Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3134302e302f32332d3332203d3e2030.roa
File:                     3230302e3231392e3134302e302f32332d3332203d3e2030.roa (raw, json)
Hash identifier:          n4UGus5AYFZnS0MMihgymIDIA2Ef5rBFI2k4hiEQf3k=
Subject key identifier:   E0:A3:26:18:88:55:98:0B:67:77:83:04:E8:40:5C:2F:78:07:67:40
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       7EC314A6442C4517B726B070FEA4CD7CFDB1EB6C
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3134302e302f32332d3332203d3e2030.roa
Signing time:             Mon 15 Apr 2024 17:43:57 +0000
ROA not before:           Mon 15 Apr 2024 17:38:57 +0000
ROA not after:            Mon 14 Apr 2025 17:43:57 +0000
asID:                     0
IP address blocks:        200.219.140.0/23 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 05 May 2024 05:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:c3:14:a6:44:2c:45:17:b7:26:b0:70:fe:a4:cd:7c:fd:b1:eb:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Apr 15 17:38:57 2024 GMT
            Not After : Apr 14 17:43:57 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:4b:7c:4c:ca:d6:02:fa:79:d7:dc:29:c7:4a:
                    2c:87:62:04:61:56:16:29:bb:4f:f9:70:3d:f7:64:
                    be:46:65:d7:62:cc:8a:e2:91:ae:87:8f:9c:cb:cf:
                    d4:78:19:05:e4:c7:be:b6:b1:6d:ef:41:79:ec:be:
                    28:b5:30:85:34:cd:fd:f0:b6:bd:ad:c0:bb:5e:ac:
                    87:63:41:9b:40:b5:ba:44:4a:62:e6:cb:03:65:4a:
                    9f:22:f9:b3:8a:a5:11:b9:70:e4:81:65:dc:df:03:
                    e9:85:1f:1f:d9:c4:ea:03:a3:bb:28:ae:1a:b2:ed:
                    07:fa:46:f6:6f:c2:df:87:b6:55:d9:21:8d:d9:66:
                    92:d4:e5:34:1b:a9:ad:6b:12:d4:ee:95:a0:8e:ef:
                    e2:79:ee:e8:63:cb:f4:49:b3:de:88:72:44:2c:54:
                    fc:c2:cb:76:d0:33:b9:7a:41:a6:b4:ae:e8:04:dd:
                    3a:64:b4:bc:a1:1c:f8:3a:14:fd:ba:a5:ca:71:fd:
                    f7:2a:f3:f8:c4:2b:05:71:c5:1e:ac:b7:4d:05:0a:
                    e7:05:20:dc:e9:92:c4:8f:87:cd:03:22:54:4f:09:
                    f0:e0:40:3e:b3:b0:96:bb:fc:0a:c6:fb:ed:d5:15:
                    8c:e2:fa:b5:5e:3d:36:a5:01:00:79:72:e3:09:73:
                    9c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A3:26:18:88:55:98:0B:67:77:83:04:E8:40:5C:2F:78:07:67:40
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3134302e302f32332d3332203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:a0:db:fc:0e:e8:f3:7a:ff:27:7a:a4:b8:e6:c0:a4:0b:49:
         5a:d8:53:00:f8:35:5f:a2:92:9f:aa:22:3b:fc:de:40:2b:0c:
         43:33:d0:00:50:15:75:19:fc:30:b3:7a:53:36:22:eb:11:13:
         0b:cd:90:b2:2f:e0:22:5c:a3:08:78:2f:c7:4b:a2:4b:53:46:
         f4:11:b9:a3:fb:b5:36:7b:b0:e8:12:f8:f3:e7:4d:fc:72:7d:
         96:94:2e:b4:af:0c:3a:79:19:34:bf:16:75:d4:e6:29:ec:e3:
         ac:c6:95:0d:72:a5:e3:f8:6f:3f:d6:3f:52:e3:6e:ed:b7:76:
         ac:6a:6e:b0:83:c2:3c:47:9f:e5:0a:f8:4f:59:e7:5b:7c:56:
         be:91:1a:e4:3c:0b:22:24:6d:19:a9:21:82:0b:0a:2e:ad:23:
         74:93:89:14:cc:6f:07:f4:dd:83:0e:35:9d:a2:83:b1:5b:1b:
         21:ef:3c:fc:8c:33:5d:cd:6d:ef:de:65:c0:71:d3:23:7b:f9:
         61:aa:1d:e4:98:6c:32:79:91:81:48:8e:59:b3:9d:ca:46:e8:
         71:75:8e:6f:7f:5d:b5:62:84:6c:db:e4:c0:dd:ac:4a:28:29:
         39:62:32:f3:53:c1:01:e1:53:06:57:2d:52:49:02:57:c2:39:
         28:db:e5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:04:34 2024 by rpki-client on console-ams.rpki-client.org