Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133312e302f32342d3234203d3e203232313737.roa
File:                     3230302e3136322e3133312e302f32342d3234203d3e203232313737.roa (raw, json)
Hash identifier:          PfUMhgHXxk8nMBANNoRRKNnTZSkuf/ChmZmdXkwNyYQ=
Subject key identifier:   D7:55:19:22:B0:ED:0E:BB:39:46:46:EC:4A:40:B8:90:E1:13:FA:BC
Certificate issuer:       /CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Certificate serial:       6934BD39E898EB243A8EEC3AE721FAADB2481A7E
Authority key identifier: D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133312e302f32342d3234203d3e203232313737.roa
Signing time:             Thu 06 Mar 2025 04:30:08 +0000
ROA not before:           Thu 06 Mar 2025 04:25:08 +0000
ROA not after:            Thu 05 Mar 2026 04:30:08 +0000
asID:                     22177
IP address blocks:        200.162.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl
                          rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 08:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:34:bd:39:e8:98:eb:24:3a:8e:ec:3a:e7:21:fa:ad:b2:48:1a:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
        Validity
            Not Before: Mar  6 04:25:08 2025 GMT
            Not After : Mar  5 04:30:08 2026 GMT
        Subject: CN=D7551922B0ED0EBB394646EC4A40B890E113FABC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ae:81:8a:7f:dd:98:f5:45:8b:04:7d:22:8c:
                    33:53:ce:de:d9:ca:9b:11:0a:31:39:06:aa:71:15:
                    d7:67:63:af:ec:3d:de:3d:3d:e2:f6:48:d3:d9:ab:
                    60:7d:7c:69:18:5b:54:21:f3:b1:a5:c2:d8:a2:12:
                    80:ee:ea:b7:ad:1d:1b:c2:87:2a:59:1d:f5:33:3b:
                    44:b9:ac:f1:38:2e:87:b9:c1:aa:c2:e8:3a:92:a8:
                    58:f7:c7:81:c6:cd:d5:cb:a5:d2:a9:75:c9:8c:d0:
                    34:dd:a9:83:a0:70:9d:2a:4b:43:57:f2:6d:f1:72:
                    23:7e:80:84:4e:f6:a3:18:c4:86:56:bd:49:e2:ac:
                    ce:d3:db:c5:a9:4d:ef:57:d1:d5:7a:21:5a:83:2b:
                    1f:a1:58:bd:d5:ce:34:11:52:bf:0a:62:ed:bb:5a:
                    60:ad:94:6d:eb:4b:72:99:ae:91:f9:39:b4:30:11:
                    b3:ce:53:66:37:30:20:97:d5:31:25:d1:ee:28:7d:
                    89:e4:ef:67:f1:40:1d:c7:7f:4b:5b:38:9d:22:8f:
                    e4:34:3d:bc:68:b6:dd:9e:26:47:a1:7f:87:4d:62:
                    8d:95:84:58:ca:bc:9e:e2:d5:18:7c:c8:4a:d5:7a:
                    f5:e7:71:79:75:d5:51:fd:00:6a:90:6c:d4:4c:af:
                    d6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:55:19:22:B0:ED:0E:BB:39:46:46:EC:4A:40:B8:90:E1:13:FA:BC
            X509v3 Authority Key Identifier:
                keyid:D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133312e302f32342d3234203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.162.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:a1:8c:9d:35:4f:51:f3:dd:d1:d5:29:4f:98:72:71:ed:0a:
         ae:7f:75:24:ae:3e:e9:76:31:d6:5f:fc:d8:73:d7:a0:79:e5:
         05:cd:ae:a0:0b:7a:d5:de:90:a4:4f:61:18:08:9b:68:91:ec:
         b3:cb:2c:32:0b:35:9c:3a:5d:e6:da:03:95:dc:2c:d1:8e:30:
         78:bd:f6:fd:3c:3d:84:6f:f0:e3:4a:b8:52:e8:61:c4:17:d2:
         69:f3:e9:5f:57:1a:ff:d1:8b:ec:29:01:2d:62:7c:69:3b:49:
         54:4e:bf:70:f1:39:60:ca:b8:cc:3d:da:0f:7d:8b:90:44:ce:
         a9:e7:a2:2f:de:b5:87:8f:85:cf:c3:04:4e:61:3b:10:68:cb:
         16:cf:0d:bc:3b:01:99:05:f6:ef:5b:d0:3e:bc:66:44:f7:c8:
         4e:0a:f4:f6:a6:4f:4b:a9:7c:3c:c9:e8:4a:80:f0:32:12:fc:
         76:20:ec:f9:e0:d7:85:7b:a6:d7:df:e9:07:4a:3c:eb:57:ef:
         36:5a:15:39:91:01:c4:93:51:63:e3:ae:1c:78:46:93:49:67:
         b4:d1:44:a9:6e:32:21:8a:1e:32:de:3d:ef:aa:a0:86:05:61:
         52:cb:b9:d5:19:f3:ac:6f:40:cd:71:70:16:f0:7e:db:e6:55:
         cd:3f:b9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:09:36 2025 by rpki-client