Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3132382e302f32302d3234203d3e203232313737.roa
File:                     3230302e3136322e3132382e302f32302d3234203d3e203232313737.roa (raw, json)
Hash identifier:          jT7W0oBWillqQbGZwKHG778jbvJNLEvuF9F4yW1Fs5g=
Subject key identifier:   52:9A:EB:0E:FF:63:A4:81:3B:3D:03:FF:BF:17:F5:19:01:48:29:74
Certificate issuer:       /CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Certificate serial:       171BD5DBA947FCA38D7338DF1E0DBBC2800E422F
Authority key identifier: D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3132382e302f32302d3234203d3e203232313737.roa
Signing time:             Sat 05 Jul 2025 20:30:21 +0000
ROA not before:           Sat 05 Jul 2025 20:25:21 +0000
ROA not after:            Sat 04 Jul 2026 20:30:21 +0000
asID:                     22177
IP address blocks:        200.162.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl
                          rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 15:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:1b:d5:db:a9:47:fc:a3:8d:73:38:df:1e:0d:bb:c2:80:0e:42:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
        Validity
            Not Before: Jul  5 20:25:21 2025 GMT
            Not After : Jul  4 20:30:21 2026 GMT
        Subject: CN=529AEB0EFF63A4813B3D03FFBF17F51901482974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5f:0c:95:65:c2:9f:3e:81:bc:a3:d3:53:50:
                    05:90:1d:fc:8f:bd:84:ae:f1:25:67:f7:b7:ef:0c:
                    9c:c2:d9:28:27:50:d8:f7:0c:9f:5b:36:83:4f:d7:
                    99:ae:fe:4e:02:a0:b6:1e:8a:cf:31:14:36:ee:ae:
                    7a:14:04:00:a6:14:1b:dd:6c:a1:75:c9:3a:c3:68:
                    04:40:f5:b7:ab:1b:26:41:83:b9:82:9e:41:5a:7f:
                    3c:7b:97:6b:bf:90:81:2a:51:4f:a7:ac:50:4a:bf:
                    bc:51:cf:00:d6:d9:85:e8:32:ea:24:11:c5:be:f9:
                    ad:e0:8c:bd:12:c0:ab:09:a0:41:e5:5b:12:e8:ca:
                    9c:04:57:67:3c:23:f2:2e:15:9b:5c:67:79:7b:b6:
                    11:05:35:ef:49:88:66:47:aa:eb:b4:29:94:73:f8:
                    a8:05:39:0c:ca:e2:49:06:46:45:0c:82:6b:96:fc:
                    86:eb:62:35:1b:9e:b2:d8:d2:35:b6:4a:11:44:08:
                    cc:19:06:e2:98:41:dc:b3:f3:0d:89:e8:46:5f:ee:
                    f4:06:62:0c:07:e1:28:a2:72:eb:ad:92:ec:6c:74:
                    44:b9:56:88:c2:4e:67:47:31:fd:14:60:95:f7:dd:
                    86:39:31:3a:dd:28:d7:99:a7:49:2c:56:3a:a6:42:
                    c3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:9A:EB:0E:FF:63:A4:81:3B:3D:03:FF:BF:17:F5:19:01:48:29:74
            X509v3 Authority Key Identifier:
                keyid:D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3132382e302f32302d3234203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.162.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         74:29:5d:30:96:7e:57:cd:20:2f:73:f4:04:73:c0:fc:90:af:
         f7:68:6b:16:15:52:45:96:ab:81:a1:39:34:28:03:c2:09:e5:
         3c:ce:50:6a:20:3d:0c:66:91:71:77:da:b5:5d:74:fd:e8:21:
         c2:a5:af:c1:76:15:cb:dc:ff:70:e4:8e:7d:ce:43:ef:21:f8:
         63:c2:40:73:ec:d8:e9:0d:58:14:0d:0c:f4:c4:c1:1c:e3:37:
         c3:e0:8b:a3:2d:e9:f1:e9:32:dc:3f:e2:42:7a:d4:13:33:f4:
         2f:61:88:6f:48:2a:a5:9b:91:1b:20:e1:3b:4c:e5:fe:f5:3b:
         9e:cc:e8:23:ea:44:c3:13:8a:4a:85:22:d7:69:fa:67:34:56:
         dd:3c:8e:4a:df:42:a7:b0:e8:8a:4a:64:36:e7:78:94:82:11:
         9f:bf:b0:bb:18:8e:98:9f:95:2a:4d:d1:49:5d:f8:76:7d:a7:
         5d:72:21:61:5d:5c:c1:22:de:51:f3:cd:41:73:2e:c6:05:cb:
         a3:1f:f0:9f:10:0a:43:24:e8:35:98:80:f9:ee:01:bb:bc:f1:
         32:d4:93:fb:48:7c:32:dd:fd:53:fd:3e:80:1c:38:52:e5:73:
         91:00:a7:99:0b:35:1b:a1:ef:9c:00:7a:f0:31:94:7a:4f:85:
         ba:f1:72:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 17:55:08 2025 by rpki-client