d:d0:2a:75:92:db:a9:55:2a:51:
         63:24:e3:a5:98:ef:96:33:07:a5:a8:27:b1:96:80:9f:7d:14:
         5b:67:85:c9:72:da:9d:f5:33:71:9e:1e:4b:ce:84:f3:91:0e:
         64:6a:b5:2a:69:8c:12:32:46:89:b4:93:88:5b:fc:0d:1f:12:
         c6:4b:ea:5d:5b:26:2f:08:88:76:91:02:70:a8:e1:78:13:dd:
         b6:3f:2e:e4:89:50:a2:8a:01:b4:d7:e4:7c:cd:67:61:45:d4:
         ce:fe:e3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:14:14 2025 by rpki-client