Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3134302e302f32322d3232203d3e203232313737.roa
File:                     3230302e3136322e3134302e302f32322d3232203d3e203232313737.roa (raw, json)
Hash identifier:          oJKCoKLcwXi2c8HAjaZ+kD1kOccgDEmZcCEP0UDdMAw=
Subject key identifier:   92:C9:5A:39:27:54:EF:27:C8:3F:B1:87:E7:EF:9D:A0:A5:22:E6:81
Certificate issuer:       /CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Certificate serial:       0D7D8700459B316BBB041C10BE5A3141445B598A
Authority key identifier: D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3134302e302f32322d3232203d3e203232313737.roa
Signing time:             Sat 03 Aug 2024 20:14:16 +0000
ROA not before:           Sat 03 Aug 2024 20:09:16 +0000
ROA not after:            Sat 02 Aug 2025 20:14:16 +0000
asID:                     22177
IP address blocks:        200.162.140.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl
                          rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:09:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:7d:87:00:45:9b:31:6b:bb:04:1c:10:be:5a:31:41:44:5b:59:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
        Validity
            Not Before: Aug  3 20:09:16 2024 GMT
            Not After : Aug  2 20:14:16 2025 GMT
        Subject: CN=92C95A392754EF27C83FB187E7EF9DA0A522E681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:94:66:21:60:fd:eb:0e:98:69:9e:93:1e:f5:
                    52:e6:c1:d6:66:55:3f:73:76:4e:21:8d:8a:cd:bb:
                    58:df:b8:c7:8e:99:04:19:bc:1a:bd:83:49:97:38:
                    8f:b2:9f:c0:38:7d:61:6e:2b:5b:b0:0e:6d:2c:b4:
                    7d:e8:ad:c7:0d:ab:b7:44:fc:2c:66:f2:46:b5:c5:
                    8e:fb:34:2f:a0:99:d4:e7:60:c3:d6:98:35:ad:c7:
                    8d:13:ad:60:67:d5:6b:0f:7d:fd:3d:23:b5:2b:a6:
                    a0:e2:2e:05:bd:c3:ea:06:20:37:ab:26:20:ac:78:
                    92:f0:1d:3b:22:21:43:ba:e0:2d:c6:90:25:43:f9:
                    98:44:cf:a7:c5:48:df:61:eb:87:d0:50:c9:f6:5b:
                    c9:f4:93:b7:53:44:09:35:d3:ef:21:e2:b7:4f:e5:
                    c9:cd:2b:82:24:6e:b8:41:01:c0:11:18:30:ea:f3:
                    85:d6:9f:ed:13:03:fe:bf:9e:13:40:c2:67:b1:0b:
                    ee:ef:20:dd:07:49:32:ee:6d:df:ce:05:25:4e:20:
                    f3:1c:77:38:c6:7c:d4:f9:58:f9:d5:4f:71:ae:2d:
                    2d:96:d5:91:f3:64:29:bb:36:69:ec:68:67:89:d4:
                    b5:1c:17:3d:5a:c4:95:b0:39:c8:77:27:31:ef:fe:
                    dc:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C9:5A:39:27:54:EF:27:C8:3F:B1:87:E7:EF:9D:A0:A5:22:E6:81
            X509v3 Authority Key Identifier:
                keyid:D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3134302e302f32322d3232203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.162.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:9e:b6:fa:3a:85:08:c8:93:b4:fd:1f:b8:b1:df:2f:39:ad:
