Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3231392e3133302e302f32332d3332203d3e2030.roa
File:                     3230302e3231392e3133302e302f32332d3332203d3e2030.roa (raw, json)
Hash identifier:          +T5yM/DmogKKbYvm7sfalmWHHpGH4TJdtmhPFRlfIJo=
Subject key identifier:   B9:2D:6A:19:A4:AD:56:9C:77:BF:89:91:8E:CD:C0:26:10:02:EA:8A
Certificate issuer:       /CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
Certificate serial:       4D979C36C9953DD9AB2FAF0BB7A684056885A200
Authority key identifier: A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3231392e3133302e302f32332d3332203d3e2030.roa
Signing time:             Sat 23 Sep 2023 16:54:00 +0000
ROA not before:           Sat 23 Sep 2023 16:49:00 +0000
ROA not after:            Sat 21 Sep 2024 16:54:00 +0000
asID:                     0
IP address blocks:        200.219.130.0/23 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/A483B4186AD840A7AC891A010501E4DCDA8B38A9.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/A483B4186AD840A7AC891A010501E4DCDA8B38A9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Mar 2024 21:46:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:97:9c:36:c9:95:3d:d9:ab:2f:af:0b:b7:a6:84:05:68:85:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
        Validity
            Not Before: Sep 23 16:49:00 2023 GMT
            Not After : Sep 21 16:54:00 2024 GMT
        Subject: CN=3082010A0282010100C77F5B5B69595EA54C9D092BF2474E923A1FA536394CE96CA65B7FB694E458C225E7B8675F9D9436B6F22AC05AFC12D948E0159124B47C5F79F87CBA173E7A7C8E14307E5AC9C6E943BE12FD5BB03347079BBEF1B561154E28C219C77B0E37A1154B658977D868C5F94392E4003CF4D86B26D51410B72F37AB5A4BFA855397AF4C65DAC63130D93F0C8B90C6EDCE44CAD526F027BC11CE03EA13363A3A078F18BFBD4FB668E32D3FD6CF28F7544D935B911BDE28827E13D883C9AE202C5C954935262541B4A32C902157B4416B8B701DF8810D7523E4F411B20535681F2AA6508F7472F66E1C379CD66007BA1D32F16B87A3B5DE91A0646E04C6769097A356F10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7f:5b:5b:69:59:5e:a5:4c:9d:09:2b:f2:47:
                    4e:92:3a:1f:a5:36:39:4c:e9:6c:a6:5b:7f:b6:94:
                    e4:58:c2:25:e7:b8:67:5f:9d:94:36:b6:f2:2a:c0:
                    5a:fc:12:d9:48:e0:15:91:24:b4:7c:5f:79:f8:7c:
                    ba:17:3e:7a:7c:8e:14:30:7e:5a:c9:c6:e9:43:be:
                    12:fd:5b:b0:33:47:07:9b:be:f1:b5:61:15:4e:28:
                    c2:19:c7:7b:0e:37:a1:15:4b:65:89:77:d8:68:c5:
                    f9:43:92:e4:00:3c:f4:d8:6b:26:d5:14:10:b7:2f:
                    37:ab:5a:4b:fa:85:53:97:af:4c:65:da:c6:31:30:
                    d9:3f:0c:8b:90:c6:ed:ce:44:ca:d5:26:f0:27:bc:
                    11:ce:03:ea:13:36:3a:3a:07:8f:18:bf:bd:4f:b6:
                    68:e3:2d:3f:d6:cf:28:f7:54:4d:93:5b:91:1b:de:
                    28:82:7e:13:d8:83:c9:ae:20:2c:5c:95:49:35:26:
                    25:41:b4:a3:2c:90:21:57:b4:41:6b:8b:70:1d:f8:
                    81:0d:75:23:e4:f4:11:b2:05:35:68:1f:2a:a6:50:
                    8f:74:72:f6:6e:1c:37:9c:d6:60:07:ba:1d:32:f1:
                    6b:87:a3:b5:de:91:a0:64:6e:04:c6:76:90:97:a3:
                    56:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:2D:6A:19:A4:AD:56:9C:77:BF:89:91:8E:CD:C0:26:10:02:EA:8A
            X509v3 Authority Key Identifier:
                keyid:A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/A483B4186AD840A7AC891A010501E4DCDA8B38A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3231392e3133302e302f32332d3332203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:f3:af:e7:a6:1f:b9:d6:6e:b6:23:23:b3:14:43:ff:90:82:
         c7:4b:e2:d7:a1:8c:4e:e0:32:35:1c:34:6b:9d:06:80:43:bb:
         bb:d0:47:82:be:77:c6:ec:96:0e:27:ec:ff:d0:aa:a9:75:58:
         3c:cd:da:e8:75:ff:55:d8:e5:82:d7:c4:83:14:a1:f4:c2:2c:
         fa:e2:42:97:fb:b6:ed:32:5b:f3:bd:96:de:10:24:7c:d4:be:
         d2:fc:c9:c1:3c:09:22:cc:6c:4c:35:75:6e:d3:32:eb:55:32:
         16:13:bd:fe:1c:11:d4:2d:8d:59:5a:7d:ee:d7:1c:ab:97:89:
         35:f7:a3:77:99:80:eb:b6:0b:86:40:0d:13:3b:92:26:ff:1f:
         03:af:03:b6:7c:b2:ed:76:45:86:fa:c7:4f:58:b5:1a:ea:39:
         75:05:91:c8:cd:d2:d3:08:df:ec:06:be:85:1d:74:aa:29:17:
         9c:93:9d:31:e6:ca:49:06:32:02:b2:3e:61:47:49:58:36:1d:
         f6:3a:c3:02:da:b3:f3:8a:fd:ed:a2:91:15:21:2f:17:0e:23:
         52:e4:63:64:6b:4e:19:46:1b:ef:09:b6:e3:4d:52:ff:37:8a:
         b5:08:75:63:61:81:35:a5:2e:ae:c8:2b:f8:ba:6c:2a:15:6a:
         a8:d9:16:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 00:12:29 2024 by rpki-client on console-fra.rpki-client.org