Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3134342e302f32322d3332203d3e2030.roa
File:                     3230302e3231392e3134342e302f32322d3332203d3e2030.roa (raw, json)
Hash identifier:          PVn0+2Ov3/2YyJs0IxCa4goHDFa1VYftLVviJpfq0v0=
Subject key identifier:   AE:BA:13:75:4F:B6:E4:83:FB:21:A3:3D:6E:E6:98:53:7A:33:19:1A
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       4E87AA457BA4D7571CF8692E502878DB0D29D20D
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3134342e302f32322d3332203d3e2030.roa
Signing time:             Mon 15 Apr 2024 17:43:55 +0000
ROA not before:           Mon 15 Apr 2024 17:38:55 +0000
ROA not after:            Mon 14 Apr 2025 17:43:55 +0000
asID:                     0
IP address blocks:        200.219.144.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 11:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:87:aa:45:7b:a4:d7:57:1c:f8:69:2e:50:28:78:db:0d:29:d2:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Apr 15 17:38:55 2024 GMT
            Not After : Apr 14 17:43:55 2025 GMT
        Subject: CN=3082010A0282010100DCDACD6BC98C574D866972D4385112682A6A00E0745232F94744D3A2322F1A5C7C264795F4A34F1F6DFC146890DFE0AC525098FEC6B2F4D841F6336EBEDCA373E1CBD6D5EA4FC982AF563F6A929A872D5C01FB4C1D68348919DA60E0CD8EB998ABE7D3EF16BF134ECF480C10243D763ABD3F5CEDD59254C7F438183166003767282600B2CEF3E4524BA04A214E13EFA92B5761A7AAF2A3FABBB72E5C92D6272D3311D83EA88E40725EE1C6B32B27BD29800935327DE1A8272C3E6C24A9149F78B998D3361D23EBC194FFC7F5FB79F0D4335602635F4BF817C7865F1950103725CD0E749C9CE50973A7B30683C35659C4CF6C6D58679D7CB79D6FD0908330795B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:da:cd:6b:c9:8c:57:4d:86:69:72:d4:38:51:
                    12:68:2a:6a:00:e0:74:52:32:f9:47:44:d3:a2:32:
                    2f:1a:5c:7c:26:47:95:f4:a3:4f:1f:6d:fc:14:68:
                    90:df:e0:ac:52:50:98:fe:c6:b2:f4:d8:41:f6:33:
                    6e:be:dc:a3:73:e1:cb:d6:d5:ea:4f:c9:82:af:56:
                    3f:6a:92:9a:87:2d:5c:01:fb:4c:1d:68:34:89:19:
                    da:60:e0:cd:8e:b9:98:ab:e7:d3:ef:16:bf:13:4e:
                    cf:48:0c:10:24:3d:76:3a:bd:3f:5c:ed:d5:92:54:
                    c7:f4:38:18:31:66:00:37:67:28:26:00:b2:ce:f3:
                    e4:52:4b:a0:4a:21:4e:13:ef:a9:2b:57:61:a7:aa:
                    f2:a3:fa:bb:b7:2e:5c:92:d6:27:2d:33:11:d8:3e:
                    a8:8e:40:72:5e:e1:c6:b3:2b:27:bd:29:80:09:35:
                    32:7d:e1:a8:27:2c:3e:6c:24:a9:14:9f:78:b9:98:
                    d3:36:1d:23:eb:c1:94:ff:c7:f5:fb:79:f0:d4:33:
                    56:02:63:5f:4b:f8:17:c7:86:5f:19:50:10:37:25:
                    cd:0e:74:9c:9c:e5:09:73:a7:b3:06:83:c3:56:59:
                    c4:cf:6c:6d:58:67:9d:7c:b7:9d:6f:d0:90:83:30:
                    79:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:BA:13:75:4F:B6:E4:83:FB:21:A3:3D:6E:E6:98:53:7A:33:19:1A
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3134342e302f32322d3332203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:06:52:a2:b9:57:8c:66:ef:43:ba:b7:8a:61:0c:87:8f:32:
         b7:e6:50:8d:98:9d:7e:18:ce:c2:65:70:80:f1:83:f2:7d:fc:
         db:0f:82:b5:b1:78:37:00:84:a1:d7:a3:c3:7c:07:5f:13:b5:
         99:0d:2e:91:f7:f5:20:a5:15:86:89:cb:b6:99:73:10:49:b5:
         3b:6d:4a:8d:ad:2d:a6:7c:2c:6c:43:48:b4:ae:0b:ed:3b:3e:
         b6:d5:3d:25:6b:05:3d:82:9d:e6:3c:c2:35:c0:90:63:ac:58:
         a4:b8:82:b8:bb:bd:44:45:3b:19:07:6b:8f:26:52:2d:98:6b:
         c7:04:47:99:71:cb:df:15:5c:f5:8b:4d:75:c6:24:6a:d4:52:
         55:db:48:a4:56:e6:ce:0a:5e:0e:a2:80:f2:5b:b4:e1:86:1f:
         3b:c6:6d:bd:c0:f6:d1:bc:48:b1:8a:42:8b:8d:31:2e:12:20:
         e4:7b:0e:98:a5:ea:b1:82:ff:ff:5f:90:39:8e:5c:9e:46:b8:
         5d:6d:e7:f5:db:09:96:02:5f:77:53:49:12:96:21:1b:b6:8d:
         3d:6c:7e:73:f6:d8:9a:62:f0:c8:df:18:1a:16:30:e1:4e:67:
         5c:8c:52:b3:a4:92:dc:d6:cf:2d:f8:57:17:13:73:67:6b:d4:
         a7:3c:98:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:13 2024 by rpki-client on console-fra.rpki-client.org