Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3135342e302f32332d3234203d3e203238333435.roa
File:                     3230302e3231392e3135342e302f32332d3234203d3e203238333435.roa (raw, json)
Hash identifier:          RJ1dr6vSwKvn8GA5/672QiRoUCY0RR/aAjDOOcc9FK0=
Subject key identifier:   AE:BB:B8:41:F8:D2:C0:70:5C:D3:19:F7:AA:1A:65:E1:94:41:BC:13
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       71C90971ACD71FBA881727877B603F93A3928099
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3135342e302f32332d3234203d3e203238333435.roa
Signing time:             Mon 15 Apr 2024 17:43:57 +0000
ROA not before:           Mon 15 Apr 2024 17:38:57 +0000
ROA not after:            Mon 14 Apr 2025 17:43:57 +0000
asID:                     28345
IP address blocks:        200.219.154.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 03:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:c9:09:71:ac:d7:1f:ba:88:17:27:87:7b:60:3f:93:a3:92:80:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Apr 15 17:38:57 2024 GMT
            Not After : Apr 14 17:43:57 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:46:93:71:5c:76:2d:ae:f6:80:92:af:f4:c9:
                    56:a9:32:7c:a9:15:1f:79:6b:9b:c2:dd:3e:77:26:
                    87:a0:bc:c2:39:b9:14:2b:ad:b8:80:b4:9c:d6:d7:
                    30:bf:0e:48:52:d8:c4:6f:6e:db:7f:ad:c2:4f:0b:
                    4c:41:5c:e8:b5:83:6d:4f:ee:0a:9a:26:e6:33:ea:
                    a5:18:b8:f9:50:ef:14:9c:67:f1:c5:62:19:98:75:
                    9d:1e:c3:f2:6d:e9:40:af:3a:41:5a:6e:da:ad:29:
                    02:aa:92:43:16:82:66:7d:08:0a:d7:75:c2:d3:2e:
                    ca:60:34:30:28:da:e3:d4:f6:23:6a:a7:0f:47:50:
                    fe:84:62:6d:28:54:6e:01:21:db:e8:26:f5:a6:2b:
                    92:46:dd:e5:8a:e0:c7:51:60:fe:56:e2:ae:76:33:
                    4d:d7:4c:35:41:5f:74:a4:6c:e7:70:ad:74:f6:6f:
                    27:56:0d:6f:04:ea:61:23:57:24:69:87:c4:70:7d:
                    68:c0:c9:e1:59:1a:62:4a:be:ab:e1:32:4a:e6:7e:
                    9a:bb:a8:37:bb:e1:46:83:5d:5a:77:6f:46:59:2c:
                    57:28:cd:f5:32:70:6a:df:a3:46:e4:44:8d:ca:ff:
                    91:7a:90:76:04:62:fd:7d:03:0a:99:28:c4:37:1a:
                    80:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:BB:B8:41:F8:D2:C0:70:5C:D3:19:F7:AA:1A:65:E1:94:41:BC:13
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3135342e302f32332d3234203d3e203238333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:c7:8a:37:85:81:1e:b1:35:52:9c:75:6d:33:5e:cd:69:f0:
         95:a1:a2:47:85:ac:58:1a:03:41:95:2a:13:b4:7b:18:d2:ff:
         b3:be:4a:fb:24:e2:eb:e3:c1:96:03:5c:38:7a:34:c9:74:23:
         64:6b:8f:d6:6c:95:53:b5:fc:e4:df:a9:8d:ae:e9:8a:a8:43:
         11:d6:48:99:93:c9:59:57:bb:15:4f:66:06:c5:83:59:15:01:
         61:ba:d3:41:62:62:64:c7:cb:7c:e3:ad:29:75:24:79:09:26:
         02:19:94:42:02:9d:e0:c6:78:7b:24:70:46:f2:2f:87:32:d1:
         f5:07:30:11:ba:28:14:8b:0f:e0:1c:66:91:88:45:26:44:d6:
         e8:cc:18:64:63:1f:8a:48:de:0f:3f:3e:5a:3e:28:a5:bc:bf:
         a2:b9:f2:4e:83:a8:41:77:10:fb:92:7f:f2:a3:ce:d9:fa:c1:
         33:b9:7c:de:84:fa:09:a7:25:34:7a:ea:0e:ec:6e:17:32:b8:
         0b:60:32:ad:70:74:59:e3:88:e0:58:d6:4e:0d:d8:ae:b0:9a:
         50:80:ad:f5:01:23:fe:8d:81:e7:1f:a0:9a:ca:42:91:c2:18:
         ca:e2:65:b8:e3:17:ad:f8:51:e8:8b:32:c3:5c:6f:59:a6:62:
         48:2f:7b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:34:03 2024 by rpki-client on console-ams.rpki-client.org