Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3138392e34302e302f32332d3234203d3e203131343331.roa
File:                     3230302e3138392e34302e302f32332d3234203d3e203131343331.roa (raw, json)
Hash identifier:          MwvvaMAAnX2ocYDz0FG90lPzhTcUf9g7FAqvEkGcpek=
Subject key identifier:   07:1C:0F:36:CC:B1:88:DD:F1:9D:52:EF:5B:54:6C:31:D9:DC:81:6C
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       2953159FB6774FE36D26634EF1A21437C20B6D0F
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3138392e34302e302f32332d3234203d3e203131343331.roa
Signing time:             Mon 15 Apr 2024 17:43:57 +0000
ROA not before:           Mon 15 Apr 2024 17:38:57 +0000
ROA not after:            Mon 14 Apr 2025 17:43:57 +0000
asID:                     11431
IP address blocks:        200.189.40.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 03:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:53:15:9f:b6:77:4f:e3:6d:26:63:4e:f1:a2:14:37:c2:0b:6d:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Apr 15 17:38:57 2024 GMT
            Not After : Apr 14 17:43:57 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:1b:c4:ad:51:d2:84:68:c2:69:c9:51:46:d8:
                    1b:35:71:af:69:b8:26:5c:33:5d:0a:ab:a2:e0:f2:
                    cc:09:67:44:c4:af:37:a8:39:9c:fc:7f:0d:0f:8a:
                    3e:ee:7f:96:49:e4:97:d7:53:be:7f:0f:14:16:eb:
                    36:49:1e:54:91:56:7a:4b:7f:5e:8b:88:04:4b:62:
                    e4:b0:b0:e6:15:41:1d:62:1b:98:27:ba:a3:37:32:
                    77:66:a0:3b:11:0e:3e:7d:71:b1:bd:b9:98:91:6e:
                    47:da:17:17:c8:ed:09:e9:37:cd:3d:ab:1a:94:f2:
                    e9:10:53:36:80:dc:e4:42:7a:6d:a1:72:1d:ed:78:
                    78:c1:c2:1d:d4:9a:cd:4d:fe:fa:c7:3a:a9:16:36:
                    00:94:a9:e7:71:8b:13:bb:13:27:11:0a:94:fc:59:
                    2c:94:01:c4:92:e0:5b:57:e7:16:00:1a:fb:32:74:
                    9f:32:05:9e:5f:8c:cf:00:01:cc:63:aa:16:75:53:
                    6c:9e:a6:17:65:f2:2c:fe:6d:d8:f4:f7:2b:82:c2:
                    72:25:53:4a:36:e3:ba:a7:a2:09:d3:76:36:15:6b:
                    13:56:4e:a0:b8:86:7c:37:87:ec:d1:cd:4c:e5:b5:
                    20:a9:62:ab:16:c8:20:65:7f:b8:df:2d:60:c4:9b:
                    d0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:1C:0F:36:CC:B1:88:DD:F1:9D:52:EF:5B:54:6C:31:D9:DC:81:6C
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3138392e34302e302f32332d3234203d3e203131343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.189.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:bf:57:0f:7e:1e:7f:91:90:b8:a8:a3:cf:df:37:99:b2:68:
         22:50:c0:7c:53:a2:68:d4:49:15:e6:bc:d4:39:15:3f:45:cb:
         68:06:70:da:ea:7e:95:d3:77:6c:a7:6f:85:e8:f4:2c:63:8a:
         cc:9b:ac:6a:5e:93:44:1c:db:34:e7:e6:d6:44:f6:48:7b:f7:
         1c:96:ff:4c:0d:51:7e:07:be:78:b8:d2:5a:a6:a4:f4:e5:7e:
         3a:9f:71:cd:0f:e5:5b:9c:93:1b:8e:69:6b:b1:9c:b5:3b:e7:
         6c:40:56:ac:4d:7c:24:f5:94:69:20:9b:60:6f:f9:9d:16:25:
         16:51:22:30:49:00:a6:04:ed:3d:76:72:38:65:58:bd:8e:26:
         d8:9f:77:8d:f4:99:c7:f7:19:48:11:32:e0:d7:f3:d0:36:70:
         6e:32:a0:89:b8:ce:b1:68:da:16:4c:4e:26:80:25:49:e9:ac:
         86:25:7e:08:d0:a0:c8:0a:49:8f:3a:a3:b3:96:f8:bb:1f:a4:
         15:f4:61:64:53:7b:56:b3:10:ba:03:a4:2e:27:74:e0:d0:f1:
         73:f2:07:8a:0f:d9:5e:75:39:fc:1a:f7:ff:8f:a2:8c:ca:69:
         3b:68:c5:1a:63:b9:da:36:4e:73:92:06:9b:03:b7:ca:6a:42:
         83:9a:c6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:34:03 2024 by rpki-client on console-ams.rpki-client.org