Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e31392e3131322e302f32302d3332203d3e2031393136.roa
File:                     3230302e31392e3131322e302f32302d3332203d3e2031393136.roa (raw, json)
Hash identifier:          n6MAsNdfivHKgE5++gqAZDnQlHCO2XW+5XtRPY+h2Yc=
Subject key identifier:   8A:09:7C:DF:2B:7D:7F:77:05:69:B3:ED:D5:D6:D3:AA:AA:51:1D:A6
Certificate issuer:       /CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
Certificate serial:       374BEC1515A53FEDE95962D86CF4900BB6BBB1C3
Authority key identifier: 77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e31392e3131322e302f32302d3332203d3e2031393136.roa
Signing time:             Wed 26 Jun 2024 20:46:31 +0000
ROA not before:           Wed 26 Jun 2024 20:41:31 +0000
ROA not after:            Wed 25 Jun 2025 20:46:31 +0000
asID:                     1916
IP address blocks:        200.19.112.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Jun 2024 22:07:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:4b:ec:15:15:a5:3f:ed:e9:59:62:d8:6c:f4:90:0b:b6:bb:b1:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
        Validity
            Not Before: Jun 26 20:41:31 2024 GMT
            Not After : Jun 25 20:46:31 2025 GMT
        Subject: CN=8A097CDF2B7D7F770569B3EDD5D6D3AAAA511DA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:db:e1:3d:c1:b5:72:9d:5f:d2:bf:6f:21:40:
                    1f:6c:c7:3a:b2:f3:4b:af:cd:da:f4:60:bc:fd:1f:
                    80:fa:e4:1b:31:9a:80:fd:d2:a3:42:f8:ac:95:3d:
                    45:48:1a:33:c8:f0:cf:90:8f:cc:f7:38:82:a6:b6:
                    c0:32:fe:8b:ff:fc:53:05:48:73:26:67:fb:f5:0a:
                    95:f9:45:da:e5:5e:ac:39:48:7d:97:98:e3:e0:31:
                    27:65:4c:23:ac:10:8d:cd:28:bd:61:f8:9f:f2:a1:
                    15:ba:43:ab:16:73:1a:ec:1a:5e:1a:0b:2e:17:c6:
                    13:31:97:ad:d6:b9:0b:54:88:06:ea:c7:da:97:be:
                    ee:8e:5b:db:11:14:92:e9:58:92:f1:51:86:40:9a:
                    b3:c3:f2:a9:4a:e6:ef:01:fe:db:b0:d7:c7:e7:3d:
                    be:77:4b:28:e6:e1:63:97:ae:07:b0:18:cf:ad:96:
                    c3:60:d0:b0:75:66:5d:39:8e:0a:9f:8b:60:1a:da:
                    49:f9:42:15:1f:a9:a6:ee:cd:3b:e7:0d:c1:0b:1e:
                    51:d3:91:3d:39:e8:f9:6a:cc:60:32:53:22:be:d3:
                    9e:0c:94:d6:33:87:b1:0d:a6:61:bc:e5:e5:a5:7d:
                    bc:23:3b:26:dc:f3:82:db:03:93:00:af:c8:cb:e1:
                    bb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:09:7C:DF:2B:7D:7F:77:05:69:B3:ED:D5:D6:D3:AA:AA:51:1D:A6
            X509v3 Authority Key Identifier:
                keyid:77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e31392e3131322e302f32302d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6d:b5:01:4d:f8:0e:9e:f1:1d:84:75:cf:b0:e5:14:cc:e8:1f:
         74:23:59:13:b0:55:05:c3:15:90:08:c3:23:0b:e8:df:38:c5:
         29:7d:63:d5:84:fd:ae:68:a8:62:5d:1e:3d:64:4b:32:1d:6c:
         07:61:6a:5a:a3:75:42:32:3f:4a:d8:6d:53:79:81:c4:67:e9:
         25:3f:01:8e:d4:10:91:9f:d1:56:34:1f:bf:86:c6:55:bc:aa:
         da:85:c1:3f:7b:d6:19:35:b1:de:94:ec:c7:4f:da:c5:59:4a:
         c4:19:ca:75:1d:1d:e7:a2:fb:fb:77:e1:a1:32:61:f5:be:e1:
         83:db:ec:f3:35:5a:4a:dd:d6:b9:4d:b8:22:f5:9d:9c:84:a6:
         59:66:91:85:47:1c:b3:02:49:09:f7:bc:40:70:36:70:58:84:
         f3:24:70:9e:83:d7:63:8a:70:36:df:6d:ba:d1:ff:d0:4c:d5:
         89:e7:c3:10:c5:c2:cc:1a:ed:74:8b:e0:6c:77:63:8e:85:7e:
         66:9b:d5:70:4b:78:df:07:c9:34:56:79:3a:22:14:42:76:27:
         a0:fa:03:8d:01:f8:bd:ac:8e:e2:d8:51:2c:c1:5d:ba:24:22:
         97:51:b9:9a:e8:f0:93:69:75:89:f8:4d:25:9a:91:07:70:06:
         8f:ce:ae:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 23:09:01 2024 by rpki-client on console-ams.rpki-client.org