Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3134382e302f3234203d3e203131343331.roa
File:                     3230302e3231392e3134382e302f3234203d3e203131343331.roa (raw, json)
Hash identifier:          2Afo/p1m0zQnZINg1fkflveBujvid7ggjFoq8ZQetDs=
Subject key identifier:   D8:B6:E5:1F:BC:AC:6A:E4:8B:15:3D:85:DC:EB:3F:7D:70:BD:48:C9
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       5360AE2285DFC66BD97E16E1A5E1126D92211033
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3134382e302f3234203d3e203131343331.roa
Signing time:             Mon 15 Apr 2024 17:43:56 +0000
ROA not before:           Mon 15 Apr 2024 17:38:56 +0000
ROA not after:            Mon 14 Apr 2025 17:43:56 +0000
asID:                     11431
IP address blocks:        200.219.148.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 06:24:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:60:ae:22:85:df:c6:6b:d9:7e:16:e1:a5:e1:12:6d:92:21:10:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Apr 15 17:38:56 2024 GMT
            Not After : Apr 14 17:43:56 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9c:26:86:87:34:4f:08:f4:8e:29:9b:8e:85:
                    82:b4:01:28:94:36:ec:33:66:5d:4b:b1:9a:f0:66:
                    ac:bc:34:af:f5:1b:82:04:fc:e8:a5:f4:96:95:32:
                    3a:e0:cb:ca:86:ee:3f:68:80:65:04:a4:99:b4:be:
                    57:74:ef:33:ea:a9:c4:c8:0e:d2:31:c0:74:6f:70:
                    78:ac:06:3c:f1:01:a0:7f:81:50:b4:82:f4:8c:cb:
                    57:b4:bf:74:fb:47:2d:6d:fe:4b:97:d8:5e:61:5b:
                    dc:cb:b5:28:0e:3c:f5:3e:01:9b:b2:57:fc:d8:51:
                    85:a8:ba:56:aa:51:77:b3:50:c0:4a:7f:f1:58:ac:
                    a0:c1:3c:05:e0:f0:06:fc:c4:7a:c0:23:f3:a3:07:
                    2f:1e:b0:37:e0:5f:f3:3e:6b:c5:37:95:b2:d0:39:
                    a7:8d:af:4d:99:6e:08:d2:bc:11:8f:6d:99:68:e0:
                    0f:73:e6:aa:f3:b0:ce:6c:9b:2a:6e:4e:c2:89:ab:
                    e8:ed:e3:08:4f:a6:08:62:20:47:6c:1d:d7:df:22:
                    a8:a7:b7:28:a6:bb:d0:22:75:e0:5c:a2:8c:ce:8f:
                    de:dd:78:ed:3d:9d:e6:ad:33:6e:5f:16:58:87:20:
                    b4:56:3e:2c:7a:4a:f6:a0:f3:0c:64:6b:65:82:e7:
                    ec:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B6:E5:1F:BC:AC:6A:E4:8B:15:3D:85:DC:EB:3F:7D:70:BD:48:C9
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3134382e302f3234203d3e203131343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:8c:c6:c6:77:4a:14:d0:97:73:d2:62:96:48:52:5c:8c:45:
         cb:1d:04:1f:07:72:b3:bf:30:bf:41:83:43:da:a7:bf:2f:2f:
         cd:83:9f:47:9a:d5:6a:69:c2:4d:f7:9b:df:6a:8e:a2:f0:fd:
         e3:d1:c7:8b:de:0b:49:5b:34:0e:9b:0f:c3:3e:09:49:ba:52:
         b9:61:3e:72:29:96:e9:ea:7e:3d:9d:83:09:ac:c4:f8:13:4e:
         c0:8a:d9:a8:44:e2:a3:17:e0:5f:ef:04:ae:b8:ad:f5:e9:f2:
         dd:ce:df:ce:27:d6:70:7f:ef:dc:31:64:76:16:b4:64:2b:e1:
         79:99:02:f5:1b:b6:e9:78:6c:2c:3c:2d:40:a7:aa:3c:6e:ce:
         e4:50:6f:9a:9b:a9:8c:a2:ae:bc:7c:d8:d3:47:ac:82:ce:87:
         12:73:72:a5:f2:e9:13:56:46:57:8f:50:6c:db:cc:95:71:85:
         51:3d:3e:f1:62:a8:8b:2b:84:d9:a4:55:be:f5:ff:6a:f4:cd:
         44:0a:d7:04:b1:21:9d:51:49:76:b5:a4:0f:9c:ea:84:cf:be:
         c5:10:0f:ab:0f:ad:27:0d:a7:7f:e0:37:9d:3e:a8:6e:19:e2:
         e8:a6:9c:5f:76:6a:a8:ce:6a:61:86:90:44:63:86:f8:41:e2:
         97:15:90:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:14:15 2024 by rpki-client on console-fra.rpki-client.org