Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3134322e302f32342d3234203d3e203232313737.roa
File:                     3230302e3136322e3134322e302f32342d3234203d3e203232313737.roa (raw, json)
Hash identifier:          loUUpTKJItKs23J3Kz5LvuT7YNn/8fchJKmUwRuIumw=
Subject key identifier:   C9:2C:D6:2A:60:F4:28:1E:79:00:BE:6B:0C:3C:40:12:B8:C0:13:83
Certificate issuer:       /CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Certificate serial:       5CE1D28697AF7036988FCDC6DAB34B834757F61A
Authority key identifier: D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3134322e302f32342d3234203d3e203232313737.roa
Signing time:             Thu 04 Apr 2024 03:30:23 +0000
ROA not before:           Thu 04 Apr 2024 03:25:23 +0000
ROA not after:            Thu 03 Apr 2025 03:30:23 +0000
asID:                     22177
IP address blocks:        200.162.142.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl
                          rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:e1:d2:86:97:af:70:36:98:8f:cd:c6:da:b3:4b:83:47:57:f6:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
        Validity
            Not Before: Apr  4 03:25:23 2024 GMT
            Not After : Apr  3 03:30:23 2025 GMT
        Subject: CN=C92CD62A60F4281E7900BE6B0C3C4012B8C01383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:44:38:9a:77:3d:1b:97:16:b3:b4:b1:69:17:
                    4e:61:77:6f:93:ba:bb:4e:ed:0c:54:f3:77:b5:3b:
                    f2:b4:92:be:98:56:ad:6c:37:bf:bc:62:80:84:1b:
                    e5:73:21:10:10:f6:a8:0f:cd:86:f2:18:41:84:03:
                    9d:79:75:5d:f7:b2:07:67:b0:9a:8b:4d:2f:39:0e:
                    02:15:60:74:ad:ee:8b:09:58:5d:e4:08:bc:cf:61:
                    a3:9a:64:43:7c:17:2c:2a:f0:8e:42:25:fc:bb:e7:
                    9d:99:15:00:50:75:48:2e:80:18:76:d0:4a:6a:16:
                    23:f7:e5:3c:08:77:12:9e:14:13:e7:87:70:b8:f1:
                    c5:b6:bb:31:30:45:97:85:0c:0b:1d:79:de:cc:e0:
                    f3:4d:ac:aa:87:9b:9b:ca:e5:f0:86:90:44:89:d0:
                    c0:5f:ed:17:c7:85:52:e1:a6:ba:7e:de:b5:57:90:
                    2d:94:09:45:c3:47:96:f3:76:3c:bc:2f:e1:20:5d:
                    21:f8:30:67:39:28:09:1c:39:c1:1e:6c:10:1b:4b:
                    c5:ae:82:aa:99:9a:14:6b:e2:54:4f:4d:fc:82:f5:
                    43:c4:ad:35:97:02:7f:e0:fa:11:d1:84:25:e4:de:
                    24:7e:f4:26:b4:68:98:48:f6:58:06:55:51:94:34:
                    7e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:2C:D6:2A:60:F4:28:1E:79:00:BE:6B:0C:3C:40:12:B8:C0:13:83
            X509v3 Authority Key Identifier:
                keyid:D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3134322e302f32342d3234203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.162.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:3f:51:09:04:1d:72:c3:6d:4c:13:20:9f:81:eb:ea:62:16:
         5a:f0:39:2d:df:fc:8f:dd:12:42:66:da:3e:e0:40:b8:38:44:
         74:0d:af:6f:86:9d:50:f2:44:af:0e:c6:26:d3:a3:68:fe:d0:
         4a:f4:fc:1d:69:07:66:81:f5:a7:79:04:6e:59:70:f7:a1:15:
         fc:d1:b6:d4:25:e8:da:8a:9a:a2:8e:96:e7:92:5a:c6:83:51:
         43:6d:33:80:0e:46:bc:20:c5:8e:c2:4d:93:49:28:f3:ad:ef:
         89:bf:98:14:bb:a3:c0:c9:08:e2:bb:4e:92:eb:0b:a1:30:86:
         a7:e2:46:b0:d8:12:b1:76:98:01:8d:f5:67:a6:92:3c:a7:82:
         b2:27:e7:41:6a:6e:9a:01:83:43:f0:21:67:59:2f:e8:50:e9:
         7c:a8:a6:c8:33:96:ae:ab:b3:d8:df:b3:74:3a:5c:ee:0c:98:
         59:8a:8b:b9:13:88:13:e3:7e:f1:dc:c4:16:ca:12:61:70:4a:
         d4:94:4b:b1:d1:4f:a0:f7:72:06:2d:b3:1e:95:5e:8e:44:b1:
         a6:cd:cf:2e:12:74:ac:f3:21:05:59:ea:24:87:e3:ba:2f:3e:
         95:15:2d:78:ac:f0:42:dd:a0:a8:97:41:cf:a4:71:99:dc:a6:
         91:23:29:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:41 2024 by rpki-client on console-fra.rpki-client.org