Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3139322e3130382e302f32322d3332203d3e2030.roa
File:                     3230302e3139322e3130382e302f32322d3332203d3e2030.roa (raw, json)
Hash identifier:          V9LpmeqMjX9G9sNCyzFSFM675nzhPbwi5JPd34RM9Tk=
Subject key identifier:   B3:12:D4:F1:51:E6:34:CB:50:64:98:9E:44:C8:E1:86:4F:3C:76:61
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       107791EC81456C1AA962042F77AB19E42E9C7FD8
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3139322e3130382e302f32322d3332203d3e2030.roa
Signing time:             Mon 15 Apr 2024 17:43:59 +0000
ROA not before:           Mon 15 Apr 2024 17:38:59 +0000
ROA not after:            Mon 14 Apr 2025 17:43:59 +0000
asID:                     0
IP address blocks:        200.192.108.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 11:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:77:91:ec:81:45:6c:1a:a9:62:04:2f:77:ab:19:e4:2e:9c:7f:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Apr 15 17:38:59 2024 GMT
            Not After : Apr 14 17:43:59 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:dc:48:40:aa:ac:38:e4:52:90:cc:93:51:4f:
                    bd:b7:61:3f:2c:94:fb:db:ce:e1:0f:43:25:99:b9:
                    03:0f:05:ce:7b:3f:fa:1e:a3:ec:11:3b:f4:c2:1f:
                    31:e0:4c:e1:e7:53:e6:db:dd:9f:c7:20:6a:0e:bf:
                    60:48:02:17:ce:53:59:53:00:a1:c5:d5:2c:ad:63:
                    64:bf:11:42:af:cf:80:0c:5b:6c:6c:e7:29:99:86:
                    46:53:4f:0d:9f:bf:cf:f1:2c:77:be:e9:84:44:62:
                    5d:4f:04:fa:75:1d:09:70:97:25:e3:a3:11:8d:bb:
                    a0:fc:1d:52:c8:10:10:dc:26:d1:f1:fe:83:7c:5d:
                    e5:6b:fc:0f:17:b0:ed:f8:06:e5:4e:05:1e:46:3d:
                    f7:f0:f4:57:ce:83:e1:2b:ef:4a:c5:95:56:ce:89:
                    53:76:6c:6c:62:9c:27:90:a5:6a:eb:a0:56:b2:e8:
                    4f:e8:ae:f0:ee:8a:ef:d8:aa:af:27:28:fd:6f:d9:
                    7e:a3:f1:99:50:78:3b:3b:76:69:0f:66:15:8a:1f:
                    34:1b:ac:1f:0b:27:2b:b9:b4:7f:e1:2c:ae:80:59:
                    73:63:37:01:ae:82:2b:37:e3:25:bf:00:56:11:d7:
                    f8:48:2b:f4:c3:44:c9:ee:25:13:0d:24:68:fd:62:
                    8b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:12:D4:F1:51:E6:34:CB:50:64:98:9E:44:C8:E1:86:4F:3C:76:61
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3139322e3130382e302f32322d3332203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.192.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:de:4b:91:ac:3b:91:b9:22:d6:6b:09:ca:b3:87:41:da:06:
         95:d3:ef:45:5f:12:33:44:6a:d5:53:b6:ca:96:6a:31:71:b5:
         c4:68:60:54:b6:4c:73:0b:93:be:7b:b9:c7:fa:ff:41:9e:32:
         ec:9b:cf:91:bc:0e:47:7d:dd:ca:78:c0:3d:26:d1:ea:ce:06:
         3f:36:5c:49:cd:0b:ca:cb:7f:09:6f:81:3d:1b:d3:5f:20:58:
         5c:ca:45:1d:e7:4a:7a:e1:17:37:46:45:ef:65:25:fc:76:db:
         80:ba:e4:4e:9b:1d:af:45:93:2d:1f:a4:9d:49:ea:e3:9a:b2:
         53:e5:a7:43:61:94:83:ac:2a:5d:b6:41:d5:fb:70:18:53:20:
         45:1b:e0:93:2c:4b:0e:94:09:a5:fb:05:f4:f9:c9:7a:69:50:
         87:41:1d:37:f0:73:d1:eb:8a:ec:bc:a7:3e:b0:5b:6d:ab:5c:
         54:69:b2:6e:3e:a3:a5:dd:52:c0:94:2b:27:b2:27:88:ef:5f:
         03:54:57:72:ab:4b:10:8c:6e:2d:08:c3:01:71:76:a1:e7:21:
         13:f6:5a:f0:1e:65:4a:19:ee:73:a8:7b:b5:58:71:ff:4a:84:
         76:8c:bd:05:b9:48:42:63:43:8e:8b:59:f6:3d:3e:c7:df:2c:
         d2:9d:9d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:56 2024 by rpki-client on console-ams.rpki-client.org