Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133372e302f32342d3234203d3e203232313737.roa
File:                     3230302e3136322e3133372e302f32342d3234203d3e203232313737.roa (raw, json)
Hash identifier:          6ll7LQPWQVbHxDpC2dglXBrDcOLVSQSzQvtfk12zjx4=
Subject key identifier:   E2:AC:F1:80:63:66:BF:8E:C7:63:17:32:8D:D5:A6:F9:6D:41:83:1E
Certificate issuer:       /CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Certificate serial:       54677BD751CB6D8DA965FA9138AE169ED531413A
Authority key identifier: D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133372e302f32342d3234203d3e203232313737.roa
Signing time:             Thu 06 Mar 2025 04:30:06 +0000
ROA not before:           Thu 06 Mar 2025 04:25:06 +0000
ROA not after:            Thu 05 Mar 2026 04:30:06 +0000
asID:                     22177
IP address blocks:        200.162.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl
                          rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 08:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:67:7b:d7:51:cb:6d:8d:a9:65:fa:91:38:ae:16:9e:d5:31:41:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
        Validity
            Not Before: Mar  6 04:25:06 2025 GMT
            Not After : Mar  5 04:30:06 2026 GMT
        Subject: CN=E2ACF1806366BF8EC76317328DD5A6F96D41831E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cb:a3:42:11:2c:28:ce:98:17:c2:c6:61:dd:
                    ab:77:4a:76:1a:79:30:7c:b2:8c:77:fe:49:fe:3d:
                    98:75:87:d5:79:f7:98:59:2a:05:ec:09:74:27:23:
                    24:7b:a8:23:ef:3b:7f:6c:35:f3:96:fe:a1:73:e1:
                    20:50:2a:14:1b:5a:c7:c0:5a:10:b2:2c:1c:d0:b9:
                    6f:30:65:34:9d:a1:a6:c9:93:1e:2d:a6:8e:2a:b8:
                    6d:d9:3c:d5:e2:39:37:a8:50:2f:2a:89:1e:b7:eb:
                    7b:3e:81:9c:e6:18:d2:3b:9c:67:60:83:30:94:d5:
                    27:17:ef:f1:a2:a4:22:65:da:1b:17:cb:00:f4:7f:
                    17:64:61:f4:3d:c0:1f:2b:ac:2e:93:7b:c9:6b:a2:
                    3e:7a:12:64:86:0d:1e:64:24:75:a9:af:f3:1c:cf:
                    79:b5:61:79:50:f1:c1:cc:25:3d:e5:c2:6e:3b:c8:
                    e7:29:c1:5e:3a:45:ae:86:4b:a1:0b:ef:33:ab:2a:
                    df:a4:af:e0:3f:8f:0d:89:f2:9a:39:70:e2:2e:3b:
                    3a:51:9e:da:9d:c2:e5:f8:79:f5:d1:e1:93:9d:29:
                    ca:d3:93:26:32:73:29:43:89:95:8b:da:83:9b:f8:
                    14:4e:95:71:98:cf:73:7f:78:35:0b:a7:35:8c:05:
                    30:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:AC:F1:80:63:66:BF:8E:C7:63:17:32:8D:D5:A6:F9:6D:41:83:1E
            X509v3 Authority Key Identifier:
                keyid:D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133372e302f32342d3234203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.162.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:69:3c:95:d2:17:0f:28:87:32:97:f8:8b:4e:55:c9:e2:c5:
         d8:08:f1:77:e1:d4:cf:9c:f7:c9:96:66:5b:24:c0:e3:ca:9c:
         bd:95:93:fa:30:b7:2b:be:40:c9:84:92:8a:40:0e:7e:c8:b0:
         a0:36:f6:da:f3:f2:72:36:37:11:6e:e6:44:5a:7f:80:19:f4:
         11:3d:a7:8f:c1:a3:a0:7e:96:81:fe:4b:89:0c:f4:dd:63:00:
         65:27:9b:17:cc:b6:9b:17:5b:78:67:41:9c:75:8b:e3:fa:53:
         ee:76:12:a2:f2:e4:41:f9:40:50:9b:a7:60:76:d9:d0:0f:93:
         45:d6:55:59:2f:e1:e3:00:50:3b:fb:9d:d5:43:67:fe:84:ac:
         03:8d:5b:68:06:a0:88:d1:37:fd:19:7f:d4:03:8a:65:5e:9d:
         15:e0:b4:0a:13:d6:da:79:1f:9d:42:41:bf:ec:68:d3:40:71:
         b9:3d:1a:be:a2:f2:00:04:e4:30:7f:87:aa:42:6f:70:9a:39:
         fd:4a:c5:49:97:e3:71:ce:6a:06:07:cb:26:4c:4c:75:fa:21:
         55:a9:9b:0c:61:26:99:d3:ec:b1:c6:9e:88:18:2f:e4:04:d4:
         cf:91:b6:b2:6d:b1:fb:3e:39:3f:55:d0:99:e0:f5:17:1b:3b:
         20:ef:15:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:11:14 2025 by rpki-client