Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3132382e302f32322d3232203d3e203232313737.roa
File:                     3230302e3136322e3132382e302f32322d3232203d3e203232313737.roa (raw, json)
Hash identifier:          qLx4wxadjiGUy2TDR5uvvpBhOcJA2uGwDjFEXNP+1rU=
Subject key identifier:   82:A8:54:4C:51:BC:39:1A:E8:E9:93:AA:56:51:A3:CA:8D:AB:3D:59
Certificate issuer:       /CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Certificate serial:       7D84C1BCBA7848DEB9F15E4E5C7633F926B37388
Authority key identifier: D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3132382e302f32322d3232203d3e203232313737.roa
Signing time:             Sat 05 Jul 2025 20:30:21 +0000
ROA not before:           Sat 05 Jul 2025 20:25:21 +0000
ROA not after:            Sat 04 Jul 2026 20:30:21 +0000
asID:                     22177
IP address blocks:        200.162.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl
                          rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 15:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:84:c1:bc:ba:78:48:de:b9:f1:5e:4e:5c:76:33:f9:26:b3:73:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
        Validity
            Not Before: Jul  5 20:25:21 2025 GMT
            Not After : Jul  4 20:30:21 2026 GMT
        Subject: CN=82A8544C51BC391AE8E993AA5651A3CA8DAB3D59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:53:7b:3c:f2:43:e7:7a:5d:46:0c:ad:df:0f:
                    7f:eb:53:4c:90:f2:3e:19:ed:2e:5a:2d:31:ba:fa:
                    cc:5d:b6:f7:dd:11:30:46:ad:44:73:41:46:b0:06:
                    72:f8:ef:23:30:0a:8d:ba:b3:d9:fd:c6:58:19:92:
                    aa:6c:b5:03:4f:af:cd:a1:8f:9e:a4:cc:64:9a:b8:
                    99:4a:25:da:ae:90:63:59:db:f6:cd:be:be:75:04:
                    7a:d7:d2:07:76:38:42:e9:fb:17:dc:f6:f5:41:04:
                    36:c7:9c:68:ac:f1:a7:31:62:e1:17:e1:d0:01:70:
                    7a:57:0f:6e:8a:9a:75:21:ad:56:c8:33:ec:c8:a1:
                    05:ad:de:1b:10:6c:4a:48:c7:a1:fa:71:b4:13:0e:
                    a2:2a:9a:1c:87:3b:19:ed:69:cc:d1:b1:e2:81:ab:
                    f0:92:e5:e6:e4:49:09:d6:83:98:5e:e3:d5:2c:34:
                    5b:8c:5c:19:d5:06:ff:4e:18:53:71:70:50:89:cb:
                    72:51:b5:24:df:71:b1:70:b8:41:0a:d7:71:99:c8:
                    9d:45:93:0e:32:9d:2d:81:b7:cf:72:c7:75:9d:dd:
                    09:5b:b3:45:b5:f4:7d:7b:9d:cb:95:90:2c:b4:1f:
                    73:b8:dc:96:68:d6:fd:1f:ab:da:bf:0d:bb:eb:2b:
                    f5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A8:54:4C:51:BC:39:1A:E8:E9:93:AA:56:51:A3:CA:8D:AB:3D:59
            X509v3 Authority Key Identifier:
                keyid:D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3132382e302f32322d3232203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.162.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:8e:56:95:72:c6:00:c8:f8:d5:ad:11:92:73:d6:69:55:6a:
         6f:12:7e:e6:80:ca:ba:7a:b3:db:af:49:92:c9:bb:d5:12:4f:
         33:eb:4b:00:c4:b9:ba:e8:bd:8f:6b:bc:57:19:d8:5a:49:ff:
         96:c3:b1:64:4d:c4:36:cf:16:9a:b3:7b:99:9c:cd:c6:82:e9:
         e5:24:ab:91:7d:a0:93:c6:b2:92:17:3f:df:33:64:53:52:af:
         c8:6d:80:80:bc:ca:ee:f6:67:b8:7e:fe:79:4b:d2:8d:c6:ba:
         35:c5:34:d0:e8:30:bb:af:2a:41:3b:2a:42:e6:d7:7a:ed:5c:
         f4:66:15:06:5b:6c:7e:48:e7:57:d0:54:b6:84:66:70:49:cc:
         f7:ab:62:ab:f7:f1:37:b2:4a:b3:a2:5b:74:b9:2f:71:ad:34:
         f2:3d:45:b9:be:bd:fd:52:fb:77:51:89:b7:a2:40:76:7d:b8:
         fb:2e:57:ad:77:a1:5d:cf:41:4e:cd:00:07:45:f4:d8:90:9b:
         52:ca:f3:a7:76:39:2c:7d:bc:8e:3f:41:9b:60:71:e8:09:01:
         dc:32:91:9a:1c:9c:c4:81:d5:07:0f:6f:14:e6:9c:b5:0d:c5:
         1e:2c:c7:0e:6b:07:77:c2:8b:63:0d:41:56:e6:ed:1c:ad:15:
         40:2c:b4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 17:42:13 2025 by rpki-client