Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3134302e302f32342d3234203d3e203232313737.roa
File:                     3230302e3136322e3134302e302f32342d3234203d3e203232313737.roa (raw, json)
Hash identifier:          J63MWx9mHT67owAK61MZX/gogGgQbcAyqVBij2WjJYc=
Subject key identifier:   72:89:74:1F:38:9F:FD:FD:5C:A5:1A:C5:46:4A:24:44:EA:F6:1F:1A
Certificate issuer:       /CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Certificate serial:       6BDF5A9ADFD44FEDF7FDDB77CAD249289D0AACF9
Authority key identifier: D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3134302e302f32342d3234203d3e203232313737.roa
Signing time:             Thu 06 Mar 2025 04:30:06 +0000
ROA not before:           Thu 06 Mar 2025 04:25:06 +0000
ROA not after:            Thu 05 Mar 2026 04:30:06 +0000
asID:                     22177
IP address blocks:        200.162.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl
                          rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 08:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:df:5a:9a:df:d4:4f:ed:f7:fd:db:77:ca:d2:49:28:9d:0a:ac:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
        Validity
            Not Before: Mar  6 04:25:06 2025 GMT
            Not After : Mar  5 04:30:06 2026 GMT
        Subject: CN=7289741F389FFDFD5CA51AC5464A2444EAF61F1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:da:a1:cc:8f:d3:e4:9a:82:d1:19:e5:51:bc:
                    33:1f:7f:a2:05:bb:26:97:c7:0f:b6:86:b1:bd:f5:
                    30:8b:05:db:f9:5a:6c:57:b0:3c:76:05:58:49:53:
                    44:46:d9:f4:e0:38:ad:ba:7b:22:a0:b4:0c:15:13:
                    14:1e:0b:60:b0:74:02:7d:24:0a:e3:ca:ac:06:59:
                    f0:35:43:75:17:1f:b3:db:c0:95:f0:49:57:c8:4c:
                    df:f4:d5:97:9d:9b:5f:d6:9c:a4:b0:cc:31:f8:e6:
                    74:fa:7f:eb:55:52:2c:3b:7f:06:a9:5d:5f:a1:74:
                    79:1f:50:c5:52:6c:2a:4e:e5:d2:f3:aa:51:2d:37:
                    06:47:c5:fd:fc:26:02:6a:bb:23:ce:e9:ee:ab:5c:
                    d6:eb:a7:06:fa:50:dc:29:d0:2e:73:48:dc:fc:4e:
                    69:c8:42:1e:75:2e:a2:15:7f:34:98:86:2d:f5:db:
                    68:b0:5f:d3:4f:91:e9:5e:55:fe:ba:fc:3b:1b:c5:
                    92:39:79:aa:2d:66:8c:81:34:83:81:91:3b:94:7e:
                    0d:06:5d:64:c3:6e:7e:d9:0d:e0:c4:1f:d1:87:79:
                    7e:b7:7f:c1:c6:3b:c6:6a:24:ee:d0:e3:62:3d:9c:
                    3d:69:70:24:e4:10:a0:74:7f:08:86:f7:e8:3a:ac:
                    2c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:89:74:1F:38:9F:FD:FD:5C:A5:1A:C5:46:4A:24:44:EA:F6:1F:1A
            X509v3 Authority Key Identifier:
                keyid:D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3134302e302f32342d3234203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.162.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:5b:af:3f:c0:4e:20:02:56:f6:7c:15:3a:f6:ee:e8:7b:20:
         f0:7c:10:85:d0:2a:b6:7a:46:b3:18:60:0e:33:ad:e3:60:db:
         2d:13:67:a5:9d:87:a8:af:32:4b:37:53:10:99:e1:06:2d:45:
         6a:46:8f:b3:cf:c0:a2:b8:ad:88:a8:a0:e9:a8:09:61:3c:8e:
         c2:31:8e:91:ef:05:bb:d5:b1:e3:c4:e4:e9:2d:9b:a3:1a:22:
         c7:e0:11:3e:ab:30:2d:e7:d2:a9:71:d9:7b:0b:49:05:b5:26:
         c0:13:45:9b:cd:e0:ed:35:6a:9b:af:01:be:52:c4:25:4c:66:
         43:17:e5:cb:fb:dc:19:46:cb:13:21:2d:9f:76:63:da:a1:64:
         fa:69:ff:15:07:bd:0e:32:54:d6:83:4d:fa:79:3a:d5:50:7b:
         64:f1:55:42:cf:1e:bf:99:a7:43:93:72:f7:e3:f2:70:ef:09:
         f2:c5:bd:3b:85:fb:78:84:81:1c:41:d2:04:37:20:e5:8d:1d:
         7c:00:6a:e5:07:83:7f:0d:53:4e:61:5e:5c:b0:eb:e7:88:f6:
         f9:ae:5d:32:82:40:13:0f:9e:58:e5:9a:50:1f:67:4e:8e:21:
         eb:a9:a3:f1:ac:4a:f0:6a:14:4c:e9:6f:a0:1a:ea:2b:c0:f2:
         8f:57:3c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:13:58 2025 by rpki-client