         08:67:61:6b:92:92:ca:bb:3a:60:7d:14:dd:11:d6:b6:cc:b3:
         b0:23:26:d2:28:84:78:f2:18:c8:ce:78:8d:c8:39:3f:46:ce:
         49:da:03:c5:b1:de:68:36:ea:75:22:f7:9c:74:0f:13:02:1f:
         87:48:84:45:18:45:85:1c:98:eb:0a:52:7d:56:9d:90:d2:0c:
         25:82:66:a6:95:c4:35:76:a3:38:0d:8e:67:9f:fd:a8:2a:22:
         57:15:31:be:cd:54:fe:d5:b9:b8:57:40:f3:1c:28:0b:45:53:
         5d:7e:6d:f0:a0:54:f5:93:55:f6:a5:6a:2b:45:f5:0f:cb:f7:
         13:23:d2:bd:73:b0:e2:e2:a0:5e:80:de:e9:56:18:8b:04:95:
         6b:2c:b9:2c:2b:ce:7c:5c:1c:a8:36:02:59:b8:bd:75:a0:bb:
         28:ce:0e:9f:4f:7e:5f:f4:42:1b:46:6f:a7:4d:32:4c:bf:a3:
         6b:ba:09:f8:b2:ef:cf:f2:d7:06:ff:8c:62:5b:61:47:87:e3:
         2f:ac:95:15:7e:21:96:f9:c6:2c:82:56:60:bc:c9:9e:32:30:
         ba:29:8f:86:e2:c4:ef:04:a1:b2:9f:d1:60:f4:26:54:17:5e:
         83:56:0b:0d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDX2HAEWbMWu7BBwQvloxQURbWYowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDFCOTVCOUY4MTJGODc3RUZCNDg2RDJFNEMzMEI3MDNG
Q0FFQzgyOTAeFw0yNDA4MDMyMDA5MTZaFw0yNTA4MDIyMDE0MTZaMDMxMTAvBgNV
BAMTKDkyQzk1QTM5Mjc1NEVGMjdDODNGQjE4N0U3RUY5REEwQTUyMkU2ODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwlGYhYP3rDphpnpMe9VLmwdZm
VT9zdk4hjYrNu1jfuMeOmQQZvBq9g0mXOI+yn8A4fWFuK1uwDm0stH3orccNq7dE
/Cxm8ka1xY77NC+gmdTnYMPWmDWtx40TrWBn1WsPff09I7UrpqDiLgW9w+oGIDer
JiCseJLwHTsiIUO64C3GkCVD+ZhEz6fFSN9h64fQUMn2W8n0k7dTRAk10+8h4rdP
5cnNK4IkbrhBAcARGDDq84XWn+0TA/6/nhNAwmexC+7vIN0HSTLubd/OBSVOIPMc
dzjGfNT5WPnVT3GuLS2W1ZHzZCm7NmnsaGeJ1LUcFz1axJWwOch3JzHv/twxAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUkslaOSdU7yfIP7GH5++doKUi5oEwHwYDVR0j
BBgwFoAU0blbn4Evh377SG0uTDC3A/yuyCkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjdYeThRY0NvTXlZRjgxVXRpQUZLUTgyalEza1RubzQ3dnVQTlZXcmY4
TmsvMS9EMUI5NUI5RjgxMkY4NzdFRkI0ODZEMkU0QzMwQjcwM0ZDQUVDODI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxQjk1QjlGODEyRjg3N0VG
QjQ4NkQyRTRDMzBCNzAzRkNBRUM4MjkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I3WHk4UWNDb015WUY4MVV0aUFGS1E4MmpRM2tUbm80N3Z1UE5WV3JmOE5rLzEv
MzIzMDMwMmUzMTM2MzIyZTMxMzQzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzIzMTM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALIoowwDQYJKoZIhvcNAQELBQADggEBAGWetvo6
hQjIk7T9H7ix3y85rQhnYWuSksq7OmB9FN0R1rbMs7AjJtIohHjyGMjOeI3IOT9G
zknaA8Wx3mg26nUi95x0DxMCH4dIhEUYRYUcmOsKUn1WnZDSDCWCZqaVxDV2ozgN
jmef/agqIlcVMb7NVP7VubhXQPMcKAtFU11+bfCgVPWTVfalaitF9Q/L9xMj0r1z
sOLioF6A3ulWGIsElWssuSwrznxcHKg2Alm4vXWguyjODp9Pfl/0QhtGb6dNMky/
o2u6Cfiy78/y1wb/jGJbYUeH4y+slRV+IZb5xiyCVmC8yZ4yMLopj4bixO8EobKf
0WD0JlQXXoNWCw0=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:02 2024 by rpki-client on console-ams.rpki-client.org