Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3135382e302f32332d3234203d3e203238333435.roa
File:                     3230302e3231392e3135382e302f32332d3234203d3e203238333435.roa (raw, json)
Hash identifier:          FQv5yN3y4ZvTcJyaNRtQYeSnOQIz3WJ9E7MBOpjpf1M=
Subject key identifier:   76:68:4F:5E:0B:17:0F:73:2D:70:31:A7:39:7A:98:68:15:69:DB:DB
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       23F85489834FB38F739B4E680FCFAC3D1779DC1D
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3135382e302f32332d3234203d3e203238333435.roa
Signing time:             Mon 15 Apr 2024 17:43:55 +0000
ROA not before:           Mon 15 Apr 2024 17:38:55 +0000
ROA not after:            Mon 14 Apr 2025 17:43:55 +0000
asID:                     28345
IP address blocks:        200.219.158.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 06:24:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:f8:54:89:83:4f:b3:8f:73:9b:4e:68:0f:cf:ac:3d:17:79:dc:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Apr 15 17:38:55 2024 GMT
            Not After : Apr 14 17:43:55 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:83:ff:81:85:78:f9:65:eb:40:81:57:ed:d0:
                    7f:a6:9f:80:64:52:5b:74:05:16:af:7b:dd:92:d8:
                    6f:13:17:32:3c:8c:66:f5:16:c7:ec:3a:4c:00:b7:
                    20:ac:5d:14:28:1f:fb:99:67:06:05:63:8f:f3:a2:
                    3f:54:a4:59:90:9b:d6:cf:e8:de:36:68:aa:3e:77:
                    ca:30:14:0b:49:3c:82:76:1f:b3:60:cd:ed:f7:5f:
                    73:c3:68:99:54:c2:de:66:98:62:b5:fa:95:6a:aa:
                    d5:ac:e6:d5:b3:f7:ee:4b:60:dc:8d:14:0e:ce:cf:
                    bc:77:59:b4:2f:31:6e:f4:1d:db:d7:a9:55:33:ee:
                    f6:e4:89:20:e3:66:d3:64:3a:70:8c:bd:b7:bf:13:
                    69:43:6b:8d:f5:eb:f1:f9:e5:25:0a:13:ae:a1:71:
                    3b:07:cf:77:e4:0f:b7:70:a3:d0:14:4b:ff:c1:20:
                    6f:35:4b:ff:17:f1:38:9d:f3:36:1c:aa:87:17:33:
                    d1:86:72:8a:4d:6c:83:30:ec:e9:90:78:55:32:a2:
                    79:0e:37:4c:56:08:30:f2:9c:38:66:6d:75:b5:63:
                    5b:01:d6:ee:8f:7a:22:71:25:8d:1a:27:56:76:ed:
                    96:76:49:21:26:ab:68:ea:e3:32:09:b1:34:38:27:
                    dc:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:68:4F:5E:0B:17:0F:73:2D:70:31:A7:39:7A:98:68:15:69:DB:DB
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3135382e302f32332d3234203d3e203238333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:16:1f:8a:4a:66:82:4c:3c:66:f7:0e:95:e4:68:4a:05:8c:
         15:7a:cb:37:91:c0:fa:2a:41:16:d2:00:c9:3f:f9:77:36:65:
         4b:57:b6:c3:f7:3e:31:7a:ff:1c:38:2c:4c:8b:9f:cb:b0:26:
         22:4a:44:5c:7d:ef:bd:b1:c9:da:73:0b:01:70:01:ac:7d:7d:
         35:52:3d:36:52:91:ed:5c:ee:cf:c4:25:83:2a:d4:cc:91:cc:
         b6:fd:5c:8e:e7:94:0a:ea:12:f2:b1:9c:d7:d6:13:bd:7d:89:
         dc:84:7c:f5:c2:84:1c:95:8a:a8:fa:ec:5a:cb:1d:ab:74:cf:
         d9:cc:64:7a:70:17:27:25:00:81:1b:ae:a2:84:2b:34:c7:f5:
         ec:4c:4d:90:ab:16:26:8d:82:f6:d4:fc:3f:83:1e:3e:3f:e3:
         7d:b7:3e:70:e2:6c:20:62:45:15:57:18:b3:e0:91:e8:36:fd:
         31:1b:c6:13:ba:04:65:ac:a7:13:77:97:ce:51:04:0f:0e:d9:
         cb:0e:b1:39:00:3a:ca:20:ed:e1:b9:bb:bf:e2:51:3e:c1:a7:
         bd:f3:44:04:95:bc:47:90:ac:72:9c:e1:de:c3:95:e8:e8:71:
         c5:78:35:e8:8b:40:28:8d:c8:2d:9d:1e:a9:f2:64:6e:e3:ad:
         ce:f2:97:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:14:15 2024 by rpki-client on console-fra.rpki-client.org