Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133322e302f32322d3232203d3e203232313737.roa
File:                     3230302e3136322e3133322e302f32322d3232203d3e203232313737.roa (raw, json)
Hash identifier:          Wy2IHmztGdjJgI/jiCBv11J/J9aEXY5rZGj2+Jjh1EE=
Subject key identifier:   E3:11:F7:34:9C:A5:77:E8:6C:65:8F:85:E2:D2:A5:37:0E:3B:AE:70
Certificate issuer:       /CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Certificate serial:       0F6B4142E4788745ABE8DFF7F29005FB3217C54D
Authority key identifier: D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133322e302f32322d3232203d3e203232313737.roa
Signing time:             Sat 03 Aug 2024 20:13:31 +0000
ROA not before:           Sat 03 Aug 2024 20:08:31 +0000
ROA not after:            Sat 02 Aug 2025 20:13:31 +0000
asID:                     22177
IP address blocks:        200.162.132.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl
                          rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:6b:41:42:e4:78:87:45:ab:e8:df:f7:f2:90:05:fb:32:17:c5:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
        Validity
            Not Before: Aug  3 20:08:31 2024 GMT
            Not After : Aug  2 20:13:31 2025 GMT
        Subject: CN=E311F7349CA577E86C658F85E2D2A5370E3BAE70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5e:ca:d7:60:5e:8c:ac:2f:07:58:c3:5d:4c:
                    1b:46:c5:86:3e:5b:ae:93:7c:f2:c3:33:ba:c6:d5:
                    49:97:f7:e5:26:42:30:0c:0a:d5:3c:ba:b5:a8:25:
                    9d:24:a4:27:6a:43:dd:09:4b:06:4c:fe:73:3c:d1:
                    08:f7:6c:b8:ad:45:7e:61:fc:cd:77:2a:09:01:ec:
                    e9:b3:96:d7:81:97:25:7c:09:04:07:58:d8:d8:93:
                    34:a1:46:e7:d7:99:62:4d:19:ef:3b:18:e3:d2:e1:
                    f1:eb:cd:ba:ea:5f:4d:8a:9f:93:cf:b2:7a:cb:8e:
                    29:a6:47:47:b7:0f:b0:dd:cd:e1:79:78:00:7e:11:
                    7c:71:05:a5:7a:02:be:3b:f8:8d:13:fc:f5:20:e6:
                    57:cd:a0:b7:0d:17:27:a3:3e:73:e5:ca:a4:e7:c5:
                    9b:7d:cc:e1:af:07:5c:d4:36:da:d8:fb:28:99:3a:
                    ce:ab:10:1c:46:5e:76:86:ec:5c:de:55:d1:a6:0f:
                    0c:5d:b0:23:d0:31:1e:8d:df:f1:ec:99:79:c2:af:
                    0d:49:03:d4:ff:8d:15:f1:04:f8:c5:d9:f1:9b:99:
                    15:22:47:c4:c3:88:95:e1:10:d7:22:60:26:09:6e:
                    31:f9:20:f1:e8:3d:13:85:b8:05:e3:8a:d2:59:7c:
                    0e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:11:F7:34:9C:A5:77:E8:6C:65:8F:85:E2:D2:A5:37:0E:3B:AE:70
            X509v3 Authority Key Identifier:
                keyid:D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133322e302f32322d3232203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.162.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:84:5f:1d:76:f6:49:48:d3:19:8a:46:94:c8:a5:f1:be:0d:
