Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3134382e302f3234203d3e203238333435.roa
File:                     3230302e3231392e3134382e302f3234203d3e203238333435.roa (raw, json)
Hash identifier:          33wO7tAfxOXsGPNuNZX0HsU3qSBhwvkLbPJI2dKRq0w=
Subject key identifier:   AD:B2:7E:BA:CF:5C:7B:BD:CE:30:8C:67:F5:55:CE:1F:8C:E6:D4:13
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       417844829C8FE3EE0AED187709FF68BA19015084
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3134382e302f3234203d3e203238333435.roa
Signing time:             Mon 15 Apr 2024 17:43:58 +0000
ROA not before:           Mon 15 Apr 2024 17:38:58 +0000
ROA not after:            Mon 14 Apr 2025 17:43:58 +0000
asID:                     28345
IP address blocks:        200.219.148.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 03:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:78:44:82:9c:8f:e3:ee:0a:ed:18:77:09:ff:68:ba:19:01:50:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Apr 15 17:38:58 2024 GMT
            Not After : Apr 14 17:43:58 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bd:71:00:57:1b:28:ab:f5:40:e2:7c:61:fc:
                    e8:49:ff:09:b2:ff:17:17:ea:c2:a2:23:5a:ad:a7:
                    69:8e:a1:4a:08:5c:68:fb:14:47:9d:4b:fd:af:0c:
                    0b:55:18:2d:a0:60:c3:99:ac:81:f5:0a:e5:81:c2:
                    a6:76:97:1c:06:5c:60:31:9e:5e:95:a1:cc:ec:e9:
                    76:19:5e:fe:36:02:eb:8d:20:24:5d:c4:b0:b0:52:
                    a8:c8:68:6d:2b:29:03:a1:43:e0:3d:00:cd:be:84:
                    d3:22:bd:9a:cb:00:11:38:d4:f6:8e:86:8c:c3:e4:
                    50:59:f4:51:62:ff:0d:f2:63:b0:12:68:f2:6f:8d:
                    67:19:5c:3f:78:4e:48:3b:e0:c8:55:c6:4e:b5:3a:
                    6c:ed:d2:ef:d5:41:5f:55:46:f6:e7:81:ea:1b:1d:
                    30:b8:4f:ba:fe:af:db:a1:12:62:29:60:fe:a9:62:
                    43:5d:b3:e6:7c:9b:18:8c:30:f6:42:4c:c1:33:85:
                    2c:40:fb:a5:65:35:9e:8e:08:d5:b1:28:27:f0:79:
                    07:4c:47:05:1d:0b:4d:03:88:e9:de:47:91:75:b7:
                    1d:9a:0f:8f:9a:05:c0:a1:e1:5c:8c:ea:33:1c:02:
                    d2:81:b7:51:07:89:89:3b:c6:10:ff:2a:7b:a2:58:
                    44:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B2:7E:BA:CF:5C:7B:BD:CE:30:8C:67:F5:55:CE:1F:8C:E6:D4:13
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3134382e302f3234203d3e203238333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:a5:e0:66:f3:d6:59:9e:2b:cb:2b:5b:0d:a6:03:1d:b3:cd:
         78:8d:32:16:aa:e8:90:cd:3c:0a:22:e9:ee:f1:7a:58:35:4b:
         aa:3f:c7:f0:06:10:7d:c9:2a:07:83:63:ff:e4:bf:a1:82:74:
         84:49:c6:fa:bf:27:76:55:aa:8a:3c:44:73:7d:0a:e3:2f:f1:
         e7:21:d6:a5:69:72:30:30:99:18:6d:d8:54:08:a3:dd:50:af:
         a2:93:a7:ea:6b:46:67:ef:6d:dc:29:3e:8d:0e:3a:2f:8b:ee:
         0c:87:26:b7:b6:49:ad:70:94:31:db:e9:11:60:38:a1:65:33:
         51:71:a2:3c:e5:9e:c1:f4:01:06:2d:c2:d0:5c:e2:9d:17:80:
         b6:37:49:aa:65:f3:68:4b:cf:80:6f:09:e3:c6:bf:f9:41:c3:
         2a:9a:05:13:88:9c:13:b0:0e:32:17:e7:fd:43:da:10:1a:25:
         b4:8f:4a:62:d3:a6:ec:9a:6a:f5:f1:7d:06:bf:61:77:4d:56:
         df:b4:fd:d9:ab:92:55:9e:6b:47:f2:51:48:0b:a8:69:3b:0d:
         bd:23:90:27:72:5e:5a:7a:9a:42:cd:e4:0f:28:35:49:44:2f:
         e2:d8:16:af:7a:ef:44:fd:07:b5:64:57:78:79:c0:ea:c7:0b:
         32:77:0d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:34:03 2024 by rpki-client on console-ams.rpki-client.org