Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3134302e302f32322d3232203d3e203232313737.roa
File:                     3230302e3136322e3134302e302f32322d3232203d3e203232313737.roa (raw, json)
Hash identifier:          V9lPophSyDNJnH6l00spBt0cOWWq6eMKpnzTNzEzbWc=
Subject key identifier:   76:03:52:A5:FA:2B:BC:DB:4E:83:F3:9E:E0:EE:8A:B2:88:FE:B8:1A
Certificate issuer:       /CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Certificate serial:       495E1E61FB5EDEF0E0824B94329ABD0A566184C9
Authority key identifier: D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3134302e302f32322d3232203d3e203232313737.roa
Signing time:             Sat 05 Jul 2025 20:30:21 +0000
ROA not before:           Sat 05 Jul 2025 20:25:21 +0000
ROA not after:            Sat 04 Jul 2026 20:30:21 +0000
asID:                     22177
IP address blocks:        200.162.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl
                          rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 15:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:5e:1e:61:fb:5e:de:f0:e0:82:4b:94:32:9a:bd:0a:56:61:84:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
        Validity
            Not Before: Jul  5 20:25:21 2025 GMT
            Not After : Jul  4 20:30:21 2026 GMT
        Subject: CN=760352A5FA2BBCDB4E83F39EE0EE8AB288FEB81A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:27:c3:da:9e:19:c5:69:e6:75:6e:68:a1:9a:
                    f4:b2:b5:68:45:f1:d0:ff:d2:93:57:c0:66:99:1e:
                    bd:9f:fa:8a:99:69:d7:b9:da:14:a6:bc:93:94:d5:
                    f1:1c:e8:38:ca:f2:70:41:46:d1:f2:b5:8f:e7:6f:
                    2e:d8:9e:52:01:c8:fe:60:c3:e5:18:3c:e3:94:74:
                    62:d0:cc:b3:4e:9a:7e:31:5d:d7:4e:60:d3:c0:3b:
                    a3:39:5b:9a:99:e0:1f:19:6a:94:2f:df:6b:7a:b9:
                    fa:83:5b:5a:3b:fa:31:35:76:53:cf:26:26:73:19:
                    f5:85:11:74:1e:d6:02:bb:79:f7:8c:7e:ed:39:b1:
                    9c:92:92:f3:9a:7e:1c:b7:22:a6:f1:fd:5e:2a:a8:
                    48:85:29:61:75:8a:86:b2:dd:c9:f7:89:28:ee:4b:
                    08:c7:c6:bf:f1:00:6d:f9:88:3c:23:4f:35:02:3d:
                    1a:2d:0b:55:87:95:75:53:2c:0c:59:dc:49:3c:75:
                    59:4b:12:84:5a:cc:d2:81:b5:30:47:36:1d:04:eb:
                    8c:cb:4d:fc:1e:c3:93:34:08:a8:39:02:e8:40:a4:
                    eb:65:60:4a:e6:1d:34:dc:e5:55:2d:6c:ea:ba:fa:
                    76:05:f0:66:77:37:53:d3:56:d9:ed:3b:46:cc:5c:
                    9c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:03:52:A5:FA:2B:BC:DB:4E:83:F3:9E:E0:EE:8A:B2:88:FE:B8:1A
            X509v3 Authority Key Identifier:
                keyid:D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3134302e302f32322d3232203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.162.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:71:c4:44:ce:72:af:74:96:67:51:90:6a:9a:d7:60:af:99:
         0d:ad:45:1b:6d:2b:bf:49:e9:db:ee:41:ca:5a:c2:23:a4:10:
         f6:06:ef:46:6a:e9:8e:7d:b8:fa:d0:25:be:cc:e8:fa:6f:2d:
         1b:7f:f5:4b:b0:bb:ff:10:6f:2d:43:b5:75:91:01:11:46:b7:
         66:bc:f5:c8:aa:a1:92:54:50:f4:e3:e4:0e:73:af:91:b3:3e:
         81:d0:a2:bd:00:14:16:60:38:54:73:ef:4f:3b:4a:d0:31:08:
         b1:e1:b3:01:bd:57:67:d4:85:ea:c8:7f:00:9c:aa:dc:81:75:
         6d:97:98:fc:b6:45:d8:92:84:e9:a1:8c:b1:c6:d1:16:4d:6e:
         ef:93:cb:ba:7e:f2:d7:47:35:2d:6f:12:e6:60:83:bb:63:e8:
         ba:93:0f:9c:f6:01:10:59:d1:f7:71:dc:d2:7e:b5:d9:d0:8a:
         e7:85:ab:12:3e:00:3d:95:79:98:b2:95:a6:d5:9e:19:6a:91:
         dd:4c:3c:49:c3:96:9f:82:4b:10:c7:23:ab:cc:30:5e:2f:5b:
         67:ee:d6:19:d0:4a:e5:4b:2b:82:be:48:7e:8b:cf:8e:7c:cc:
         98:b8:ea:a0:b6:2a:11:ab:b4:5f:71:aa:67:ae:0a:7f:24:df:
         49:3e:09:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 18:03:01 2025 by rpki-client