Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3138372e31362e3139322e302f31392d3332203d3e2030.roa
File:                     3138372e31362e3139322e302f31392d3332203d3e2030.roa (raw, json)
Hash identifier:          6W43O11czTK/17lTRdhuODsn9wFVYSDc0TEjM+5cLVU=
Subject key identifier:   36:CE:9A:06:85:20:FB:FC:11:AB:A3:BC:7A:40:08:9D:8C:BC:EB:C7
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       52083176C7105DEA757A9B972B1A2383449829C1
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3138372e31362e3139322e302f31392d3332203d3e2030.roa
Signing time:             Mon 15 Apr 2024 17:43:56 +0000
ROA not before:           Mon 15 Apr 2024 17:38:56 +0000
ROA not after:            Mon 14 Apr 2025 17:43:56 +0000
asID:                     0
IP address blocks:        187.16.192.0/19 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 11:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:08:31:76:c7:10:5d:ea:75:7a:9b:97:2b:1a:23:83:44:98:29:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Apr 15 17:38:56 2024 GMT
            Not After : Apr 14 17:43:56 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:af:4d:9e:2f:c3:5d:6d:f7:e1:39:b6:f2:93:
                    b0:53:2b:e7:fb:98:ad:9c:f5:87:40:53:4b:55:b9:
                    c1:7f:f7:17:30:89:61:65:ed:9f:0d:64:fb:f9:b8:
                    a2:04:6c:5a:75:6c:e1:e0:ee:95:12:82:30:78:b9:
                    3e:8b:85:ad:48:41:1b:5f:23:30:a1:e6:aa:5e:d3:
                    32:a3:0c:19:61:c4:8c:a5:e2:90:5f:73:7a:fb:85:
                    49:eb:17:1a:12:c9:65:ac:59:53:14:bf:7f:fc:85:
                    1c:26:ad:6d:d1:dd:da:fb:0f:74:6f:cb:01:cf:70:
                    d1:ba:17:14:bf:29:b8:db:56:cd:05:db:46:6b:bc:
                    79:8c:d2:64:05:61:ce:70:4c:14:d1:23:5f:ad:34:
                    ac:fb:73:f5:ce:5b:ea:12:3c:ea:68:97:37:78:fd:
                    2d:ed:78:e8:1d:e5:1b:e8:21:63:5c:33:a4:ce:40:
                    bd:92:15:d8:f4:b3:6f:c3:1b:09:5b:eb:e7:cd:be:
                    8b:a7:4c:7f:e7:8b:97:00:8b:8c:8f:df:b4:c7:54:
                    74:c9:ce:07:f2:42:e3:d1:58:bc:db:c1:f1:3a:8e:
                    b9:36:6b:62:43:76:56:91:5d:16:a3:43:5c:90:25:
                    33:8e:5d:54:b2:ec:d6:89:6c:b2:99:97:ab:ca:f7:
                    67:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:CE:9A:06:85:20:FB:FC:11:AB:A3:BC:7A:40:08:9D:8C:BC:EB:C7
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3138372e31362e3139322e302f31392d3332203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.16.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6c:8a:5d:e5:a5:b3:a5:78:e3:50:51:39:11:42:af:31:0a:17:
         55:c6:9c:03:d7:59:ab:2f:74:19:d9:e4:13:07:5c:a6:61:0e:
         af:0f:77:44:ac:9d:1c:71:ff:79:31:9f:27:ff:6b:0d:7f:a5:
         9a:a1:5b:31:e6:5f:6d:df:37:78:8b:cc:b4:ac:7c:ab:6e:47:
         5c:1c:e0:a7:29:21:0c:4b:fa:08:76:83:4b:93:d9:82:97:93:
         8e:cd:35:04:ca:3b:ba:d5:e2:32:fc:1d:6e:6c:01:c7:ea:01:
         22:03:b6:97:7d:30:36:88:1c:20:55:3e:14:e7:fa:a1:2c:d4:
