Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133372e302f32342d3234203d3e203232313737.roa
File:                     3230302e3136322e3133372e302f32342d3234203d3e203232313737.roa (raw, json)
Hash identifier:          VCXiI0/3mjDRL61J9BsIcX4dfzFa5JrXkqTTXfr5jBA=
Subject key identifier:   87:AB:D6:99:25:6D:6E:99:20:E3:4A:37:8D:E2:61:A8:67:E8:14:D2
Certificate issuer:       /CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Certificate serial:       557237222EDAE485556174AC42D302413545BDDE
Authority key identifier: D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133372e302f32342d3234203d3e203232313737.roa
Signing time:             Thu 04 Apr 2024 03:30:21 +0000
ROA not before:           Thu 04 Apr 2024 03:25:21 +0000
ROA not after:            Thu 03 Apr 2025 03:30:21 +0000
asID:                     22177
IP address blocks:        200.162.137.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl
                          rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:72:37:22:2e:da:e4:85:55:61:74:ac:42:d3:02:41:35:45:bd:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
        Validity
            Not Before: Apr  4 03:25:21 2024 GMT
            Not After : Apr  3 03:30:21 2025 GMT
        Subject: CN=87ABD699256D6E9920E34A378DE261A867E814D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6b:55:21:f1:aa:6a:1c:08:62:cc:41:de:5c:
                    d1:77:6d:32:ef:ff:85:63:89:80:17:36:55:62:7f:
                    51:9d:84:53:95:c9:71:7a:79:ae:ca:b9:ba:cf:e3:
                    89:97:85:a7:a0:82:63:61:af:15:35:24:82:4d:a5:
                    4d:b7:4c:3f:46:69:73:e9:d8:c5:31:d3:87:22:58:
                    66:07:d7:48:26:2d:74:d1:df:90:94:14:ba:f3:19:
                    e1:37:dc:21:89:d2:4b:64:20:b5:72:9f:99:c7:6a:
                    48:b3:52:60:75:8b:83:1b:f1:50:6a:d6:ec:d4:b3:
                    05:d9:62:46:58:bc:d2:0f:4a:d8:09:ca:3d:8b:7b:
                    ae:e3:ec:c0:27:02:fe:27:e6:55:f5:d4:1f:36:00:
                    af:a2:2d:5d:0a:d3:c6:9d:6f:5b:9c:3a:c8:f2:36:
                    ee:08:f0:ab:49:db:21:18:5f:40:a2:8d:40:2e:90:
                    d5:01:5e:4c:b6:a7:ca:e2:3c:9b:de:79:b2:64:7f:
                    8e:37:b6:32:8e:5c:db:74:4a:69:0e:f2:5b:30:7a:
                    1c:3f:9e:4f:b2:0c:05:67:8a:d6:70:ab:0c:26:7d:
                    e0:19:11:99:d1:04:23:8d:7e:ee:ec:fa:60:32:fa:
                    9f:d3:f7:e7:cf:c2:d7:97:f7:cd:30:c3:0e:09:4b:
                    4b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:AB:D6:99:25:6D:6E:99:20:E3:4A:37:8D:E2:61:A8:67:E8:14:D2
            X509v3 Authority Key Identifier:
                keyid:D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133372e302f32342d3234203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.162.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:f5:6f:0b:31:a5:ba:a3:d4:db:65:73:a2:07:14:51:15:8a:
         85:d2:fd:c1:8c:a1:56:6b:d9:0d:76:1a:a7:3b:21:e9:37:fe:
         d8:8d:3b:78:8f:4e:3e:13:12:cd:c3:c0:0c:5e:31:eb:d3:2f:
         20:09:1d:f6:70:f9:1d:ce:22:19:12:b6:e8:72:07:38:7d:b1:
         1e:26:91:08:43:51:af:2a:0f:fa:ed:10:3c:98:70:fb:97:1c:
         96:c5:9b:0d:90:6e:a2:e7:82:88:9c:a9:c9:f4:2d:81:8f:f8:
         70:01:a7:3b:be:25:da:c9:af:dd:16:1b:26:5f:e3:3b:6c:de:
         2a:f1:bb:4d:7d:b3:cc:f2:61:31:23:07:ab:9e:7a:25:01:99:
         07:a0:f9:39:bc:79:00:8d:8c:ba:b5:5a:90:4c:29:ad:eb:c2:
         6f:28:26:b7:e4:df:36:d6:2b:9b:27:1e:59:1b:b7:b9:b1:c3:
         f2:e4:7c:8d:e6:44:9b:da:75:48:61:d6:7a:cb:81:3b:a2:46:
         37:c7:01:21:74:a1:a6:c4:95:24:b5:fa:fd:1f:b1:ce:11:0e:
         37:6d:11:61:e7:f7:de:2b:88:d7:e8:12:9d:f5:cb:f7:fb:99:
         e6:63:8f:d4:fe:85:de:ff:cf:70:f9:14:20:d8:8e:18:b5:be:
         c1:47:ad:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:41 2024 by rpki-client on console-fra.rpki-client.org