Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133392e302f32342d3234203d3e203232313737.roa
File:                     3230302e3136322e3133392e302f32342d3234203d3e203232313737.roa (raw, json)
Hash identifier:          q9vUScGM9ZFCzsYbVgUVh1Ap0ojL5rhJ49cd8NT6fk0=
Subject key identifier:   2C:5B:98:51:05:73:C2:03:EC:8B:CE:2E:0A:ED:87:AD:38:52:00:C2
Certificate issuer:       /CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Certificate serial:       585EDD86E8C1D36DFA1CECB796F3FE32097412F5
Authority key identifier: D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133392e302f32342d3234203d3e203232313737.roa
Signing time:             Thu 06 Mar 2025 04:30:08 +0000
ROA not before:           Thu 06 Mar 2025 04:25:08 +0000
ROA not after:            Thu 05 Mar 2026 04:30:08 +0000
asID:                     22177
IP address blocks:        200.162.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl
                          rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 08:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:5e:dd:86:e8:c1:d3:6d:fa:1c:ec:b7:96:f3:fe:32:09:74:12:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
        Validity
            Not Before: Mar  6 04:25:08 2025 GMT
            Not After : Mar  5 04:30:08 2026 GMT
        Subject: CN=2C5B98510573C203EC8BCE2E0AED87AD385200C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a9:e5:1c:15:86:f4:d9:68:a3:50:bb:3d:49:
                    5d:5b:79:c0:71:43:98:e8:63:93:26:a5:d6:db:1a:
                    1c:55:19:84:1e:8c:a6:56:1e:bd:3e:ca:a5:c1:b1:
                    f1:2f:58:2e:af:b6:67:5f:9a:68:b5:fe:1c:72:eb:
                    2c:49:bd:a7:a0:b9:d5:26:0a:94:7e:86:25:ab:15:
                    39:c7:47:c6:0a:6c:d3:5a:05:9a:3e:e4:82:4a:45:
                    9a:fe:dd:95:6c:36:d9:33:f9:72:cc:e8:2b:8b:38:
                    77:2f:a1:74:19:4b:ed:9e:f5:a3:a2:7d:63:4a:97:
                    b8:b9:87:52:58:59:b2:f4:54:44:77:75:8d:ce:c0:
                    70:3c:e8:2a:d6:31:84:8f:bf:c4:c6:25:a0:2f:14:
                    19:fb:58:95:98:c5:fe:44:ae:ca:67:dc:ea:10:86:
                    76:bb:2c:26:3c:e8:89:87:a8:90:20:8c:d0:46:72:
                    ae:a2:b1:82:97:ec:9f:5e:e1:3d:42:c6:00:21:03:
                    14:73:e4:94:68:ca:35:0c:d3:cb:62:75:28:e1:b2:
                    cf:6c:5c:b4:12:27:93:6e:f5:15:33:e2:f0:0a:b0:
                    85:96:c9:93:1b:f9:82:8e:bf:26:34:4a:2a:ee:b3:
                    e7:1c:8b:78:8f:77:b4:bb:ed:8d:30:1b:bd:38:68:
                    b8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:5B:98:51:05:73:C2:03:EC:8B:CE:2E:0A:ED:87:AD:38:52:00:C2
            X509v3 Authority Key Identifier:
                keyid:D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133392e302f32342d3234203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.162.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:24:aa:23:5e:7c:2f:2b:ff:6e:57:3f:56:3a:9c:e7:80:d8:
         d6:6c:f0:35:c0:e6:e2:14:91:67:8c:9e:00:3f:c9:4d:84:85:
         45:ff:ff:b4:5d:97:9c:30:d9:e3:46:c9:8f:65:06:16:35:c7:
         2a:c6:5c:0c:7b:b9:80:04:59:3e:bc:72:f5:53:49:3c:31:b5:
         27:ac:24:34:3e:bc:e0:b0:c9:1c:f7:20:6f:9e:85:2a:de:44:
         98:63:d7:af:72:b3:61:7f:f6:d6:98:81:f7:0b:3e:21:19:d8:
         29:98:91:f0:fb:57:b2:5c:2f:86:ae:36:e4:5b:f9:0f:14:bd:
         a7:18:95:48:0d:ab:88:7f:a3:19:c9:a0:da:bc:87:43:6b:08:
         30:06:ea:ee:c5:ad:c1:c1:b4:97:5d:d7:91:29:77:f1:e0:80:
         bf:35:92:05:79:9e:10:fc:97:48:88:b3:e2:3c:54:f8:93:94:
         93:ae:5d:81:eb:ad:2c:fa:2c:82:34:35:ee:a5:31:b1:ce:0c:
         88:f8:8b:a7:89:96:21:f0:b3:33:18:b8:28:0c:35:e4:d7:9f:
         bd:48:dd:4b:78:6a:c8:c6:1a:1d:5e:1a:c8:51:2f:5f:37:33:
         f5:19:38:9e:72:20:8e:60:5a:b1:6f:84:9a:85:b0:58:5b:7e:
         5c:77:c7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:11:08 2025 by rpki-client