Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3135342e302f32332d3234203d3e203131343331.roa
File:                     3230302e3231392e3135342e302f32332d3234203d3e203131343331.roa (raw, json)
Hash identifier:          FM9cdBwHBdowOAuAOkV/8bGEAnpBZHll4jeJCV97X0A=
Subject key identifier:   4D:EB:C6:4C:8D:F1:26:57:5C:70:3E:52:29:D6:97:D8:8B:76:CE:56
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       5257FDD4579651C6D5E6FF346439AF8FD8551035
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3135342e302f32332d3234203d3e203131343331.roa
Signing time:             Mon 15 Apr 2024 17:43:57 +0000
ROA not before:           Mon 15 Apr 2024 17:38:57 +0000
ROA not after:            Mon 14 Apr 2025 17:43:57 +0000
asID:                     11431
IP address blocks:        200.219.154.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 11:36:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:57:fd:d4:57:96:51:c6:d5:e6:ff:34:64:39:af:8f:d8:55:10:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Apr 15 17:38:57 2024 GMT
            Not After : Apr 14 17:43:57 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b3:11:02:e0:a1:1c:24:17:5a:5b:da:aa:4f:
                    29:4e:65:93:fc:a9:55:9c:a0:e9:06:a9:5a:09:df:
                    bb:0f:b7:fe:df:6b:60:22:8c:1d:cc:7b:25:e5:8f:
                    a8:61:97:61:17:13:88:14:45:a2:af:ba:90:65:b4:
                    c6:a1:2f:f3:f7:75:a7:7d:d1:fe:ef:36:ed:89:58:
                    ce:54:df:54:66:06:15:42:13:84:fb:c0:54:80:e7:
                    3f:97:11:54:7f:09:51:7e:25:f4:cf:7c:3c:b3:bf:
                    d6:9c:66:dd:b5:57:5b:ab:82:38:4c:cf:fb:52:31:
                    bf:c0:19:3c:cf:b8:9b:68:84:ae:87:e8:16:c6:9a:
                    f6:c0:57:60:a7:cc:89:25:a4:9b:22:42:59:78:dd:
                    31:a7:19:20:f9:3b:14:1d:30:21:1a:ec:63:b4:0f:
                    87:6e:94:01:e9:11:db:aa:a4:0b:df:80:c9:90:0d:
                    92:c2:aa:57:5d:0c:19:0a:42:10:f6:d6:63:ee:8b:
                    53:31:8b:fd:0e:a1:d7:a5:bd:e1:68:59:25:60:4e:
                    63:d2:ce:e8:87:f5:cf:64:53:05:61:aa:55:f9:05:
                    22:0b:8b:62:2c:47:ed:12:66:c1:c0:17:04:91:d4:
                    8a:36:3f:a8:ee:c0:0b:7e:4e:5d:cc:ae:84:3c:a0:
                    7a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:EB:C6:4C:8D:F1:26:57:5C:70:3E:52:29:D6:97:D8:8B:76:CE:56
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3135342e302f32332d3234203d3e203131343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c3:32:6a:26:2e:36:55:48:ce:65:10:66:f2:16:30:b8:4d:0f:
         ab:97:e5:76:07:3f:5a:d7:67:8c:06:a6:77:cb:43:79:34:38:
         8f:ad:80:af:7b:86:9c:29:a9:22:79:a9:aa:07:94:3c:ff:bc:
         78:4d:1a:7a:43:1f:23:15:c5:48:bd:08:e8:6f:8a:6d:1e:1d:
         76:e9:8a:b8:99:b4:6e:50:3c:07:1d:b7:03:70:96:ac:b5:73:
         4f:9e:6c:aa:d2:f0:f1:16:07:a4:18:6a:15:2b:25:4a:76:2f:
         49:ad:23:5a:ac:09:9c:8e:1f:2a:88:20:b8:42:ea:05:5a:f7:
         b2:c4:c0:7b:38:30:da:da:40:d0:90:19:8b:12:57:9d:d0:6a:
         c9:e1:2e:0b:22:6f:d2:88:5e:c1:3d:ef:17:b9:c3:ce:47:76:
         95:4e:dc:37:3b:9f:35:5a:ca:8b:ef:2e:10:c1:0f:54:3c:21:
         62:72:22:bc:a4:2d:16:ed:66:62:8a:28:c8:66:51:08:1d:f1:
         43:ba:4a:f6:70:f3:36:3b:9f:03:b7:74:ab:28:b9:97:1b:fb:
         c1:60:24:44:56:7d:89:b5:c8:4c:29:8c:28:df:b1:60:21:17:
         ff:ad:d7:10:77:7c:ba:83:1b:4f:9e:b5:e6:25:43:33:21:77:
         dd:c9:65:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:14:48 2024 by rpki-client on console-ams.rpki-client.org