Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133322e302f32342d3234203d3e203232313737.roa
File:                     3230302e3136322e3133322e302f32342d3234203d3e203232313737.roa (raw, json)
Hash identifier:          Mtd7qF0ebZ8Jj+890uiJ+ukz8wV3pPvL9Ek+jB2V2HU=
Subject key identifier:   4B:59:A6:C7:85:15:5E:9C:5F:76:65:4D:DF:42:74:F7:E9:FC:DB:93
Certificate issuer:       /CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Certificate serial:       63000EF057FC1D91BDBFDA7132ED6FF2AD154174
Authority key identifier: D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133322e302f32342d3234203d3e203232313737.roa
Signing time:             Thu 06 Mar 2025 04:30:08 +0000
ROA not before:           Thu 06 Mar 2025 04:25:08 +0000
ROA not after:            Thu 05 Mar 2026 04:30:08 +0000
asID:                     22177
IP address blocks:        200.162.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl
                          rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 08:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:00:0e:f0:57:fc:1d:91:bd:bf:da:71:32:ed:6f:f2:ad:15:41:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
        Validity
            Not Before: Mar  6 04:25:08 2025 GMT
            Not After : Mar  5 04:30:08 2026 GMT
        Subject: CN=4B59A6C785155E9C5F76654DDF4274F7E9FCDB93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ad:57:b2:01:eb:39:54:75:ee:08:a6:8d:f5:
                    56:74:5a:00:5d:eb:4f:ce:68:7f:8f:c2:1c:2a:f7:
                    45:88:f4:f0:27:20:54:ba:3f:64:a6:47:ab:d3:b4:
                    70:ee:b8:c6:84:a0:c1:7f:6b:8e:4e:23:53:ca:9a:
                    33:97:8a:77:c4:ab:64:d0:83:d1:06:92:20:e7:42:
                    b3:c1:01:ab:7c:05:cd:8a:8b:59:f5:5a:68:e5:a3:
                    23:c6:d4:df:70:a5:ce:70:b9:4f:cb:24:0b:ad:ed:
                    de:11:af:e2:73:b3:d8:64:3c:0f:04:d7:11:7a:de:
                    11:4e:95:66:3b:8f:c3:8a:22:de:ae:df:13:83:cf:
                    dd:54:3d:b6:a1:7f:44:13:a6:73:06:20:95:c6:18:
                    fb:af:27:b9:6b:23:10:a4:ec:9b:ea:75:89:65:7e:
                    52:0c:c0:0c:be:b8:1d:a3:fb:10:0d:cd:47:fa:99:
                    d6:43:4d:12:16:04:0d:d4:01:53:c0:d6:d7:27:34:
                    f9:9f:c4:27:7c:be:4b:ff:2a:08:ac:f6:f6:00:d3:
                    4f:3b:b9:c4:c8:f2:0d:8c:e6:6b:56:7b:c1:79:83:
                    69:2a:98:10:f0:47:a0:e4:88:f6:d6:de:4d:43:33:
                    c3:a9:b4:68:cf:89:d1:b7:e2:8a:74:77:28:9c:b9:
                    6f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:59:A6:C7:85:15:5E:9C:5F:76:65:4D:DF:42:74:F7:E9:FC:DB:93
            X509v3 Authority Key Identifier:
                keyid:D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133322e302f32342d3234203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.162.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:f0:61:5c:40:1f:16:2e:32:1b:b3:ab:d2:2e:87:6e:6b:3b:
         5c:4b:49:0d:4a:6b:4d:db:1a:ce:eb:b0:c2:ea:23:b1:b9:e1:
         14:99:34:a5:43:61:d2:ea:06:84:44:16:75:7b:08:f0:8e:3c:
         12:74:5f:03:0e:f9:8f:aa:25:c7:60:27:7c:f5:34:6d:1f:9e:
         e5:38:26:0d:fb:57:5b:b1:f6:c3:92:bb:a6:ec:38:e9:23:04:
         38:a3:ce:0b:23:73:3d:69:12:8a:b1:c9:f5:55:6c:9f:45:c1:
         fb:94:04:d8:28:b0:70:af:e8:92:b3:cb:3c:9f:8d:ae:60:8e:
         3f:11:ac:f8:55:de:fd:f5:5a:d4:05:e7:83:b1:81:bf:08:88:
         4a:91:a0:84:6e:fb:a7:16:54:d7:36:f1:19:74:a3:18:73:99:
         d3:74:6f:24:4d:c2:ef:f5:fb:05:51:ce:8b:51:6b:bf:18:83:
         4b:45:11:01:f1:9d:02:bf:73:90:ec:25:40:45:e7:59:dd:6c:
         ed:64:6e:69:c4:fe:53:b7:6d:cc:11:4f:16:c5:85:6d:a0:eb:
         71:7d:ee:76:f2:6f:44:e2:5b:fa:62:9e:ed:e0:84:06:a9:6b:
         e7:2d:b4:66:10:50:61:aa:6a:bb:d2:8e:9e:78:55:fa:d7:fb:
         5c:1d:47:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:09:25 2025 by rpki-client