Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3138392e34302e302f32332d3234203d3e203238333435.roa
File:                     3230302e3138392e34302e302f32332d3234203d3e203238333435.roa (raw, json)
Hash identifier:          o/Af9+A+hSc4Ly0BkJPEaxsa0rdseCl0ktts0D6Vo8Y=
Subject key identifier:   C1:C9:8C:DF:1B:D5:00:59:74:18:CB:8F:83:66:5D:E4:1A:13:AC:14
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       5E14CDEB59DF72232D11375FB981D99DD522A230
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3138392e34302e302f32332d3234203d3e203238333435.roa
Signing time:             Mon 15 Apr 2024 17:43:59 +0000
ROA not before:           Mon 15 Apr 2024 17:38:59 +0000
ROA not after:            Mon 14 Apr 2025 17:43:59 +0000
asID:                     28345
IP address blocks:        200.189.40.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 11:36:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:14:cd:eb:59:df:72:23:2d:11:37:5f:b9:81:d9:9d:d5:22:a2:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Apr 15 17:38:59 2024 GMT
            Not After : Apr 14 17:43:59 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ca:e0:e5:80:59:75:3e:15:12:d3:6e:6f:ba:
                    0d:44:ba:bd:4c:81:04:46:9c:24:2b:41:e4:88:ef:
                    89:f8:6e:d1:f5:e9:4c:d1:92:9c:d2:e6:b5:17:0d:
                    d2:6d:57:60:8b:3a:af:0c:75:62:89:8c:87:ff:8a:
                    70:42:9a:ec:1a:85:f0:f3:6d:2c:ec:dc:0f:84:7d:
                    f3:ee:9a:6f:7c:eb:29:a4:d7:b5:bf:11:b0:76:a1:
                    d4:3a:5d:86:c8:fa:55:20:93:c4:ff:fd:5d:74:1c:
                    43:13:c2:1e:6f:da:36:82:f9:40:7d:41:fb:a1:6a:
                    66:25:18:f6:f6:e2:d5:13:2f:59:4d:0f:91:4a:5e:
                    c9:a0:3b:66:8c:90:b1:56:0d:ee:a1:8b:4f:14:d2:
                    7f:18:81:97:db:59:68:4e:71:01:73:dd:5f:84:fb:
                    6d:bd:20:dc:01:53:89:dc:40:b8:d6:6f:00:87:9a:
                    0a:83:06:c6:d5:db:bd:4d:90:22:53:b7:e3:69:24:
                    36:a7:a0:45:5f:a0:db:dd:b8:93:0f:18:78:95:ec:
                    9a:34:9f:8d:a1:8f:95:be:97:b7:cd:70:2a:be:48:
                    33:5d:3e:45:fc:f9:0a:b4:a9:06:f3:7d:bf:73:2d:
                    0f:9a:74:5c:44:68:f7:7f:31:c7:90:e8:9b:2c:86:
                    89:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C9:8C:DF:1B:D5:00:59:74:18:CB:8F:83:66:5D:E4:1A:13:AC:14
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3138392e34302e302f32332d3234203d3e203238333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.189.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:b3:89:70:cb:fc:fd:03:f4:99:5e:1a:ab:68:ff:b5:75:30:
         1f:bf:aa:86:65:4d:93:02:10:52:32:39:8b:cc:41:21:fd:6d:
         94:7f:1e:75:8a:92:e0:8b:e6:f6:15:c3:dc:5c:39:f3:8e:cd:
         f1:be:61:c2:f0:04:d8:34:90:51:b8:ce:7c:fd:32:4c:af:75:
         92:2a:1b:0f:84:c3:2e:b6:fc:62:70:66:90:d4:cd:d1:cd:72:
         23:a9:08:69:03:0b:2b:91:07:cd:ea:29:61:8a:7d:00:54:9f:
         d3:4f:6d:fa:d7:e0:22:47:bf:2b:36:50:1a:20:c6:23:77:0a:
         9b:1a:94:51:96:8f:96:7b:26:ad:45:1b:f9:7f:26:2f:de:4f:
         92:d3:20:17:a2:55:ed:64:01:06:90:d7:ba:aa:a3:a8:5a:d5:
         4f:7a:8d:3b:92:9e:13:f0:cc:42:ed:61:d6:6d:e2:25:1c:30:
         4b:8a:50:63:44:a2:2d:86:d8:3e:5d:37:91:b8:a6:a2:9c:91:
         d1:1f:89:4e:81:60:ad:ae:45:6a:96:c9:4f:30:8a:39:40:6b:
         38:a1:ca:be:b7:be:79:b4:d1:a6:2a:ea:d7:da:8a:20:37:38:
         48:48:9e:6b:b0:29:12:ad:08:71:71:35:6d:b8:91:7f:a2:83:
         58:cc:87:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:02:16 2024 by rpki-client on console-fra.rpki-client.org