Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3138392e34302e302f32332d3234203d3e203130393036.roa
File:                     3230302e3138392e34302e302f32332d3234203d3e203130393036.roa (raw, json)
Hash identifier:          actWzlXJZT+tVv5fqhUlcTVbpsEix7SJ/wo5L3jr1l4=
Subject key identifier:   CF:07:E9:C6:59:DF:01:C6:EF:BC:C0:2A:9C:B2:6A:3F:E2:DC:E9:E8
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       20FE30202FC6AA187247565F7A053AAF001F70C6
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3138392e34302e302f32332d3234203d3e203130393036.roa
Signing time:             Mon 15 Apr 2024 17:45:14 +0000
ROA not before:           Mon 15 Apr 2024 17:40:14 +0000
ROA not after:            Mon 14 Apr 2025 17:45:14 +0000
asID:                     10906
IP address blocks:        200.189.40.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Jun 2024 11:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:fe:30:20:2f:c6:aa:18:72:47:56:5f:7a:05:3a:af:00:1f:70:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Apr 15 17:40:14 2024 GMT
            Not After : Apr 14 17:45:14 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ac:51:89:db:30:33:f0:19:4f:bd:fc:96:82:
                    ad:66:4a:35:90:94:6b:81:5d:23:2e:46:d6:b3:00:
                    21:89:66:86:22:f9:9e:b3:03:bd:a1:aa:3c:cf:ad:
                    a1:de:d2:36:2d:a3:42:43:4b:49:be:21:4d:dc:b3:
                    1b:6b:ef:24:d6:a4:49:b1:98:74:77:94:89:cd:8a:
                    64:1b:44:74:d3:42:ad:74:39:69:b8:e5:02:25:15:
                    c3:4c:4d:2e:8a:db:ad:5b:61:6f:9b:70:db:48:44:
                    fb:f7:ee:9a:a3:fc:16:ff:79:0a:09:ab:d7:4c:e8:
                    2d:2d:8d:c3:6b:1e:db:be:f3:e5:d2:ab:7b:e4:f5:
                    b9:c6:86:86:2a:51:21:59:71:1c:39:1f:29:8a:71:
                    1e:41:eb:47:9a:c7:42:c7:bd:d3:d1:e2:24:41:47:
                    34:9e:ff:ab:ef:fe:74:fd:84:31:91:3e:37:44:46:
                    93:dd:d9:a8:ea:f6:51:fd:a3:64:a6:f8:0c:c2:3c:
                    64:d4:ae:4a:cb:34:87:56:fe:9c:50:04:38:a2:04:
                    d4:58:76:3c:d7:f3:46:3f:81:bc:62:e6:60:99:20:
                    ef:c0:8b:f3:64:e3:d1:01:10:1b:f2:21:a7:cd:1b:
                    26:a0:eb:14:d0:1c:89:1d:d4:30:4d:90:23:74:c2:
                    ff:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:07:E9:C6:59:DF:01:C6:EF:BC:C0:2A:9C:B2:6A:3F:E2:DC:E9:E8
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3138392e34302e302f32332d3234203d3e203130393036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.189.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:9f:0c:32:3b:ea:9c:a5:41:c6:a1:6f:b1:44:1b:89:92:0e:
         13:ff:c6:dd:37:48:0f:fc:1f:c8:03:df:bb:2b:07:21:5f:70:
         79:8d:07:46:2c:27:4e:e8:f8:70:d0:58:fe:2b:db:27:79:ae:
         9b:cd:9d:c6:44:ec:5b:3d:05:9b:86:fd:84:d1:a0:8c:fa:e2:
         06:be:c1:83:6f:c3:26:18:65:b4:0f:7d:89:52:6a:d0:6a:5e:
         09:d3:0c:01:72:d1:f9:dc:fa:56:ed:23:ea:d6:2e:81:85:f8:
         44:38:60:9a:0b:eb:ac:43:37:19:60:70:82:ef:e1:3f:8c:38:
         af:b8:45:96:f1:cb:e2:96:d1:fd:af:92:94:57:93:9e:c3:38:
         53:ca:35:b7:d1:9d:cc:8d:ef:04:48:5f:30:31:8e:be:b5:e8:
         1c:17:4b:cf:8e:6d:b5:02:0c:c4:91:c5:93:28:dc:27:8c:11:
         50:68:8e:75:22:9d:e5:81:1c:1a:70:6d:6e:07:d1:f3:12:b7:
         ac:1d:f1:94:34:7b:61:61:d9:cc:fa:65:78:f0:8a:41:fb:95:
         91:ed:c5:20:77:2d:f5:09:38:8a:2c:d5:6b:5b:2f:a9:d4:56:
         42:7e:e4:04:52:f4:e4:f6:51:ce:54:e8:a6:11:30:53:dd:76:
         32:87:4b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 21:30:48 2024 by rpki-client on console-fra.rpki-client.org