Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133362e302f32332d3234203d3e203232313737.roa
File:                     3230302e3136322e3133362e302f32332d3234203d3e203232313737.roa (raw, json)
Hash identifier:          EC1dvxFGvmpNvO08z63xz0FZ3TLRc5omKQNRlRBJWBs=
Subject key identifier:   56:6F:E0:2E:22:11:DA:32:97:5F:7F:BF:01:F2:41:D1:ED:A7:BB:C0
Certificate issuer:       /CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Certificate serial:       317E4CCE9E6C9CEA85681CE0BB06AB81BA3774B0
Authority key identifier: D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133362e302f32332d3234203d3e203232313737.roa
Signing time:             Thu 04 Apr 2024 03:30:20 +0000
ROA not before:           Thu 04 Apr 2024 03:25:20 +0000
ROA not after:            Thu 03 Apr 2025 03:30:20 +0000
asID:                     22177
IP address blocks:        200.162.136.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl
                          rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:7e:4c:ce:9e:6c:9c:ea:85:68:1c:e0:bb:06:ab:81:ba:37:74:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
        Validity
            Not Before: Apr  4 03:25:20 2024 GMT
            Not After : Apr  3 03:30:20 2025 GMT
        Subject: CN=566FE02E2211DA32975F7FBF01F241D1EDA7BBC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bf:f2:fd:75:93:c6:a3:d7:4f:ff:a7:4e:41:
                    45:20:8c:b8:a1:ff:5f:a0:1b:6f:d5:4a:80:ab:e0:
                    b3:3a:a1:f8:7a:86:20:ba:7e:73:20:eb:3a:9f:b0:
                    3a:46:10:07:94:68:94:64:d1:bb:f1:b5:fb:0d:6f:
                    e8:5c:e7:f4:97:f6:53:c6:cd:ee:ee:08:94:b2:af:
                    18:0e:92:c6:56:68:38:1c:72:0e:bf:26:e8:82:ce:
                    9c:12:01:97:df:81:d5:35:1b:39:64:3b:db:06:77:
                    79:f0:3c:af:89:6a:49:d6:93:fb:c0:01:87:53:1c:
                    f4:e9:e6:f3:43:00:5d:ee:c9:1a:81:77:1f:27:94:
                    ff:b1:ef:b8:57:82:eb:a3:56:3d:48:e1:a8:63:ae:
                    b2:2b:19:d9:5d:ad:85:3e:60:0b:1c:b5:29:73:aa:
                    79:f3:e2:9e:16:f8:2f:ae:54:7a:1f:89:54:c8:ef:
                    0a:4c:e5:fe:0b:37:28:b5:8a:36:7a:4f:9c:7d:2e:
                    80:08:36:63:d5:77:3f:95:a2:6e:41:11:ab:90:9b:
                    e9:dc:14:44:51:11:cc:5f:aa:0a:c3:c6:a6:4b:ae:
                    0f:3b:20:5b:b5:11:ef:66:d1:c1:a9:5c:57:df:3e:
                    4b:a2:7f:0e:17:62:e8:12:3e:a8:49:75:07:79:3a:
                    1f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:6F:E0:2E:22:11:DA:32:97:5F:7F:BF:01:F2:41:D1:ED:A7:BB:C0
            X509v3 Authority Key Identifier:
                keyid:D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133362e302f32332d3234203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.162.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         be:0a:01:94:65:11:70:f0:af:8c:37:0a:57:a1:0d:e9:5c:47:
         47:67:47:ee:64:ad:a5:29:3e:e0:05:b1:66:03:3c:fb:94:70:
         8b:86:96:4e:ab:78:6f:a2:d8:d7:97:29:5f:1d:03:2e:fd:fb:
         ef:76:c8:ea:84:22:44:a4:c7:54:59:43:2b:81:81:1d:4e:73:
         37:ca:d5:a1:97:30:db:dc:43:95:bd:6b:04:98:b3:08:58:f5:
         d6:69:a0:98:39:09:6e:06:c1:12:1d:95:54:8c:19:43:61:b1:
         d9:2e:a0:92:ac:a8:e6:36:2f:7e:80:fc:13:89:3d:da:80:eb:
         11:0f:ab:e5:c9:90:a4:d1:2a:c1:e7:0f:dd:6b:1d:b0:e4:cd:
         78:64:8f:5f:c4:79:90:47:16:56:12:32:18:b4:d0:9b:5c:3b:
         65:0f:31:50:64:b3:24:41:22:a7:fe:3c:4c:76:f7:1a:6e:e1:
         94:f0:ca:cd:26:73:e9:2a:e1:8c:86:24:65:7d:8f:c9:60:50:
         2d:c9:99:2f:55:7e:8a:ad:59:84:b2:56:f0:2b:47:58:3a:91:
         7c:ef:a9:1d:08:f2:2b:0f:88:60:1b:83:9b:d5:b4:1c:f7:5b:
         04:6b:10:aa:9e:f3:ae:f1:f5:7f:82:ba:13:c8:f8:6f:b3:3a:
         7a:10:27:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 09:48:03 2024 by rpki-client on console-ams.rpki-client.org