Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133352e302f32342d3234203d3e203232313737.roa
File:                     3230302e3136322e3133352e302f32342d3234203d3e203232313737.roa (raw, json)
Hash identifier:          HO5rEzg2pPDvPvng8UD51e/1Kpjg6bKAh55Bj1SDvxQ=
Subject key identifier:   2C:3C:32:CF:2E:43:77:27:D1:35:F0:87:08:7F:9E:72:E7:D8:4F:A8
Certificate issuer:       /CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Certificate serial:       2520D16BC1587EC1B293976475006A666F506429
Authority key identifier: D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133352e302f32342d3234203d3e203232313737.roa
Signing time:             Thu 06 Mar 2025 04:30:07 +0000
ROA not before:           Thu 06 Mar 2025 04:25:07 +0000
ROA not after:            Thu 05 Mar 2026 04:30:07 +0000
asID:                     22177
IP address blocks:        200.162.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl
                          rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 08:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:20:d1:6b:c1:58:7e:c1:b2:93:97:64:75:00:6a:66:6f:50:64:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
        Validity
            Not Before: Mar  6 04:25:07 2025 GMT
            Not After : Mar  5 04:30:07 2026 GMT
        Subject: CN=2C3C32CF2E437727D135F087087F9E72E7D84FA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b8:2c:58:99:7e:3a:4b:e0:57:bc:ec:68:d1:
                    35:bf:54:e8:20:fc:e7:36:9b:f7:86:57:46:9f:ae:
                    ee:1d:73:3d:bd:b1:df:1a:2a:8d:79:e8:94:e8:32:
                    04:9e:99:ad:af:c2:a3:ae:56:70:6f:b1:19:66:bb:
                    7f:72:91:64:a9:1b:8a:5e:33:3d:6e:38:3e:4b:56:
                    6f:11:8b:52:a6:5f:81:01:72:be:b5:d7:f0:15:4e:
                    2d:2d:cc:86:75:ce:b5:78:64:57:88:1d:75:16:44:
                    5f:20:90:cb:f1:47:9a:ed:2e:f0:5c:4a:f1:f9:b6:
                    84:ee:d0:f2:31:1d:59:52:69:2f:5a:a3:a4:63:2c:
                    2c:71:43:f1:98:9f:89:2d:9d:8b:8a:6e:d7:57:9e:
                    41:44:bb:e9:48:0a:2e:68:1c:12:8d:a9:fd:60:f0:
                    79:84:7f:ff:19:a8:40:8d:23:bd:7f:94:2d:93:6c:
                    19:c3:cf:d4:db:0d:c0:79:8b:9f:09:3e:a4:2f:b1:
                    f3:25:14:b9:04:37:69:ce:4b:9f:10:d4:50:3b:eb:
                    b1:50:02:6f:74:ac:91:e2:3a:2f:51:7c:01:e9:b0:
                    b7:74:3e:e0:bc:53:9b:e5:03:ce:b8:e6:ec:f2:1c:
                    15:69:de:bf:96:29:ea:b4:c5:c6:09:22:49:1b:34:
                    b6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:3C:32:CF:2E:43:77:27:D1:35:F0:87:08:7F:9E:72:E7:D8:4F:A8
            X509v3 Authority Key Identifier:
                keyid:D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133352e302f32342d3234203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.162.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:9f:69:dd:6d:38:cb:49:0a:67:71:42:e7:01:d5:db:1d:59:
         8d:bd:09:51:c1:fd:f8:76:10:c9:05:1d:24:c6:a3:d8:8f:17:
         d4:9b:28:c4:97:8a:02:a0:5c:20:de:b2:49:b9:ec:1c:b8:2f:
         ed:68:d1:29:34:e8:51:1a:8a:c0:a9:83:c9:78:f9:64:d8:c1:
         83:a3:b3:87:89:53:4a:da:70:de:8d:03:8e:64:bb:77:98:fe:
         8a:70:ec:73:22:ee:c8:82:21:68:42:8c:84:ce:ae:2f:80:e4:
         b2:69:4e:d2:37:21:34:fd:f7:bd:3a:0f:59:a0:cb:29:43:21:
         d1:51:9d:f9:eb:d0:18:6b:1e:bc:ec:0d:e0:0d:ec:a5:3f:cf:
         f4:4e:98:44:1b:4a:7a:0d:4f:e8:90:1f:e7:f4:78:93:7d:80:
         b2:89:a7:45:0b:0f:b0:6f:20:92:08:d8:a7:42:02:e3:7e:4d:
         d3:44:8f:d6:f5:87:06:c0:d9:05:3c:ef:f7:6a:96:f3:69:b3:
         be:70:9c:bd:0c:9e:26:f8:07:0d:88:1f:fe:48:15:3b:9e:83:
         5c:72:64:4e:d0:16:54:d5:bc:07:f5:8b:d4:cd:14:7c:ae:0b:
         ff:dc:39:67:16:9c:c5:6e:15:c6:9a:ab:e1:e6:e4:4d:be:4d:
         c4:b1:e6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:11:40 2025 by rpki-client