         83:b2:5d:10:1b:76:91:94:4e:f3:6e:d9:85:5d:19:69:87:50:
         c5:5e:2d:b3:a0:b7:7b:ba:8b:c8:4c:f2:9d:82:7d:be:b7:b9:
         75:80:1e:3a:63:92:a6:ab:a9:f1:5a:b2:9e:ac:90:de:b8:c9:
         c3:10:1e:55:b5:96:74:74:13:a1:be:34:8a:3b:06:7b:d3:3c:
         5d:48:53:b2:fe:54:76:55:bb:02:36:7b:d1:82:2c:5d:cc:97:
         a2:f0:29:4d:dc:97:3a:ab:2f:2b:2a:0b:24:53:d2:03:3d:ff:
         37:52:47:3d:ab:11:e1:db:3c:a7:19:eb:55:96:b5:1d:e1:15:
         21:a3:64:d2:72:95:d4:c9:99:13:79:34:82:e6:a9:30:63:02:
         52:d5:66:a5:03:53:20:7b:3a:f5:76:ff:ee:2b:c3:63:17:e5:
         ba:29:f7:a8:4e:24:16:96:e8:92:56:f5:d1:fb:4a:61:97:67:
         56:7f:8a:f4:a1:d4:68:65:47:f0:4f:b2:28:b9:be:ff:24:0e:
         aa:63:b8:a0:2b:57:e1:5f:b1:dc:fd:8c:dd:7a:84:85:d6:83:
         90:a6:05:56:44:b7:a8:b7:25:d5:4a:1a:c8:4b:53:20:77:27:
         c3:95:91:0a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUD2tBQuR4h0Wr6N/38pAF+zIXxU0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDFCOTVCOUY4MTJGODc3RUZCNDg2RDJFNEMzMEI3MDNG
Q0FFQzgyOTAeFw0yNDA4MDMyMDA4MzFaFw0yNTA4MDIyMDEzMzFaMDMxMTAvBgNV
BAMTKEUzMTFGNzM0OUNBNTc3RTg2QzY1OEY4NUUyRDJBNTM3MEUzQkFFNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkXsrXYF6MrC8HWMNdTBtGxYY+
W66TfPLDM7rG1UmX9+UmQjAMCtU8urWoJZ0kpCdqQ90JSwZM/nM80Qj3bLitRX5h
/M13KgkB7OmzlteBlyV8CQQHWNjYkzShRufXmWJNGe87GOPS4fHrzbrqX02Kn5PP
snrLjimmR0e3D7DdzeF5eAB+EXxxBaV6Ar47+I0T/PUg5lfNoLcNFyejPnPlyqTn
xZt9zOGvB1zUNtrY+yiZOs6rEBxGXnaG7FzeVdGmDwxdsCPQMR6N3/HsmXnCrw1J
A9T/jRXxBPjF2fGbmRUiR8TDiJXhENciYCYJbjH5IPHoPROFuAXjitJZfA63AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU4xH3NJyld+hsZY+F4tKlNw47rnAwHwYDVR0j
BBgwFoAU0blbn4Evh377SG0uTDC3A/yuyCkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjdYeThRY0NvTXlZRjgxVXRpQUZLUTgyalEza1RubzQ3dnVQTlZXcmY4
TmsvMS9EMUI5NUI5RjgxMkY4NzdFRkI0ODZEMkU0QzMwQjcwM0ZDQUVDODI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxQjk1QjlGODEyRjg3N0VG
QjQ4NkQyRTRDMzBCNzAzRkNBRUM4MjkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I3WHk4UWNDb015WUY4MVV0aUFGS1E4MmpRM2tUbm80N3Z1UE5WV3JmOE5rLzEv
MzIzMDMwMmUzMTM2MzIyZTMxMzMzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzIzMTM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALIooQwDQYJKoZIhvcNAQELBQADggEBAE+EXx12
9klI0xmKRpTIpfG+DYOyXRAbdpGUTvNu2YVdGWmHUMVeLbOgt3u6i8hM8p2Cfb63
uXWAHjpjkqarqfFasp6skN64ycMQHlW1lnR0E6G+NIo7BnvTPF1IU7L+VHZVuwI2
e9GCLF3Ml6LwKU3clzqrLysqCyRT0gM9/zdSRz2rEeHbPKcZ61WWtR3hFSGjZNJy
ldTJmRN5NILmqTBjAlLVZqUDUyB7OvV2/+4rw2MX5bop96hOJBaW6JJW9dH7SmGX
Z1Z/ivSh1GhlR/BPsii5vv8kDqpjuKArV+Ffsdz9jN16hIXWg5CmBVZEt6i3JdVK
GshLUyB3J8OVkQo=
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:41 2024 by rpki-client on console-fra.rpki-client.org