Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3133302e302f32332d3332203d3e2030.roa
File:                     3230302e3231392e3133302e302f32332d3332203d3e2030.roa (raw, json)
Hash identifier:          ZJpnoFUC71CXjTcYtN4v4KreSpDQkiQGDaQ2qvTyo0M=
Subject key identifier:   A2:05:C9:B5:A5:78:29:20:AA:F8:E5:B7:91:43:03:34:C7:7E:BE:FB
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       322C523DEC641C9D7EC25718FB5DCF4738131122
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3133302e302f32332d3332203d3e2030.roa
Signing time:             Mon 15 Apr 2024 17:43:58 +0000
ROA not before:           Mon 15 Apr 2024 17:38:58 +0000
ROA not after:            Mon 14 Apr 2025 17:43:58 +0000
asID:                     0
IP address blocks:        200.219.130.0/23 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 11:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:2c:52:3d:ec:64:1c:9d:7e:c2:57:18:fb:5d:cf:47:38:13:11:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Apr 15 17:38:58 2024 GMT
            Not After : Apr 14 17:43:58 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2c:f3:f9:e4:f0:f2:e6:70:db:d4:33:1a:33:
                    9f:b0:32:b7:ec:34:f0:7f:42:a2:69:d9:1f:bd:69:
                    90:be:01:3b:c1:0b:3b:36:b3:62:b4:9d:a5:71:26:
                    99:85:d0:9d:30:a2:61:7b:75:23:8b:29:41:73:95:
                    99:14:f1:dd:6a:d5:f8:ca:36:99:2c:fe:e0:46:dc:
                    29:a2:aa:a9:0a:c7:c0:24:72:97:34:ef:69:47:ae:
                    72:6a:9d:62:08:91:b9:fe:05:c4:fc:c3:3b:dc:db:
                    87:5d:b3:c2:fd:7e:89:3b:29:d9:ae:3f:6a:40:1b:
                    26:d6:27:db:c0:0e:86:8d:e6:dd:9f:81:67:5e:2f:
                    2a:9d:c7:71:c8:fe:ad:34:f4:2a:75:6d:0a:63:35:
                    c8:15:d3:b8:4a:52:65:3f:63:98:9b:9e:18:52:27:
                    15:69:b5:c6:09:9a:26:3e:01:b9:9c:b2:5e:9d:68:
                    d2:b7:ef:20:d5:ad:03:0c:58:bc:34:7d:5e:73:b0:
                    64:dc:86:24:3c:3d:84:21:a2:ba:32:b4:b9:46:ee:
                    a1:65:1e:1b:bf:91:5b:f1:b0:43:90:7a:0e:d2:c1:
                    b4:57:34:48:69:3a:b8:33:11:2b:5f:d1:f2:92:b1:
                    3b:95:7d:dc:6a:09:e5:de:d4:f7:56:d2:23:a7:45:
                    b5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:05:C9:B5:A5:78:29:20:AA:F8:E5:B7:91:43:03:34:C7:7E:BE:FB
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3133302e302f32332d3332203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:c9:3c:d5:91:98:bb:2b:3a:fe:e4:6e:12:8a:ee:44:32:8c:
         9d:ae:19:3a:be:03:d3:a9:22:3b:e1:1c:d8:85:47:7d:71:12:
         24:ec:7d:6d:c3:98:6a:f3:08:fd:26:69:10:1b:fd:f6:db:6b:
         f4:d2:47:58:66:50:5f:27:bb:3f:ff:1a:1e:7d:04:fe:e5:fa:
         e7:b5:83:73:ef:21:1f:ec:c9:78:aa:1a:8c:23:80:32:71:1d:
         9c:09:a3:e5:d8:1d:f2:bc:45:4c:5a:8c:5c:1c:00:5b:6f:e1:
         54:c6:bd:e5:44:4f:5e:25:01:4b:7b:ce:98:d2:76:dc:e1:c7:
         d2:41:47:90:0d:84:31:e1:1a:97:58:a9:70:ff:e2:d5:07:f6:
         a2:76:4a:d6:b7:9a:2b:f4:3f:95:9e:5a:fa:6e:c8:ea:5c:16:
         5c:3e:9c:54:07:ec:de:93:4c:43:71:de:ad:fb:84:42:b4:a3:
         96:b8:92:7f:87:74:5d:f8:e4:f1:89:20:5a:53:50:1c:b4:34:
         03:e3:51:d5:0a:87:d7:33:c8:04:0c:02:5f:f6:19:66:82:e5:
         11:a6:6e:ed:4b:c5:3b:41:b8:88:33:e2:db:37:98:d4:ec:71:
         0a:f0:7f:07:18:2f:91:01:5e:f3:b0:4b:40:93:29:95:d3:94:
         13:51:19:95
-----BEGIN CERTIFICATE-----
MIIHOzCCBiOgAwIBAgIUMixSPexkHJ1+wlcY+13PRzgTESIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjMyNTE5QTlDMjdCM0IyODY5QUMzMEVERjI5NkI0ODRF
NDRCRjFGMDAeFw0yNDA0MTUxNzM4NThaFw0yNTA0MTQxNzQzNThaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREUyQ0YzRjlFNEYwRjJFNjcw
REJENDMzMUEzMzlGQjAzMkI3RUMzNEYwN0Y0MkEyNjlEOTFGQkQ2OTkwQkUwMTNC
QzEwQjNCMzZCMzYyQjQ5REE1NzEyNjk5ODVEMDlEMzBBMjYxN0I3NTIzOEIyOTQx
NzM5NTk5MTRGMURENkFENUY4Q0EzNjk5MkNGRUUwNDZEQzI5QTJBQUE5MEFDN0Mw
MjQ3Mjk3MzRFRjY5NDdBRTcyNkE5RDYyMDg5MUI5RkUwNUM0RkNDMzNCRENEQjg3
NURCM0MyRkQ3RTg5M0IyOUQ5QUUzRjZBNDAxQjI2RDYyN0RCQzAwRTg2OERFNkRE
OUY4MTY3NUUyRjJBOURDNzcxQzhGRUFEMzRGNDJBNzU2RDBBNjMzNUM4MTVEM0I4
NEE1MjY1M0Y2Mzk4OUI5RTE4NTIyNzE1NjlCNUM2MDk5QTI2M0UwMUI5OUNCMjVF
OUQ2OEQyQjdFRjIwRDVBRDAzMEM1OEJDMzQ3RDVFNzNCMDY0REM4NjI0M0MzRDg0
MjFBMkJBMzJCNEI5NDZFRUExNjUxRTFCQkY5MTVCRjFCMDQzOTA3QTBFRDJDMUI0
NTczNDQ4NjkzQUI4MzMxMTJCNUZEMUYyOTJCMTNCOTU3RERDNkEwOUU1REVENEY3
NTZEMjIzQTc0NUI1NEYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA3izz+eTw8uZw29QzGjOfsDK37DTwf0KiadkfvWmQvgE7wQs7NrNi
tJ2lcSaZhdCdMKJhe3UjiylBc5WZFPHdatX4yjaZLP7gRtwpoqqpCsfAJHKXNO9p
R65yap1iCJG5/gXE/MM73NuHXbPC/X6JOynZrj9qQBsm1ifbwA6Gjebdn4FnXi8q
ncdxyP6tNPQqdW0KYzXIFdO4SlJlP2OYm54YUicVabXGCZomPgG5nLJenWjSt+8g
1a0DDFi8NH1ec7Bk3IYkPD2EIaK6MrS5Ru6hZR4bv5Fb8bBDkHoO0sG0VzRIaTq4
MxErX9HykrE7lX3cagnl3tT3VtIjp0W1TwIDAQABo4ICSTCCAkUwHQYDVR0OBBYE
FKIFybWleCkgqvjlt5FDAzTHfr77MB8GA1UdIwQYMBaAFGMlGanCezsoaaww7fKW
tITkS/HwMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0EyeDZpY2FLcFZXUDV1
VUJ6SlF6UnZFcGp2UzdQVlc3WjJFcjRGMnF0MUN0LzIvNjMyNTE5QTlDMjdCM0Iy
ODY5QUMzMEVERjI5NkI0ODRFNDRCRjFGMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS82MzI1MTlBOUMyN0IzQjI4NjlBQzMwRURGMjk2QjQ4NEU0NEJG
MUYwLmNlcjCBpgYIKwYBBQUHAQsEgZkwgZYwgZMGCCsGAQUFBzALhoGGcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BMng2aWNhS3BWV1A1dVVCekpR
elJ2RXBqdlM3UFZXN1oyRXI0RjJxdDFDdC8yLzMyMzAzMDJlMzIzMTM5MmUzMTMz
MzAyZTMwMmYzMjMzMmQzMzMyMjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcjbgjANBgkq
hkiG9w0BAQsFAAOCAQEAiMk81ZGYuys6/uRuEoruRDKMna4ZOr4D06kiO+Ec2IVH
fXESJOx9bcOYavMI/SZpEBv99ttr9NJHWGZQXye7P/8aHn0E/uX657WDc+8hH+zJ
eKoajCOAMnEdnAmj5dgd8rxFTFqMXBwAW2/hVMa95URPXiUBS3vOmNJ23OHH0kFH
kA2EMeEal1ipcP/i1Qf2onZK1reaK/Q/lZ5a+m7I6lwWXD6cVAfs3pNMQ3HerfuE
QrSjlriSf4d0Xfjk8YkgWlNQHLQ0A+NR1QqH1zPIBAwCX/YZZoLlEaZu7UvFO0G4
iDPi2zeY1OxxCvB/BxgvkQFe87BLQJMpldOUE1EZlQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:56 2024 by rpki-client on console-ams.rpki-client.org