Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133362e302f32332d3234203d3e203232313737.roa
File:                     3230302e3136322e3133362e302f32332d3234203d3e203232313737.roa (raw, json)
Hash identifier:          flW8Co4a8TyMKHjOUL4ulWWgdZF4pabhUJhSMgO8agM=
Subject key identifier:   58:FF:E0:78:3E:43:36:5E:C4:92:9D:83:50:79:9D:D7:32:40:89:C4
Certificate issuer:       /CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Certificate serial:       6FED16C193CEDA439104BB02C8FACA945B22137D
Authority key identifier: D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133362e302f32332d3234203d3e203232313737.roa
Signing time:             Thu 06 Mar 2025 04:30:08 +0000
ROA not before:           Thu 06 Mar 2025 04:25:08 +0000
ROA not after:            Thu 05 Mar 2026 04:30:08 +0000
asID:                     22177
IP address blocks:        200.162.136.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl
                          rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 22:23:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:ed:16:c1:93:ce:da:43:91:04:bb:02:c8:fa:ca:94:5b:22:13:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
        Validity
            Not Before: Mar  6 04:25:08 2025 GMT
            Not After : Mar  5 04:30:08 2026 GMT
        Subject: CN=58FFE0783E43365EC4929D8350799DD7324089C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:d8:fc:28:f5:8a:9d:8c:af:9a:b3:af:3d:8d:
                    5e:c6:56:a9:74:83:58:aa:10:e6:ab:93:84:59:9a:
                    19:44:68:f6:66:44:88:50:23:d3:f2:25:41:99:15:
                    58:b1:8e:8d:02:df:81:93:25:58:13:41:84:07:69:
                    e4:6a:e2:a9:ab:65:be:25:41:44:0c:28:53:db:8b:
                    7f:54:81:b1:be:73:a8:f2:ec:e3:60:9b:ea:04:e7:
                    77:96:5c:91:f4:32:d0:39:fd:e8:91:0b:aa:df:f0:
                    a9:96:b2:68:8b:f9:c0:68:a2:d5:ba:18:59:15:ac:
                    e1:bb:73:9e:fc:aa:4f:58:21:e7:bb:19:53:0b:d3:
                    fe:7c:b0:a4:b8:61:6c:e4:91:1d:55:d3:25:2c:98:
                    f7:83:5e:38:47:90:5f:dd:65:ca:23:bd:ba:f3:39:
                    0f:4b:90:eb:58:31:45:e7:fb:ce:bf:f5:14:a9:3a:
                    13:1e:8b:fc:0c:62:e9:82:e5:75:99:05:06:52:9a:
                    53:eb:2e:7a:86:45:10:b1:cf:d4:13:1f:b7:47:42:
                    62:ef:aa:a9:ef:cf:09:0a:d2:33:47:db:14:f4:ab:
                    93:20:72:a8:f5:ef:9d:1f:9c:09:29:fd:6d:c8:ee:
                    69:f5:0b:96:16:f9:09:d2:15:bd:99:c5:34:b5:f0:
                    2e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:FF:E0:78:3E:43:36:5E:C4:92:9D:83:50:79:9D:D7:32:40:89:C4
            X509v3 Authority Key Identifier:
                keyid:D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133362e302f32332d3234203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.162.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:66:49:af:83:06:39:02:e7:54:3e:7b:2f:2b:9e:88:11:27:
