Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133342e302f32342d3234203d3e203232313737.roa
File:                     3230302e3136322e3133342e302f32342d3234203d3e203232313737.roa (raw, json)
Hash identifier:          aFoW9MRwI8QInrcTkFQ9wLGbRCRUzNakrZcpjVkONfg=
Subject key identifier:   1E:C8:38:F5:FB:DF:B3:16:9F:8E:1F:03:C1:36:DF:16:C9:0D:1A:5F
Certificate issuer:       /CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Certificate serial:       3D00DCBC10AEC16A11E9251DFFABBAFD1368E7B5
Authority key identifier: D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133342e302f32342d3234203d3e203232313737.roa
Signing time:             Thu 06 Mar 2025 04:30:10 +0000
ROA not before:           Thu 06 Mar 2025 04:25:10 +0000
ROA not after:            Thu 05 Mar 2026 04:30:10 +0000
asID:                     22177
IP address blocks:        200.162.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl
                          rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 08:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:00:dc:bc:10:ae:c1:6a:11:e9:25:1d:ff:ab:ba:fd:13:68:e7:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
        Validity
            Not Before: Mar  6 04:25:10 2025 GMT
            Not After : Mar  5 04:30:10 2026 GMT
        Subject: CN=1EC838F5FBDFB3169F8E1F03C136DF16C90D1A5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8c:cd:c8:88:a7:87:b4:26:2f:d6:e9:19:53:
                    0e:55:71:91:52:ca:d6:77:af:36:c6:50:c9:55:3b:
                    39:a0:c3:30:21:23:ea:09:98:eb:08:79:e4:9c:ce:
                    fb:7e:a8:74:30:0c:58:f9:dc:06:4a:9d:79:86:54:
                    f4:d0:ca:80:ea:e9:bb:b1:0c:30:cf:0e:31:3a:43:
                    1d:81:1f:d0:e2:ea:46:71:03:39:ca:9a:17:39:1c:
                    21:d5:67:3e:92:c2:64:89:2f:de:de:95:15:6c:d9:
                    23:11:67:01:1b:b3:d8:36:26:d9:f2:4e:0f:2b:b9:
                    e5:a1:bc:1d:55:17:e8:c8:4e:00:45:e2:f4:07:58:
                    92:dc:27:48:81:58:d6:cf:3f:14:3a:08:2d:e8:ef:
                    0a:62:8c:4a:8b:f4:1a:b9:b8:db:25:5f:77:12:8e:
                    e5:1f:08:6f:47:1e:09:16:bf:d9:a7:44:cb:47:f7:
                    9e:a4:56:c3:26:65:a8:cc:7d:1a:8f:43:71:0d:cf:
                    71:64:36:96:f0:0c:08:bb:61:89:fd:6b:cd:e7:02:
                    c9:b7:1b:aa:68:a8:0d:30:73:c7:1e:e8:6d:cb:9d:
                    23:70:11:07:5a:92:25:14:14:b2:2b:9d:5a:3f:d8:
                    52:1b:94:79:33:06:70:c4:99:4b:31:4e:10:1e:65:
                    f9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C8:38:F5:FB:DF:B3:16:9F:8E:1F:03:C1:36:DF:16:C9:0D:1A:5F
            X509v3 Authority Key Identifier:
                keyid:D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133342e302f32342d3234203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.162.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:8a:05:b6:ce:dd:0d:c9:51:76:41:0d:89:ef:19:e3:23:49:
         56:9d:cf:75:36:21:b8:ac:4f:da:a2:93:97:3e:58:29:2f:e5:
         d7:a6:06:8f:00:43:60:1a:22:fd:ad:d7:09:0e:e6:8a:92:e7:
         f5:81:d5:0d:51:55:fb:c3:78:1d:4b:b5:eb:09:c4:9c:4a:a7:
         8d:a7:b4:5d:68:d1:54:9f:91:14:a4:10:5a:a7:31:28:89:58:
         8f:91:ca:ce:9d:c3:86:6f:5b:26:4e:e1:27:22:be:04:cc:db:
         02:9b:14:fd:0c:13:43:10:fe:47:1e:a0:00:20:b1:9f:39:11:
         01:53:86:11:bd:36:45:91:2c:61:7e:d9:0b:b5:b7:c8:fc:f3:
         ed:51:da:2a:91:ef:16:d3:e4:cf:c6:09:50:81:59:1c:ec:de:
         fb:4e:2c:2b:89:bf:7a:e0:41:69:4b:2b:68:17:75:60:4b:8c:
         82:c1:42:4f:f9:56:d2:8e:00:f0:79:63:b6:8e:96:9a:60:0c:
         f7:6f:24:c5:cd:60:33:29:f3:b5:b2:39:45:03:ca:c1:72:d1:
         46:ca:cf:84:2c:89:1b:58:d5:9f:e5:77:11:fd:f1:55:c5:09:
         18:ac:dd:b8:60:06:b8:b0:50:ce:aa:fc:b5:fa:0d:d8:8e:8b:
         31:87:4e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:11:19 2025 by rpki-client