Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133362e302f32342d3234203d3e203232313737.roa
File:                     3230302e3136322e3133362e302f32342d3234203d3e203232313737.roa (raw, json)
Hash identifier:          2GTCUTcjFEC5O4U60UQaPAzKxN84wTfAHiavGVtVBzI=
Subject key identifier:   10:5A:DC:EC:2D:2A:05:D0:7B:DB:35:B8:04:AD:18:51:E4:EF:45:07
Certificate issuer:       /CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Certificate serial:       7A992CAC772692A164DB6265ADE910198C7A7418
Authority key identifier: D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133362e302f32342d3234203d3e203232313737.roa
Signing time:             Thu 04 Apr 2024 03:30:20 +0000
ROA not before:           Thu 04 Apr 2024 03:25:20 +0000
ROA not after:            Thu 03 Apr 2025 03:30:20 +0000
asID:                     22177
IP address blocks:        200.162.136.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl
                          rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:99:2c:ac:77:26:92:a1:64:db:62:65:ad:e9:10:19:8c:7a:74:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
        Validity
            Not Before: Apr  4 03:25:20 2024 GMT
            Not After : Apr  3 03:30:20 2025 GMT
        Subject: CN=105ADCEC2D2A05D07BDB35B804AD1851E4EF4507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:90:af:bc:10:42:96:ed:0b:85:e2:0f:50:f1:
                    5a:ce:bf:13:a4:b1:37:81:c3:6e:e5:a8:c0:ab:db:
                    02:96:c8:e7:0d:38:70:14:d5:d4:d9:0d:1c:5b:7b:
                    89:e4:95:10:a7:1d:1f:94:ef:05:e3:1c:3e:7e:ac:
                    f6:0d:ba:63:8a:2e:6a:9a:e6:8b:01:08:37:09:8a:
                    33:de:e1:60:9c:4d:4b:60:09:00:b8:17:68:4c:67:
                    d1:02:11:b1:93:cf:9b:b2:e3:81:24:40:73:52:40:
                    66:2c:e1:36:71:e4:7b:cb:e9:3d:9f:19:33:49:08:
                    c6:42:b1:e9:ba:92:14:e5:02:91:62:d2:9e:a3:6b:
                    0d:19:31:7b:34:21:22:a7:57:cd:7c:11:98:d3:aa:
                    e5:6e:e8:83:02:dd:a3:f7:df:3a:24:90:41:b9:b9:
                    af:e2:ad:4e:d0:d5:b4:ae:f9:4f:9c:6f:72:35:57:
                    4f:df:17:d3:96:a3:23:12:58:af:07:7b:b0:f9:28:
                    18:66:68:bc:58:f5:f5:3c:9a:64:28:15:23:77:ae:
                    ca:b5:1c:f8:06:d9:e9:b9:f9:12:92:82:cb:e4:2e:
                    e4:67:b4:a0:c0:98:30:cf:9a:ff:4f:92:f6:53:0a:
                    45:f4:ec:5e:79:e9:3c:24:57:7b:11:8a:db:6f:d3:
                    a7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:5A:DC:EC:2D:2A:05:D0:7B:DB:35:B8:04:AD:18:51:E4:EF:45:07
            X509v3 Authority Key Identifier:
                keyid:D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133362e302f32342d3234203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.162.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:e3:3d:74:8a:3e:3a:a5:b3:db:c0:e3:33:bd:5d:2f:e7:0b:
         3f:47:5f:cc:fa:22:40:b1:b3:17:21:a7:cd:29:01:81:41:49:
         5c:6f:43:39:61:58:7f:93:b7:e8:1d:0e:7d:84:6e:c8:cb:6b:
         57:e5:c9:65:94:c3:5b:1a:c0:77:fc:4e:35:e1:47:0e:64:7f:
         b5:b3:e5:19:25:99:5e:1c:b9:5c:ad:4b:71:6b:1c:04:59:a6:
         15:e0:55:26:95:d6:44:58:9d:78:4a:45:e2:29:33:d1:7c:86:
         68:ff:5d:bf:a6:1c:4a:16:c3:cd:3b:a1:c9:43:1b:7e:85:79:
         29:e3:99:0e:28:d2:f3:60:90:da:43:16:79:e3:5a:3c:dd:e4:
         66:41:46:b2:0b:5f:83:58:37:b3:91:e3:b4:e6:8e:0a:31:e9:
         6d:01:bf:ff:1d:65:61:7a:2c:68:ab:f8:79:95:52:4d:a4:59:
         14:5f:54:75:7d:6c:ba:f9:3f:01:7d:f4:3b:f3:96:24:6f:1e:
         7d:9d:7a:09:b7:00:2d:d5:38:3f:c7:dd:a3:57:54:94:a1:9e:
         e6:78:da:9e:5c:97:d1:83:86:48:6d:9d:aa:37:14:16:0a:f8:
         a4:d0:85:bd:f7:5e:52:d5:fb:3d:bd:b4:30:01:b9:cb:04:b9:
         1e:a8:87:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:41 2024 by rpki-client on console-fra.rpki-client.org