         24:75:f9:15:60:56:5c:c8:26:bc:f3:26:ee:ab:05:65:09:2a:
         e0:b9:8e:cc:ea:25:15:da:21:32:a6:52:e8:ca:bb:d3:aa:d2:
         e4:f3:cb:0d:46:a2:e9:92:cf:fe:35:2d:fb:f9:6c:1c:45:b4:
         9b:dc:2d:ec:e9:b5:4f:95:33:31:16:e7:50:d5:ad:32:7d:d2:
         75:01:4e:1b:5e:ad:d3:b2:27:96:07:9e:ee:18:ed:d4:0b:b9:
         6c:4b:03:8a:54:9e:24:3b:13:f1:c5:31:a0:a8:6a:da:35:d5:
         34:61:8c:7e:78:9c:80:42:04:b6:90:ac:44:c7:49:f8:81:d3:
         2d:49:68:82:ee:0d:da:4c:3f:25:6f:25:93:cd:72:f6:27:87:
         09:38:85:6b:43:26:92:32:c1:1d:8e:a5:16:10:7a:73:2e:b3:
         ad:84:83:c4:ea:83:33:d1:ec:d7:68:91:0d:88:91:9f:66:16:
         00:a3:29:4e:b3:a8:f0:7e:91:7b:7d:e1:72:cc:2a:07:af:0e:
         0b:fa:cf:61:bc:89:77:01:8d:af:44:f9:20:74:33:81:30:4c:
         9a:37:4c:c1:76:af:49:54:30:57:38:7e:9e:2c:25:c6:2e:30:
         e3:0d:c7:c4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUb+0WwZPO2kORBLsCyPrKlFsiE30wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDFCOTVCOUY4MTJGODc3RUZCNDg2RDJFNEMzMEI3MDNG
Q0FFQzgyOTAeFw0yNTAzMDYwNDI1MDhaFw0yNjAzMDUwNDMwMDhaMDMxMTAvBgNV
BAMTKDU4RkZFMDc4M0U0MzM2NUVDNDkyOUQ4MzUwNzk5REQ3MzI0MDg5QzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD32Pwo9YqdjK+as689jV7GVql0
g1iqEOark4RZmhlEaPZmRIhQI9PyJUGZFVixjo0C34GTJVgTQYQHaeRq4qmrZb4l
QUQMKFPbi39UgbG+c6jy7ONgm+oE53eWXJH0MtA5/eiRC6rf8KmWsmiL+cBootW6
GFkVrOG7c578qk9YIee7GVML0/58sKS4YWzkkR1V0yUsmPeDXjhHkF/dZcojvbrz
OQ9LkOtYMUXn+86/9RSpOhMei/wMYumC5XWZBQZSmlPrLnqGRRCxz9QTH7dHQmLv
qqnvzwkK0jNH2xT0q5Mgcqj1750fnAkp/W3I7mn1C5YW+QnSFb2ZxTS18C7dAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUWP/geD5DNl7Ekp2DUHmd1zJAicQwHwYDVR0j
BBgwFoAU0blbn4Evh377SG0uTDC3A/yuyCkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjdYeThRY0NvTXlZRjgxVXRpQUZLUTgyalEza1RubzQ3dnVQTlZXcmY4
TmsvMS9EMUI5NUI5RjgxMkY4NzdFRkI0ODZEMkU0QzMwQjcwM0ZDQUVDODI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxQjk1QjlGODEyRjg3N0VG
QjQ4NkQyRTRDMzBCNzAzRkNBRUM4MjkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I3WHk4UWNDb015WUY4MVV0aUFGS1E4MmpRM2tUbm80N3Z1UE5WV3JmOE5rLzEv
MzIzMDMwMmUzMTM2MzIyZTMxMzMzNjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMy
MzIzMTM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHIoogwDQYJKoZIhvcNAQELBQADggEBABZmSa+D
BjkC51Q+ey8rnogRJyR1+RVgVlzIJrzzJu6rBWUJKuC5jszqJRXaITKmUujKu9Oq
0uTzyw1GoumSz/41Lfv5bBxFtJvcLezptU+VMzEW51DVrTJ90nUBThterdOyJ5YH
nu4Y7dQLuWxLA4pUniQ7E/HFMaCoato11TRhjH54nIBCBLaQrETHSfiB0y1JaILu
DdpMPyVvJZPNcvYnhwk4hWtDJpIywR2OpRYQenMus62Eg8TqgzPR7NdokQ2IkZ9m
FgCjKU6zqPB+kXt94XLMKgevDgv6z2G8iXcBja9E+SB0M4EwTJo3TMF2r0lUMFc4
fp4sJcYuMOMNx8Q=
-----END CERTIFICATE-----
Generated at Thu Apr 17 14:00:36 2025 by rpki-client