Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133342e302f32342d3234203d3e203232313737.roa
File:                     3230302e3136322e3133342e302f32342d3234203d3e203232313737.roa (raw, json)
Hash identifier:          MdoKNGdmQ9cqX8gW93m7U7fhSeTf8OdzrAKtIsGLHto=
Subject key identifier:   C4:67:4F:FC:B7:A3:25:1B:38:31:47:E8:95:71:F6:EF:5E:B5:E5:90
Certificate issuer:       /CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Certificate serial:       3023FDE007973344BBE89440CF966D9A76C89D5D
Authority key identifier: D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133342e302f32342d3234203d3e203232313737.roa
Signing time:             Thu 04 Apr 2024 03:30:20 +0000
ROA not before:           Thu 04 Apr 2024 03:25:20 +0000
ROA not after:            Thu 03 Apr 2025 03:30:20 +0000
asID:                     22177
IP address blocks:        200.162.134.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl
                          rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:09:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:23:fd:e0:07:97:33:44:bb:e8:94:40:cf:96:6d:9a:76:c8:9d:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
        Validity
            Not Before: Apr  4 03:25:20 2024 GMT
            Not After : Apr  3 03:30:20 2025 GMT
        Subject: CN=C4674FFCB7A3251B383147E89571F6EF5EB5E590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:29:0c:6b:3e:c7:f4:a9:34:0f:43:a2:ea:be:
                    11:d9:88:94:05:8f:72:70:53:46:e5:47:7b:2b:90:
                    3e:36:b9:5b:2e:a5:23:b7:7d:78:43:de:45:74:4a:
                    5a:81:03:bf:e4:e0:92:7b:f6:d3:9b:c7:00:57:92:
                    70:67:02:c2:6d:79:83:8a:13:15:90:3e:4f:ff:9e:
                    9a:a5:80:7d:65:74:fb:8f:42:dc:6d:09:2e:fc:09:
                    46:f8:fb:c8:d6:70:96:28:40:02:55:22:23:88:e5:
                    57:e4:a0:4e:49:ed:79:b2:4f:35:dc:76:85:ec:4b:
                    39:ff:4c:60:bc:42:20:83:f5:4a:bb:df:b0:b9:26:
                    7d:46:5e:bd:ac:10:c5:7e:14:4b:3c:ce:a0:a7:2d:
                    aa:19:dc:e2:38:af:05:c4:08:7f:2d:4f:77:7f:da:
                    39:da:aa:71:67:c5:dc:65:20:57:b4:b9:84:fd:79:
                    08:de:43:1a:e4:67:ad:f4:f2:46:1c:a1:74:17:60:
                    fb:59:b9:de:f5:e3:fe:7c:26:80:d4:08:75:a1:4f:
                    25:7e:20:67:09:a2:d1:e6:32:6c:a7:a1:62:46:d9:
                    bd:62:4f:e7:ae:30:ed:e4:30:55:11:87:39:e2:16:
                    04:ba:7d:51:bf:10:13:43:9d:95:16:87:11:96:32:
                    8e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:67:4F:FC:B7:A3:25:1B:38:31:47:E8:95:71:F6:EF:5E:B5:E5:90
            X509v3 Authority Key Identifier:
                keyid:D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133342e302f32342d3234203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.162.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:94:b5:37:a8:67:0e:94:08:51:8c:00:5c:38:3f:e6:94:dc:
         93:fb:70:46:ce:43:9e:dc:46:dd:20:ab:ff:6b:07:3e:8f:2a:
         6e:d8:7a:29:46:36:50:25:29:9b:78:23:28:26:fe:97:f4:5b:
         82:5a:17:07:62:d6:5b:c4:95:7d:3f:44:74:d2:5f:2e:4f:62:
         7f:b1:a4:4b:dd:3b:88:22:55:61:a0:5f:6b:cb:78:e4:f5:ba:
         96:20:95:be:03:7c:b7:76:7a:04:42:a8:82:49:5a:b5:fd:70:
         3d:37:0c:4f:1a:fc:d6:9d:e7:dd:8a:a0:b9:b4:80:d0:d0:ee:
         c8:34:d9:b1:e3:5b:12:46:4c:f7:54:ca:19:10:06:e3:03:81:
         f3:0a:a3:78:93:05:e0:13:d9:c4:fc:1f:28:80:a5:8a:7d:8c:
         04:ba:fe:1e:20:32:89:71:04:19:5c:09:16:df:24:b7:62:d8:
         3e:00:f9:a3:33:e5:60:8c:4a:45:d6:1e:6a:36:e9:fd:1a:cd:
         37:91:ba:b3:b2:d9:a6:1d:14:12:27:59:0d:a0:f4:3a:fb:27:
         e0:97:8c:a4:d0:8a:67:bf:c7:26:e3:c1:38:4e:8a:02:d7:29:
         8c:5f:e4:ce:a9:40:b7:e9:5d:b6:b0:82:a2:13:19:37:1d:73:
         a1:18:65:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:02 2024 by rpki-client on console-ams.rpki-client.org