Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133362e302f32322d3232203d3e203232313737.roa
File:                     3230302e3136322e3133362e302f32322d3232203d3e203232313737.roa (raw, json)
Hash identifier:          m41Xt6NAvEXnGAcBogU+xiAO6EcCdELfVdJZ36T2pyk=
Subject key identifier:   BC:16:87:C2:9D:A9:54:56:E3:C3:C5:C8:04:B9:6B:EC:97:32:E6:23
Certificate issuer:       /CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Certificate serial:       F04D47FA507422BC78F07A79AD1C9D34526BEE
Authority key identifier: D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133362e302f32322d3232203d3e203232313737.roa
Signing time:             Sat 03 Aug 2024 20:13:59 +0000
ROA not before:           Sat 03 Aug 2024 20:08:59 +0000
ROA not after:            Sat 02 Aug 2025 20:13:59 +0000
asID:                     22177
IP address blocks:        200.162.136.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl
                          rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:09:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f0:4d:47:fa:50:74:22:bc:78:f0:7a:79:ad:1c:9d:34:52:6b:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
        Validity
            Not Before: Aug  3 20:08:59 2024 GMT
            Not After : Aug  2 20:13:59 2025 GMT
        Subject: CN=BC1687C29DA95456E3C3C5C804B96BEC9732E623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:36:d6:48:26:9e:1a:6d:f8:07:ab:63:3b:51:
                    c2:3c:f6:1b:eb:76:0b:9b:ea:2e:9a:98:91:0f:77:
                    ee:91:c2:ef:e9:c1:39:ca:6c:65:bb:18:b2:5c:50:
                    cf:33:36:3d:24:00:5d:63:65:0b:81:6c:e0:b9:9d:
                    52:b1:dc:ac:95:c4:57:35:f3:46:40:74:3f:ae:7e:
                    a6:9f:28:db:7e:db:c6:98:3e:16:cc:80:43:94:89:
                    07:e3:a0:0b:61:57:70:3b:57:7e:33:be:7f:53:55:
                    02:e4:26:18:54:97:4e:97:33:af:8b:fb:d0:23:d1:
                    ea:64:07:95:cf:99:5e:20:46:95:08:4e:2d:d3:f8:
                    3a:4f:27:f2:6e:41:45:fc:21:c2:cd:a8:cf:b2:11:
                    40:f1:6e:43:6e:77:9a:1c:96:6d:e1:ef:34:ab:9e:
                    f9:d7:55:62:24:48:a8:67:9f:6c:26:df:69:ac:59:
                    e8:95:64:32:8b:56:46:87:d9:a2:11:2f:f7:79:87:
                    82:07:06:44:76:0f:18:d2:d3:b3:59:fc:d3:ff:18:
                    88:cd:42:14:4d:1a:79:c3:ab:6d:1f:0d:05:e9:4f:
                    ab:d3:22:57:5f:16:84:05:30:50:0b:18:4c:34:38:
                    a0:06:39:e6:d4:98:a5:97:6e:b1:39:b1:43:69:e6:
                    e0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:16:87:C2:9D:A9:54:56:E3:C3:C5:C8:04:B9:6B:EC:97:32:E6:23
            X509v3 Authority Key Identifier:
                keyid:D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133362e302f32322d3232203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.162.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:84:23:90:6f:67:a8:27:be:d7:9d:6f:67:39:ff:20:0c:65:
         73:70:34:b9:c1:6f:b6:b0:98:4a:4c:f7:91:09:e6:61:b9:24:
         a2:be:49:92:4c:17:25:21:c5:e7:65:70:f3:af:ce:2d:7c:b5:
         64:25:1c:a7:b3:e3:c0:26:79:d7:28:ae:24:af:71:c5:c7:58:
         7f:79:46:65:4b:27:26:15:39:f2:c1:04:8a:25:67:63:6a:d8:
         db:24:c7:86:8a:76:8a:fa:d4:c6:2d:b3:a5:c6:81:bd:1c:36:
         81:2c:ad:42:5b:81:ec:6e:b4:53:09:f7:4e:b6:54:a5:6e:b2:
         4d:29:8d:eb:a5:c4:79:3d:bc:cc:a4:75:82:b2:ce:83:b8:fc:
         34:ee:4f:a6:67:2b:d4:c8:c6:b8:18:b9:86:e0:a5:f6:39:a3:
         f2:2e:72:30:b3:8a:96:7f:6f:1f:6a:b3:f9:d8:b5:c2:17:a0:
         67:0c:44:8a:a5:20:d1:55:98:6e:d9:8e:ec:7b:66:47:21:a5:
         5a:af:25:5e:b3:f8:c6:da:75:2b:1c:9f:03:ff:9c:04:a3:d2:
         8e:d1:d5:5c:7c:c7:1e:23:c4:45:c5:7d:91:71:ca:e0:16:c4:
         4b:21:c2:ef:d8:85:9d:d0:4d:08:2c:ce:ba:72:fa:04:12:3e:
         78:31:46:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:02 2024 by rpki-client on console-ams.rpki-client.org