Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133332e302f32342d3234203d3e203232313737.roa
File:                     3230302e3136322e3133332e302f32342d3234203d3e203232313737.roa (raw, json)
Hash identifier:          +VvOHkv7voo6zobYQvbF0iZ3qfmWVsdJ5hTJwb8IGHk=
Subject key identifier:   62:4F:1C:B2:B2:E0:DD:47:31:48:DA:77:B1:64:B3:A3:B5:47:FF:F3
Certificate issuer:       /CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Certificate serial:       561089F4F3A6D9CED9F0D8C4D21334DDAD2C6571
Authority key identifier: D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133332e302f32342d3234203d3e203232313737.roa
Signing time:             Thu 06 Mar 2025 04:30:10 +0000
ROA not before:           Thu 06 Mar 2025 04:25:10 +0000
ROA not after:            Thu 05 Mar 2026 04:30:10 +0000
asID:                     22177
IP address blocks:        200.162.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl
                          rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 08:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:10:89:f4:f3:a6:d9:ce:d9:f0:d8:c4:d2:13:34:dd:ad:2c:65:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
        Validity
            Not Before: Mar  6 04:25:10 2025 GMT
            Not After : Mar  5 04:30:10 2026 GMT
        Subject: CN=624F1CB2B2E0DD473148DA77B164B3A3B547FFF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:29:6a:c8:2d:b5:d6:c3:cb:a7:77:7f:ab:04:
                    ed:a8:74:79:cb:a2:d4:88:75:d0:2e:86:6a:0e:f5:
                    90:b0:82:ee:f0:50:91:2f:99:cf:4e:84:66:af:c1:
                    1c:c0:c6:f5:fb:62:2f:31:63:0b:c2:70:b6:2c:7e:
                    04:1a:7f:a7:3b:6c:81:6f:8d:f2:43:84:df:d9:a6:
                    14:e6:c5:f3:bc:aa:c1:20:98:bb:4f:17:2e:b7:b4:
                    74:9a:8e:69:da:67:1d:98:1f:10:34:5e:47:e3:aa:
                    bb:04:33:81:a8:12:5a:7a:91:dd:24:77:69:d2:7b:
                    88:44:4d:b7:64:66:70:a7:f7:6f:c7:17:b4:e6:84:
                    37:92:67:70:86:32:8f:5a:75:cc:ad:2d:9d:34:27:
                    00:e9:73:ae:ca:20:ae:be:5e:59:c6:8a:00:51:2f:
                    e7:10:fb:43:d7:88:a8:be:9f:ac:c5:97:e7:5d:05:
                    d4:8d:9e:49:4f:b2:51:90:7f:de:2f:ff:f1:7c:e1:
                    b1:5a:bb:25:53:dd:98:ce:ff:1c:f6:36:aa:5c:fe:
                    f9:a7:a2:44:4f:62:7d:23:8a:e9:f2:80:f5:c4:f3:
                    cb:15:26:3a:b7:ad:48:30:59:e5:63:e8:a9:f9:03:
                    ad:45:fc:d1:30:9d:51:e9:9a:6f:07:d5:21:5e:35:
                    dd:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:4F:1C:B2:B2:E0:DD:47:31:48:DA:77:B1:64:B3:A3:B5:47:FF:F3
            X509v3 Authority Key Identifier:
                keyid:D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133332e302f32342d3234203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.162.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:96:46:ff:7c:cd:df:d3:e2:11:6b:b1:40:be:11:b5:ef:3c:
         65:6e:07:51:13:b5:2b:e0:18:97:ab:03:c0:c7:4b:12:25:e4:
         f3:89:ee:c5:7f:07:7f:fe:e1:a7:fb:03:fe:c7:ac:7a:88:13:
         01:66:2e:01:76:ef:62:46:c2:1d:52:b5:df:e0:a6:23:b9:31:
         52:eb:11:66:58:c7:6d:a4:25:c0:1e:23:10:64:c6:ba:84:0e:
         c9:cf:4d:4d:2d:4b:84:61:30:d3:e9:49:73:f9:39:cc:c3:2e:
         af:0c:78:37:72:29:b1:c8:cc:67:4b:1d:ea:43:e8:ad:fd:9c:
         8c:81:17:9c:64:97:8e:63:68:aa:d0:cd:46:2a:86:8b:a0:77:
         da:0f:da:42:b8:d6:cf:30:9f:35:b2:38:d8:65:0d:c9:2e:38:
         a3:34:90:d9:dc:75:3e:74:4b:01:94:4e:fc:80:a0:9d:f6:9c:
         b3:32:10:40:35:fa:82:76:de:75:55:c4:ea:f2:40:eb:f0:ef:
         b1:a8:93:2f:21:04:13:47:ec:bb:3d:31:7a:da:4b:ee:48:b9:
         32:1a:17:14:2e:8f:d8:5b:fe:bd:73:ae:a8:1d:66:fe:ff:e2:
         b1:0a:33:62:60:40:60:73:68:9e:a2:85:11:5d:f0:bc:4d:08:
         d2:fb:f0:bc
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVhCJ9POm2c7Z8NjE0hM03a0sZXEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDFCOTVCOUY4MTJGODc3RUZCNDg2RDJFNEMzMEI3MDNG
Q0FFQzgyOTAeFw0yNTAzMDYwNDI1MTBaFw0yNjAzMDUwNDMwMTBaMDMxMTAvBgNV
BAMTKDYyNEYxQ0IyQjJFMERENDczMTQ4REE3N0IxNjRCM0EzQjU0N0ZGRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJKWrILbXWw8und3+rBO2odHnL
otSIddAuhmoO9ZCwgu7wUJEvmc9OhGavwRzAxvX7Yi8xYwvCcLYsfgQaf6c7bIFv
jfJDhN/ZphTmxfO8qsEgmLtPFy63tHSajmnaZx2YHxA0XkfjqrsEM4GoElp6kd0k
d2nSe4hETbdkZnCn92/HF7TmhDeSZ3CGMo9adcytLZ00JwDpc67KIK6+XlnGigBR
L+cQ+0PXiKi+n6zFl+ddBdSNnklPslGQf94v//F84bFauyVT3ZjO/xz2Nqpc/vmn
okRPYn0jiunygPXE88sVJjq3rUgwWeVj6Kn5A61F/NEwnVHpmm8H1SFeNd35AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUYk8csrLg3UcxSNp3sWSzo7VH//MwHwYDVR0j
BBgwFoAU0blbn4Evh377SG0uTDC3A/yuyCkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjdYeThRY0NvTXlZRjgxVXRpQUZLUTgyalEza1RubzQ3dnVQTlZXcmY4
TmsvMS9EMUI5NUI5RjgxMkY4NzdFRkI0ODZEMkU0QzMwQjcwM0ZDQUVDODI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxQjk1QjlGODEyRjg3N0VG
QjQ4NkQyRTRDMzBCNzAzRkNBRUM4MjkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I3WHk4UWNDb015WUY4MVV0aUFGS1E4MmpRM2tUbm80N3Z1UE5WV3JmOE5rLzEv
MzIzMDMwMmUzMTM2MzIyZTMxMzMzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzIzMTM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADIooUwDQYJKoZIhvcNAQELBQADggEBAKaWRv98
zd/T4hFrsUC+EbXvPGVuB1ETtSvgGJerA8DHSxIl5POJ7sV/B3/+4af7A/7HrHqI
EwFmLgF272JGwh1Std/gpiO5MVLrEWZYx22kJcAeIxBkxrqEDsnPTU0tS4RhMNPp
SXP5OczDLq8MeDdyKbHIzGdLHepD6K39nIyBF5xkl45jaKrQzUYqhougd9oP2kK4
1s8wnzWyONhlDckuOKM0kNncdT50SwGUTvyAoJ32nLMyEEA1+oJ23nVVxOryQOvw
77Goky8hBBNH7Ls9MXraS+5IuTIaFxQuj9hb/r1zrqgdZv7/4rEKM2JgQGBzaJ6i
hRFd8LxNCNL78Lw=
-----END CERTIFICATE-----
Generated at Sun Apr 13 00:12:03 2025 by rpki-client