         0f:0f:86:60:20:7c:8f:54:b0:89:78:47:e3:e8:14:fd:2a:77:
         ad:69:5e:b5:1e:32:33:7a:8c:63:0a:8c:97:56:bf:0f:ac:f6:
         f1:29:86:55:4b:e5:30:a4:c2:4f:68:0c:5f:3c:b5:1f:ac:6f:
         e2:e9:bd:08:8b:ba:a3:ae:3d:92:d5:aa:f7:5c:f9:6e:8a:3f:
         d9:86:3a:e5:a4:d4:58:85:27:92:15:67:80:d5:ff:8d:a2:b1:
         1c:33:19:a6:b6:3b:71:bd:bd:d7:a7:4b:db:d0:e8:35:ca:43:
         02:2d:0f:59:d5:2e:17:4a:2c:0d:99:e0:ee:c0:0e:af:15:72:
         34:f2:0a:cd
-----BEGIN CERTIFICATE-----
MIIHOTCCBiGgAwIBAgIUUggxdscQXep1epuXKxojg0SYKcEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjMyNTE5QTlDMjdCM0IyODY5QUMzMEVERjI5NkI0ODRF
NDRCRjFGMDAeFw0yNDA0MTUxNzM4NTZaFw0yNTA0MTQxNzQzNTZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUZBRjREOUUyRkMzNUQ2REY3
RTEzOUI2RjI5M0IwNTMyQkU3RkI5OEFEOUNGNTg3NDA1MzRCNTVCOUMxN0ZGNzE3
MzA4OTYxNjVFRDlGMEQ2NEZCRjlCOEEyMDQ2QzVBNzU2Q0UxRTBFRTk1MTI4MjMw
NzhCOTNFOEI4NUFENDg0MTFCNUYyMzMwQTFFNkFBNUVEMzMyQTMwQzE5NjFDNDhD
QTVFMjkwNUY3MzdBRkI4NTQ5RUIxNzFBMTJDOTY1QUM1OTUzMTRCRjdGRkM4NTFD
MjZBRDZERDFERERBRkIwRjc0NkZDQjAxQ0Y3MEQxQkExNzE0QkYyOUI4REI1NkNE
MDVEQjQ2NkJCQzc5OENEMjY0MDU2MUNFNzA0QzE0RDEyMzVGQUQzNEFDRkI3M0Y1
Q0U1QkVBMTIzQ0VBNjg5NzM3NzhGRDJERUQ3OEU4MURFNTFCRTgyMTYzNUMzM0E0
Q0U0MEJEOTIxNUQ4RjRCMzZGQzMxQjA5NUJFQkU3Q0RCRThCQTc0QzdGRTc4Qjk3
MDA4QjhDOEZERkI0Qzc1NDc0QzlDRTA3RjI0MkUzRDE1OEJDREJDMUYxM0E4RUI5
MzY2QjYyNDM3NjU2OTE1RDE2QTM0MzVDOTAyNTMzOEU1RDU0QjJFQ0Q2ODk2Q0Iy
OTk5N0FCQ0FGNzY3NUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAr69Nni/DXW334Tm28pOwUyvn+5itnPWHQFNLVbnBf/cXMIlhZe2f
DWT7+biiBGxadWzh4O6VEoIweLk+i4WtSEEbXyMwoeaqXtMyowwZYcSMpeKQX3N6
+4VJ6xcaEsllrFlTFL9//IUcJq1t0d3a+w90b8sBz3DRuhcUvym421bNBdtGa7x5
jNJkBWHOcEwU0SNfrTSs+3P1zlvqEjzqaJc3eP0t7XjoHeUb6CFjXDOkzkC9khXY
9LNvwxsJW+vnzb6Lp0x/54uXAIuMj9+0x1R0yc4H8kLj0Vi828HxOo65NmtiQ3ZW
kV0Wo0NckCUzjl1UsuzWiWyymZeryvdnXwIDAQABo4ICRzCCAkMwHQYDVR0OBBYE
FDbOmgaFIPv8EaujvHpACJ2MvOvHMB8GA1UdIwQYMBaAFGMlGanCezsoaaww7fKW
tITkS/HwMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0EyeDZpY2FLcFZXUDV1
VUJ6SlF6UnZFcGp2UzdQVlc3WjJFcjRGMnF0MUN0LzIvNjMyNTE5QTlDMjdCM0Iy
ODY5QUMzMEVERjI5NkI0ODRFNDRCRjFGMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS82MzI1MTlBOUMyN0IzQjI4NjlBQzMwRURGMjk2QjQ4NEU0NEJG
MUYwLmNlcjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUFBzALhoGEcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BMng2aWNhS3BWV1A1dVVCekpR
elJ2RXBqdlM3UFZXN1oyRXI0RjJxdDFDdC8yLzMxMzgzNzJlMzEzNjJlMzEzOTMy
MmUzMDJmMzEzOTJkMzMzMjIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAW7EMAwDQYJKoZI
hvcNAQELBQADggEBAGyKXeWls6V441BRORFCrzEKF1XGnAPXWasvdBnZ5BMHXKZh
Dq8Pd0SsnRxx/3kxnyf/aw1/pZqhWzHmX23fN3iLzLSsfKtuR1wc4KcpIQxL+gh2
g0uT2YKXk47NNQTKO7rV4jL8HW5sAcfqASIDtpd9MDaIHCBVPhTn+qEs1A8PhmAg
fI9UsIl4R+PoFP0qd61pXrUeMjN6jGMKjJdWvw+s9vEphlVL5TCkwk9oDF88tR+s
b+LpvQiLuqOuPZLVqvdc+W6KP9mGOuWk1FiFJ5IVZ4DV/42isRwzGaa2O3G9vden
S9vQ6DXKQwItD1nVLhdKLA2Z4O7ADq8VcjTyCs0=
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:56 2024 by rpki-client on console-ams.rpki-client.org