Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3133382e302f32332d3332203d3e2030.roa
File:                     3230302e3231392e3133382e302f32332d3332203d3e2030.roa (raw, json)
Hash identifier:          6tTmS7lwOSnrRfVU9anA0FkNgV8MzUgK2Uzg9v7TUhA=
Subject key identifier:   4B:8F:D9:5A:F2:83:0D:DB:0F:C1:CE:3F:5B:57:FE:1C:4C:CB:86:D4
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       199EF2B412027137588885787D62D47D68EE02A7
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3133382e302f32332d3332203d3e2030.roa
Signing time:             Mon 15 Apr 2024 17:43:58 +0000
ROA not before:           Mon 15 Apr 2024 17:38:58 +0000
ROA not after:            Mon 14 Apr 2025 17:43:58 +0000
asID:                     0
IP address blocks:        200.219.138.0/23 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 05 May 2024 05:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:9e:f2:b4:12:02:71:37:58:88:85:78:7d:62:d4:7d:68:ee:02:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Apr 15 17:38:58 2024 GMT
            Not After : Apr 14 17:43:58 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:13:74:e1:c0:d2:77:f1:ee:fa:f2:00:c3:03:
                    9a:09:70:60:2b:5c:88:66:b6:86:6a:f2:bc:e3:9c:
                    1f:db:63:13:4d:a9:12:be:26:a8:c8:4d:b5:dc:04:
                    03:f6:30:c1:82:3b:b0:50:b8:3d:53:43:6c:6f:e0:
                    30:02:98:eb:0f:4c:c2:41:11:9c:c4:a6:3b:08:64:
                    26:a0:0c:ac:16:f2:e4:00:8e:1d:52:9a:11:86:e5:
                    56:9e:45:86:95:d7:46:68:44:e8:13:3a:1c:e7:8d:
                    5d:41:de:a3:8f:3c:fa:68:79:f2:36:46:ad:45:f8:
                    e1:69:eb:3a:b5:a9:56:80:15:1a:2c:25:fa:fa:e1:
                    08:4b:f6:cd:f1:0a:dd:61:6e:92:4a:3a:65:cf:6d:
                    58:79:43:ca:8f:14:d6:8a:f3:f4:06:ee:43:9a:79:
                    a9:3d:13:eb:53:bb:a7:62:d1:5c:0d:cb:cf:c7:b8:
                    b5:2b:03:7c:54:7f:eb:20:ff:42:83:ce:6c:09:d6:
                    c9:2d:75:fe:61:bb:51:61:19:78:0f:eb:b6:bf:f0:
                    dc:ff:54:22:08:48:00:36:4f:aa:39:74:64:7b:f3:
                    94:55:80:89:68:57:b8:9c:6b:83:65:7c:e2:74:64:
                    d2:95:d9:85:d8:1c:db:d1:8a:b9:30:fd:6e:13:a1:
                    2a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:8F:D9:5A:F2:83:0D:DB:0F:C1:CE:3F:5B:57:FE:1C:4C:CB:86:D4
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3133382e302f32332d3332203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:4e:61:72:d4:8c:a0:ca:ed:54:0e:96:28:77:25:cd:8e:d4:
         90:8a:e1:4d:e2:18:8a:bf:3c:5d:75:d0:c9:58:b0:9b:32:45:
         9e:c7:74:36:14:75:25:77:b2:76:55:e0:ca:b8:d9:d6:d7:41:
         48:f4:9f:ce:f2:ae:5c:5a:83:99:57:df:dd:39:66:36:ad:c7:
         40:32:6d:7c:55:a9:17:ff:36:7b:7b:75:9a:9b:2e:ab:26:cd:
         44:41:47:db:43:2a:2b:ec:ca:e4:67:3e:7c:a4:eb:b3:0b:dc:
         81:d1:b2:28:58:3e:26:a7:0d:f4:aa:9e:e1:b7:c5:86:c9:e8:
         18:24:10:86:8e:7d:ef:dc:9a:45:fd:47:3f:48:2e:47:24:c3:
         b2:9b:d9:20:50:41:4c:0e:f7:c6:23:ff:c5:40:de:49:f3:f9:
         66:0b:66:32:bf:ec:a2:bb:cc:7f:8a:41:3c:05:cb:2b:33:6b:
         e2:dd:64:cd:a2:33:39:48:2d:ef:3b:e0:97:50:a7:14:96:01:
         8d:63:63:8a:22:df:b8:c4:e5:b6:d0:7b:f4:5f:7f:ed:22:77:
         b5:41:7f:04:de:2b:4d:4a:d4:fb:b2:5d:47:1a:d2:3f:d1:bf:
         ca:8e:f6:97:2b:92:65:d4:05:67:17:21:b1:3c:88:68:e0:99:
         4d:94:e1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:06:25 2024 by rpki-client on console-fra.rpki-client.org