Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e31392e302e302f32312d3231203d3e2032373136.roa
File:                     3230302e31392e302e302f32312d3231203d3e2032373136.roa (raw, json)
Hash identifier:          vgOpegM3rSWk6s+oYepJrL2LskAFJ2+vjT2DT6dNxcI=
Subject key identifier:   DC:2C:75:3D:3B:BC:6F:61:26:3F:31:6A:C4:84:1C:DF:3E:63:6B:C0
Certificate issuer:       /CN=D54C376960A26972A0B767BDA084048DFFE3673E
Certificate serial:       4189DEF6339B702DEAF032D8D4AD0CF15621BCD3
Authority key identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e31392e302e302f32312d3231203d3e2032373136.roa
Signing time:             Wed 03 Apr 2024 18:30:30 +0000
ROA not before:           Wed 03 Apr 2024 18:25:30 +0000
ROA not after:            Wed 02 Apr 2025 18:30:30 +0000
asID:                     2716
IP address blocks:        200.19.0.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl
                          rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:89:de:f6:33:9b:70:2d:ea:f0:32:d8:d4:ad:0c:f1:56:21:bc:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54C376960A26972A0B767BDA084048DFFE3673E
        Validity
            Not Before: Apr  3 18:25:30 2024 GMT
            Not After : Apr  2 18:30:30 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cb:56:05:e3:6b:34:10:c4:81:0e:e8:3b:b7:
                    d8:e6:89:e3:bb:ba:d9:31:44:e0:21:38:73:d1:04:
                    e5:97:d0:ef:83:37:89:7c:da:0a:ac:80:1b:1c:f4:
                    96:ef:7e:a6:9d:45:24:62:c6:01:fc:7c:2c:c8:11:
                    5c:ee:99:67:95:d9:ac:73:ca:0e:04:29:81:34:99:
                    4a:73:e8:33:ac:3a:d6:15:d6:2b:80:7c:f8:8b:c5:
                    91:a9:a0:72:87:fe:ac:50:60:8c:53:2c:3e:a6:fa:
                    53:c2:29:84:ae:4c:8d:ca:15:52:4d:4b:6c:01:f6:
                    f8:53:3c:1a:79:b7:6d:78:85:4e:58:e8:94:a9:47:
                    11:fb:bc:f7:d0:1d:cc:98:eb:a7:ce:0a:cf:e2:dc:
                    99:e5:e0:70:73:45:65:96:c5:9f:d5:8b:1a:a4:fa:
                    1a:60:e6:ec:20:27:e7:06:8c:21:d4:9a:b2:02:a2:
                    ba:7c:e2:8a:be:f6:af:40:1a:0f:55:21:dc:f8:fd:
                    3a:d9:a2:f1:71:4a:3a:7e:bf:9b:a2:65:e7:ac:b0:
                    04:c4:84:40:9d:f4:37:e0:18:97:a6:98:ab:30:6a:
                    86:f2:2b:0f:4e:d4:00:a2:9f:4e:b5:82:c6:5f:70:
                    00:24:7c:b0:33:36:f9:31:8f:cc:d9:81:31:e9:8e:
                    9f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:2C:75:3D:3B:BC:6F:61:26:3F:31:6A:C4:84:1C:DF:3E:63:6B:C0
            X509v3 Authority Key Identifier:
                keyid:D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e31392e302e302f32312d3231203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         85:e8:2c:68:77:70:1e:cd:72:a7:59:cb:6f:59:df:33:90:3d:
         3f:77:77:68:ce:f3:2d:06:7a:1c:31:81:32:95:95:fc:49:cb:
         c8:ed:52:e0:71:a1:a5:35:c5:59:22:5f:54:db:7a:54:89:fb:
         2c:fc:7c:e5:03:b4:15:b4:2e:67:d8:0e:71:df:9a:67:2d:83:
         74:9f:cc:1d:00:d6:cd:93:28:b1:89:4d:b1:70:2b:56:77:1b:
         a7:54:04:dd:9e:d3:1d:38:a2:9a:2a:ad:17:fb:a3:c3:62:50:
         d5:d0:71:8e:b7:03:41:21:fe:90:0f:16:50:71:06:5b:92:f6:
         de:e5:8e:6c:d4:83:fe:ca:88:59:04:f3:b4:d6:db:b5:49:35:
         97:9c:86:35:c8:da:82:5d:2b:51:5b:a6:6b:26:cb:a9:5b:0c:
         a1:a4:af:a5:f8:e1:f5:37:a3:06:09:28:27:e1:db:d8:e2:bc:
         bd:6b:4c:0e:a2:1f:21:0b:9f:7b:0b:9d:be:9e:c8:64:f8:15:
         bf:f3:3f:1f:e4:9c:c5:7a:6b:1a:88:19:bf:40:82:55:fc:c0:
         c0:14:80:9a:5b:34:d5:98:29:78:ee:5a:29:35:3c:2c:fc:64:
         de:aa:e8:83:3a:cc:9d:aa:5f:29:32:2d:c4:df:fc:06:b9:b1:
         0c:7f:33:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:38 2024 by rpki-client on console-ams.rpki-client.org