Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3134302e302f32342d3234203d3e203232313737.roa
File:                     3230302e3136322e3134302e302f32342d3234203d3e203232313737.roa (raw, json)
Hash identifier:          bB79VWYVCI9xjoQNsn/uBDVzGuhC3sfMYSb+UEoBChk=
Subject key identifier:   AD:86:9E:61:AD:F8:2B:D9:FB:13:E9:28:98:6A:AF:3E:DE:D1:96:FD
Certificate issuer:       /CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Certificate serial:       026341013424DB5861B2586A86BE3DBB3AED9188
Authority key identifier: D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3134302e302f32342d3234203d3e203232313737.roa
Signing time:             Thu 04 Apr 2024 03:30:21 +0000
ROA not before:           Thu 04 Apr 2024 03:25:21 +0000
ROA not after:            Thu 03 Apr 2025 03:30:21 +0000
asID:                     22177
IP address blocks:        200.162.140.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl
                          rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:63:41:01:34:24:db:58:61:b2:58:6a:86:be:3d:bb:3a:ed:91:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
        Validity
            Not Before: Apr  4 03:25:21 2024 GMT
            Not After : Apr  3 03:30:21 2025 GMT
        Subject: CN=AD869E61ADF82BD9FB13E928986AAF3EDED196FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d7:21:7c:7f:a7:f4:b5:f8:32:21:5d:72:9a:
                    8d:80:0b:c0:f4:60:4a:8c:68:f0:90:a5:84:e7:9a:
                    29:74:29:c8:fd:66:37:c4:51:2d:36:91:87:e8:e9:
                    e8:17:42:76:46:01:84:60:01:6b:ae:94:0b:79:e4:
                    3b:b4:70:73:12:7b:a3:cb:3a:93:a3:94:a0:35:44:
                    54:e0:0c:a1:d2:e4:d1:18:ae:c2:54:d3:21:fc:6e:
                    8e:d2:bf:30:47:8e:77:62:b0:8a:69:b9:86:df:cb:
                    ba:82:04:44:f1:50:d5:93:8b:38:b2:52:ac:ba:fa:
                    e3:a1:fc:9c:ca:d9:ba:0f:71:e9:7e:0a:47:dc:19:
                    8e:14:0f:f6:dc:72:97:f7:e6:73:20:2c:ce:8d:ba:
                    48:6a:69:bc:da:6d:11:2a:f7:a1:63:19:68:1a:a3:
                    91:97:c8:39:af:9f:8d:f4:33:0a:f1:12:3f:5c:68:
                    46:54:8d:f1:b3:16:fa:c4:23:14:a8:50:87:1c:e8:
                    df:2e:ca:14:5d:fb:28:32:f3:0e:24:75:58:89:e7:
                    db:5a:fc:dd:98:d6:f9:c3:27:4b:0d:7b:3a:ca:5b:
                    1c:94:3e:af:a6:c2:0b:67:18:56:31:50:69:3d:9e:
                    f1:ee:a2:3f:a4:82:13:19:fd:55:df:0e:ad:87:11:
                    55:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:86:9E:61:AD:F8:2B:D9:FB:13:E9:28:98:6A:AF:3E:DE:D1:96:FD
            X509v3 Authority Key Identifier:
                keyid:D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3134302e302f32342d3234203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.162.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:5a:72:50:00:1e:a3:11:e5:e7:59:e8:fc:4b:5d:93:f6:bf:
         0c:41:21:33:c2:58:69:65:6c:32:77:76:2b:25:d2:e1:8c:89:
         dd:af:f3:4f:b9:f9:7f:21:36:31:30:cb:f8:4e:a3:ee:22:42:
         9b:31:b0:7b:9e:d3:73:99:0d:80:af:72:55:a5:9a:c6:1c:26:
         a4:9e:c0:a1:5e:83:8c:f5:b0:9c:10:b5:7f:85:59:7c:8f:b0:
         dc:5a:34:12:6c:88:fb:72:56:ad:02:74:4a:b0:52:12:45:2d:
         71:44:dd:23:93:0b:67:92:a2:3b:81:e6:e7:78:29:07:23:c6:
         f5:67:e6:b8:4b:58:25:34:3f:d2:b9:bd:2c:65:a7:e3:09:5f:
         45:72:74:41:fc:3e:ce:cd:9f:53:67:80:3d:7e:d5:30:c8:b5:
         f5:a5:b5:56:e0:76:b5:99:2a:70:34:ee:93:99:fd:8d:eb:02:
         6e:8b:42:5a:87:80:be:fa:49:88:4a:64:46:8a:30:ba:dd:99:
         8d:7f:35:c0:7e:09:a1:91:13:21:9e:da:7b:1c:29:96:21:ba:
         96:28:e2:32:90:cd:69:60:60:5e:ea:41:57:05:4c:17:a1:f2:
         e7:b2:7e:50:48:3b:e9:62:ca:ef:35:1d:f0:a0:38:ba:e1:47:
         49:54:16:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 09:28:24 2024 by rpki-client on console-fra.rpki-client.org