Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3134312e302f32342d3234203d3e203232313737.roa
File:                     3230302e3136322e3134312e302f32342d3234203d3e203232313737.roa (raw, json)
Hash identifier:          JYFPaLOqxTrznZT5KqpSXy0pPa1BlG0B+IDGg+MUmpo=
Subject key identifier:   33:33:06:A3:81:F7:5A:8E:C3:71:C3:13:20:63:6B:9D:10:97:79:E4
Certificate issuer:       /CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Certificate serial:       4FD3B713FA22CDF7196B030A66FC60B812F04091
Authority key identifier: D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3134312e302f32342d3234203d3e203232313737.roa
Signing time:             Thu 04 Apr 2024 03:30:22 +0000
ROA not before:           Thu 04 Apr 2024 03:25:22 +0000
ROA not after:            Thu 03 Apr 2025 03:30:22 +0000
asID:                     22177
IP address blocks:        200.162.141.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl
                          rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:d3:b7:13:fa:22:cd:f7:19:6b:03:0a:66:fc:60:b8:12:f0:40:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
        Validity
            Not Before: Apr  4 03:25:22 2024 GMT
            Not After : Apr  3 03:30:22 2025 GMT
        Subject: CN=333306A381F75A8EC371C31320636B9D109779E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bc:67:94:00:22:fb:5c:3c:89:99:09:8e:c4:
                    89:04:7b:be:6c:de:c5:35:1b:55:90:11:01:c7:b4:
                    91:94:7e:d9:d0:33:31:5f:db:6b:b6:a6:6b:50:a6:
                    23:15:08:5d:59:8d:13:03:28:8f:65:d3:9c:d7:3c:
                    a7:dc:5a:f1:49:83:0b:4e:f8:98:da:57:e5:84:e2:
                    41:0c:cc:88:70:01:19:18:66:05:20:cc:f4:c0:5a:
                    b3:b7:f2:ad:cd:92:1e:76:d8:5a:8b:58:a4:77:9e:
                    4d:50:da:2f:3c:5f:5f:d2:08:fe:a2:05:30:0b:98:
                    64:6b:b7:02:3a:2b:e1:c6:44:18:cb:73:3d:18:a7:
                    01:6c:fe:ca:a6:db:59:98:55:79:a8:fc:b3:bd:02:
                    93:4e:b5:bd:e7:20:8a:e5:c7:d0:a2:2a:69:b1:87:
                    87:a9:23:f1:58:0e:cf:bc:40:8e:6d:34:5d:af:d5:
                    13:2a:1e:7a:12:6a:34:f8:dc:8f:4f:62:36:cd:6d:
                    36:30:37:09:de:b1:5f:05:4c:07:db:50:d6:b8:29:
                    ad:68:bc:28:b6:51:ab:f2:da:fa:63:77:c5:bd:3a:
                    95:d2:71:4d:36:9b:34:af:23:5f:6c:dd:d7:23:a2:
                    27:55:53:4f:4f:dc:ac:1b:5e:d8:6d:e4:2f:8e:a5:
                    ef:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:33:06:A3:81:F7:5A:8E:C3:71:C3:13:20:63:6B:9D:10:97:79:E4
            X509v3 Authority Key Identifier:
                keyid:D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3134312e302f32342d3234203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.162.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:43:36:4f:97:68:ef:dc:ef:1b:6b:eb:de:cd:72:ce:0f:dd:
         f3:21:67:0e:ea:dd:49:49:11:8a:f6:b4:b4:ba:3e:63:68:68:
         c5:78:71:34:ab:04:7b:e3:b7:a9:83:66:35:30:f4:a8:3e:3d:
         f7:ab:77:ec:bf:51:b0:34:0b:63:aa:b4:5e:f5:fe:0b:f9:2f:
         46:50:58:c4:97:95:43:c0:c2:1c:63:67:bb:51:21:14:e1:59:
         42:8d:f2:4f:9e:9b:12:3a:3b:46:97:5c:89:d4:88:b7:1c:ac:
         1e:33:af:e3:9c:a2:d9:b4:f1:08:a8:bd:10:a7:fc:49:3d:1a:
         1d:7e:cf:b9:ad:d2:e5:45:1e:b0:6d:d8:53:49:54:05:d4:13:
         67:93:da:04:80:64:cc:06:63:8f:46:b8:2c:4b:be:90:26:6c:
         fb:3c:56:1e:d1:1f:f7:45:fc:b5:34:40:35:cd:c8:c1:00:c4:
         a7:77:b4:77:27:c7:cf:95:96:7b:0c:f6:ad:ab:ff:71:84:c2:
         9e:2c:f7:cd:77:c6:f8:a8:32:40:78:61:16:52:33:0c:e7:ac:
         f4:0e:29:43:29:23:0c:11:01:31:dd:d7:af:2a:5c:42:9f:3f:
         b5:40:5d:17:3b:45:fa:3b:3e:e9:c5:84:0c:3e:16:2b:1b:56:
         43:ac:7c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:41 2024 by rpki-client on console-fra.rpki-client.org